Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/841bbb54-1ee5-33dc-9947-5d543b3da24d.roa
File:                     841bbb54-1ee5-33dc-9947-5d543b3da24d.roa (raw, json)
Hash identifier:          D5PPNXXQlz0QcQ3P8MEsraMjvzhQlhhoyhfaf1HZ+Qk=
Subject key identifier:   BE:BE:1A:B5:9C:60:75:96:45:ED:31:32:52:AC:46:77:B3:BF:89:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC4C87D9AA0D546117E100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/841bbb54-1ee5-33dc-9947-5d543b3da24d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        2001:559:c286::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:4c:87:d9:aa:0d:54:61:17:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=41f7fdfd-d954-4982-a6dc-a9be078f6e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:b8:bc:f0:b0:d1:e3:0f:cc:d7:d9:d3:22:
                    37:0c:ce:a6:7b:fc:35:48:c7:a9:3e:38:2c:1d:2a:
                    7c:01:f5:8f:8c:e1:f6:fa:94:dd:b6:da:31:2c:15:
                    c2:2f:50:33:2f:af:fb:cf:bb:97:e8:89:d8:46:dc:
                    3e:fb:d3:88:ae:75:7d:7d:74:96:6b:17:12:01:a3:
                    16:d3:e3:bf:3c:89:2e:33:ab:28:24:f8:22:1f:1f:
                    b2:d2:82:be:c9:c3:be:ce:4d:34:f0:0e:ec:44:25:
                    25:cb:52:17:d7:90:4d:c8:76:e6:c2:3a:bd:d0:0f:
                    b3:cb:39:1e:bb:da:30:11:fa:b8:de:2e:78:7a:ea:
                    ec:f4:f9:ea:ff:73:0d:96:92:e0:66:a4:b7:c9:97:
                    57:bc:23:6f:36:0b:d6:0d:44:86:4e:69:67:1a:47:
                    bc:d2:f5:33:0c:eb:52:40:57:12:40:e9:73:ca:ff:
                    97:48:41:2e:50:53:4b:23:47:3c:60:ed:a1:73:86:
                    06:e2:5f:53:bc:12:50:de:b5:d4:18:4a:f9:72:6a:
                    61:ec:fb:e5:78:36:98:ec:6e:a7:cc:a4:13:55:74:
                    5e:59:f3:52:81:cd:c4:a6:6c:6c:91:95:df:7b:b8:
                    68:97:9b:94:c1:01:ff:e6:03:0f:3d:06:a3:1e:fa:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:1A:B5:9C:60:75:96:45:ED:31:32:52:AC:46:77:B3:BF:89:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/841bbb54-1ee5-33dc-9947-5d543b3da24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c286::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:9f:87:d2:92:da:19:bc:84:e1:c8:6a:21:4a:9d:4b:23:f1:
         53:a0:4d:eb:78:8f:d5:e9:54:1b:88:2e:63:cd:83:ea:f4:ac:
         83:3f:46:61:26:67:93:78:b4:4d:3a:4e:e6:68:09:92:eb:f8:
         bf:9c:c5:e7:85:42:25:54:8a:49:df:dd:3d:2f:8e:a1:61:ec:
         f6:19:9b:6e:95:e7:2d:b5:81:e4:b0:cf:ac:a7:43:16:d4:47:
         86:fc:ff:5f:82:14:fe:39:83:e0:66:00:28:96:9e:4a:e0:28:
         21:92:ed:9c:1c:5c:df:e7:b4:01:50:6b:1f:d7:69:0d:bb:d4:
         9b:fa:8d:20:e2:65:f1:47:5d:c5:7f:4f:85:14:86:0e:a5:90:
         b8:d8:27:78:e3:2b:f3:7c:45:04:e4:fb:59:82:50:37:5e:61:
         68:d8:cf:78:e8:83:43:ee:d7:19:95:00:60:1c:0f:0a:4c:95:
         77:29:81:7f:54:ab:3d:2e:ac:43:8c:80:5f:40:19:52:96:d5:
         e4:1c:cf:c8:8d:0a:96:26:60:96:91:d2:a1:64:0a:78:60:78:
         98:ee:d9:30:51:b9:53:45:4b:10:61:44:bb:5f:51:18:22:f7:
         84:96:36:7e:38:c2:00:86:37:f4:03:0a:ba:72:d9:39:c5:3c:
         68:a1:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:18:55 2024 by rpki-client on console-ams.rpki-client.org