Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad15fcc3-1dec-33d1-8961-85446da80bbb.roa
File:                     ad15fcc3-1dec-33d1-8961-85446da80bbb.roa (raw, json)
Hash identifier:          ZasLkXpBZwO/wMx5p17lAKHtg/OZwlqR37KVL3QCO4g=
Subject key identifier:   2C:3A:9B:A9:88:08:13:85:A1:F8:5C:6B:30:92:60:6E:A5:AA:CC:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF9008E6A6634330C15CE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad15fcc3-1dec-33d1-8961-85446da80bbb.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2001:559:161::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:00:8e:6a:66:34:33:0c:15:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=40ed6754-1e41-4d97-b7de-af9f6ba1ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:31:c2:82:8a:e3:29:a0:c2:76:e3:e5:9f:
                    90:09:2a:2b:36:24:07:93:89:10:71:32:cb:39:77:
                    3d:75:0e:fb:a8:b1:57:cf:70:96:4d:b2:29:fe:c4:
                    63:86:32:97:9e:d9:04:a2:a2:dd:7c:07:f9:a9:e0:
                    0c:ac:cf:9f:16:12:2d:20:b3:e2:40:ba:c8:6e:7c:
                    79:75:ae:3b:78:8a:4b:7a:04:16:02:d8:62:3c:3e:
                    9f:7d:a2:1d:c0:20:1f:46:8f:bf:da:4d:a5:0c:59:
                    cf:ea:a6:c4:6e:09:32:96:0a:11:4b:b3:88:17:04:
                    00:a8:09:b4:c9:87:9a:4e:11:02:4b:c7:94:fb:eb:
                    f7:6a:b9:9d:bf:84:81:33:de:ce:82:a9:fb:8a:c4:
                    1a:15:9f:87:bf:41:af:46:03:de:36:56:60:80:7e:
                    88:ca:a9:88:45:77:29:ce:1b:01:6e:d4:20:58:48:
                    99:01:aa:0e:a9:92:ac:87:73:2b:1f:33:46:dc:f1:
                    aa:a4:d5:36:9f:48:f3:ea:a6:89:d3:d2:a6:02:a8:
                    49:da:3e:64:3d:69:94:93:a5:6d:82:1f:30:06:4a:
                    91:e2:5e:e6:35:c9:f6:e0:68:05:bb:0b:71:c1:9f:
                    65:46:39:c0:69:c1:76:66:2e:b7:e4:a9:0e:2b:34:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3A:9B:A9:88:08:13:85:A1:F8:5C:6B:30:92:60:6E:A5:AA:CC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad15fcc3-1dec-33d1-8961-85446da80bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:161::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:94:a9:ec:d8:61:c1:f4:ca:21:0e:0b:d6:5a:e2:0c:75:5b:
         8e:5b:52:9d:6e:9f:c2:c9:00:5b:9c:3b:f9:b5:50:af:b5:54:
         2f:51:07:fc:13:12:92:a1:b9:3d:49:7a:6b:8d:4e:e0:47:1b:
         d0:f2:c9:53:5d:c9:bf:66:4a:c4:ed:5d:6f:cc:27:31:6f:40:
         9a:4a:89:77:dc:61:ba:80:0b:3c:c9:39:36:fb:6c:c6:79:ac:
         39:34:fa:d3:b5:09:73:56:66:b5:9e:3e:20:79:ee:02:9a:05:
         f5:03:38:ba:37:bf:9d:96:12:40:c1:ec:61:05:e0:01:f6:12:
         25:9d:1a:55:40:de:22:d8:42:fb:17:30:49:9c:db:f7:47:7a:
         79:80:a4:0f:6f:9c:22:ec:72:a7:11:28:9e:b4:46:1a:00:60:
         86:64:af:60:09:f8:d9:cc:71:1e:7f:7c:19:33:5e:83:da:1f:
         9e:a7:de:da:30:dc:b3:fa:a0:c7:92:62:d4:eb:fa:cb:59:7f:
         b8:15:aa:31:f9:8b:79:59:97:65:9f:d5:1f:a7:d8:1b:15:99:
         3f:b2:0b:38:44:a3:11:9a:47:6c:3c:85:a7:14:85:cb:59:5d:
         27:a6:47:d2:48:f4:81:48:09:36:4e:38:67:06:ec:d4:2e:2d:
         00:5d:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:13:52 2024 by rpki-client on console-ams.rpki-client.org