Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/754f3a83-d813-3cc1-91cb-f2725ea50306.roa
File:                     754f3a83-d813-3cc1-91cb-f2725ea50306.roa (raw, json)
Hash identifier:          sRXKJ3Ywuu1IfYb18xx0DImD88TSh7W4+glzzR0dqJE=
Subject key identifier:   9A:CA:92:56:45:32:A2:E8:4C:62:5D:46:8D:CA:27:71:6F:F6:28:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE3F2EE30E340CB9DE6400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/754f3a83-d813-3cc1-91cb-f2725ea50306.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33489
IP address blocks:        2001:559:164::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:3f:2e:e3:0e:34:0c:b9:de:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=66980f54-a093-477a-9b4f-0562e9188c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d8:19:66:87:e0:dd:d3:f2:dc:2c:7c:d1:ff:
                    b6:bf:6f:22:06:11:b6:3d:cc:d3:44:10:c3:ed:ff:
                    f2:a6:a4:65:ba:06:49:3a:b1:d6:22:2b:d0:61:93:
                    14:3f:e0:59:f0:31:8f:58:2d:c5:3d:bc:66:d2:24:
                    c1:81:d3:00:22:6f:9f:60:33:28:3c:32:2f:53:d9:
                    fd:14:ba:98:96:f2:97:7b:e3:9b:8a:b5:83:95:7d:
                    85:4b:93:c9:4d:0b:aa:9d:42:f4:28:ab:2d:ca:7b:
                    94:71:ab:af:f9:99:02:7d:5d:45:d0:aa:25:e5:f2:
                    f2:9d:49:a0:94:04:e0:d6:e3:b4:0d:9b:54:80:54:
                    f9:63:cf:72:33:be:9a:59:e4:a5:33:68:3e:72:9a:
                    70:18:2e:e2:c8:fa:1f:23:59:8a:88:45:f0:28:fb:
                    ea:ec:fe:07:58:31:e2:5e:68:d4:60:4c:b6:d9:5d:
                    ed:9e:ca:d0:01:8c:5b:0f:13:63:41:ad:ae:74:fe:
                    9d:7f:2b:d9:ec:a3:09:b9:3e:10:da:f9:bd:b4:76:
                    a1:1f:c1:e1:55:d8:df:b6:ee:f3:24:10:f4:7a:05:
                    df:36:4b:a7:70:30:87:d4:21:df:c6:d8:e4:58:6b:
                    71:8c:37:16:e2:8a:c1:20:e4:33:7e:a6:18:60:e4:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CA:92:56:45:32:A2:E8:4C:62:5D:46:8D:CA:27:71:6F:F6:28:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/754f3a83-d813-3cc1-91cb-f2725ea50306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:164::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:94:6e:53:a1:99:74:f6:3b:cb:8c:2c:95:fa:b5:86:24:e7:
         35:ce:98:40:8d:a1:c5:c8:55:48:22:fa:0b:3a:6c:a2:7a:64:
         44:07:2b:10:75:e9:fa:99:5e:df:f3:6a:1b:7f:ec:f5:bb:70:
         6d:c8:9d:99:ee:90:98:35:0f:dd:7d:99:32:3f:9e:3e:24:1b:
         36:61:75:cb:7c:da:32:35:5b:ff:d1:fb:99:5e:42:8c:dc:63:
         12:7a:c8:07:19:35:87:f4:26:9e:88:86:93:a3:96:d2:8e:70:
         15:e9:9a:0f:fd:81:fe:e4:94:9f:69:f1:71:67:d6:a3:fe:85:
         db:7b:b2:b9:e4:ad:9c:db:a5:53:7d:d1:6f:c1:95:5e:21:e4:
         33:d3:75:a8:f6:90:37:94:3b:b3:8b:0b:83:f5:5e:0c:81:d2:
         02:19:fc:db:2d:fc:17:82:31:7e:fb:4d:da:1d:b9:3b:fd:10:
         1c:b6:60:50:28:e0:47:73:06:0c:99:9f:f2:c8:18:6a:61:04:
         d7:9d:8d:57:22:1e:b3:f7:7e:da:db:f4:2d:8e:f0:09:b4:ac:
         05:e5:a4:52:7c:22:19:d6:37:66:a8:9e:08:84:d5:63:ae:38:
         33:db:b5:0d:8b:ca:14:cb:20:fd:de:19:41:7d:ce:bc:d2:87:
         70:42:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:18:17 2024 by rpki-client on console-ams.rpki-client.org