Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9563d76d-0be0-34f0-b2fb-3d9640621e0b.roa
File:                     9563d76d-0be0-34f0-b2fb-3d9640621e0b.roa (raw, json)
Hash identifier:          EbNKk280bsGgLIgumFSXUnwfGLZot64gZXt9flvl5Rg=
Subject key identifier:   12:BE:0C:E9:BE:52:1A:04:D1:FE:09:84:6F:8A:17:51:5A:A4:59:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC1ECF50D55AFBFCED3E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9563d76d-0be0-34f0-b2fb-3d9640621e0b.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        2001:559:8466::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:1e:cf:50:d5:5a:fb:fc:ed:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d8ec848b-2297-4fa7-b6b8-4e26b657ffda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:e4:2c:7a:b6:da:ea:cb:e5:94:96:14:ff:
                    b3:c1:80:9c:80:a1:8e:0c:08:0a:16:43:47:7f:2d:
                    01:79:cc:42:7b:1e:6e:1e:b6:62:e0:da:af:22:c9:
                    21:58:ec:44:f4:7d:38:c5:ca:cc:55:05:ec:16:36:
                    27:0e:ae:18:d2:89:d7:21:dc:9f:f5:f8:7c:80:1d:
                    1d:fc:81:08:10:6b:56:63:03:4c:bb:89:7e:86:d9:
                    ba:fd:59:7d:76:fd:0b:a4:69:f2:e9:33:2b:94:08:
                    ce:d7:5c:50:3b:ed:45:5f:10:37:81:9e:ea:07:f0:
                    3f:4b:73:27:db:bc:ea:fb:4f:70:72:e1:d1:4c:b5:
                    75:a6:c4:69:ce:cf:31:4e:61:d1:e1:1d:2e:8d:7b:
                    81:ce:a3:e5:fe:88:6d:e1:d4:43:db:bb:4a:44:2a:
                    c0:85:18:5a:d4:bb:a2:a2:62:90:09:fc:0c:0c:b9:
                    c7:b9:3a:00:68:91:eb:18:ff:54:c2:7b:d1:ad:2f:
                    9f:a9:fb:23:23:2f:31:0a:cd:ca:d0:91:d1:8a:96:
                    99:c5:0b:cc:40:10:4f:9f:f8:e2:43:8d:12:8e:7d:
                    c6:d2:6d:4d:11:cb:55:28:95:93:b3:df:64:c4:0a:
                    73:d7:e8:63:1b:70:83:08:24:1e:3c:ea:a2:0c:87:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BE:0C:E9:BE:52:1A:04:D1:FE:09:84:6F:8A:17:51:5A:A4:59:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9563d76d-0be0-34f0-b2fb-3d9640621e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8466::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:94:a9:12:e6:2c:d0:3d:35:f8:0d:4f:e7:82:e7:ad:8d:
         78:3b:30:45:12:55:3d:30:dd:f1:f3:cf:8c:d5:9f:0d:40:4c:
         46:33:18:c1:94:f6:3c:ce:14:bf:19:3e:fd:08:76:83:8f:0d:
         28:65:2b:6b:34:90:84:9f:bc:95:b5:9d:c4:40:17:a9:68:c4:
         d3:82:05:be:3b:c5:02:e4:97:96:94:c9:0d:de:5b:dd:b7:a4:
         37:09:4f:e0:da:54:1a:a0:c2:e8:e1:1b:b1:16:0a:d8:7d:79:
         10:12:c8:ee:b5:96:ec:50:f3:9c:32:0d:87:a5:5c:5b:47:fb:
         e9:62:06:aa:b6:65:59:97:0c:c6:91:2d:81:64:88:ad:c0:e9:
         19:44:ce:01:44:94:96:d7:a2:c0:5a:05:bd:11:c8:3f:e2:6a:
         ad:f6:eb:a5:f6:e3:ec:5e:8e:09:97:47:c9:63:ff:f1:42:74:
         0b:61:d1:da:47:70:d5:ab:11:e9:df:ec:8e:cf:55:f2:19:c2:
         11:80:05:1c:28:95:03:f7:45:9b:44:f3:4b:0b:cc:a8:8f:2d:
         10:a4:ae:25:e4:b2:58:3d:ac:41:42:54:d4:78:1c:74:f8:00:
         f0:d7:34:8f:49:99:14:f7:be:d4:6e:cb:f5:05:65:e5:80:09:
         41:d0:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:32:12 2024 by rpki-client on console-fra.rpki-client.org