Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad70845b-11cf-3999-94d2-96b88b4f4408.roa
File:                     ad70845b-11cf-3999-94d2-96b88b4f4408.roa (raw, json)
Hash identifier:          QZjHaTOSg3x70fDlhbaLbWszBzsg+2B7et71fnHzjic=
Subject key identifier:   22:D7:47:B8:43:34:2B:FF:26:2B:68:E6:94:EA:EC:33:0C:9B:B4:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFC269FE91BC5B8BF539880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad70845b-11cf-3999-94d2-96b88b4f4408.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33659
IP address blocks:        2001:559:3a9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:26:9f:e9:1b:c5:b8:bf:53:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=312916e7-87e3-4b86-8037-608689227cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:de:cd:39:d9:4e:dd:cc:4f:66:41:e7:ed:
                    45:ac:ef:07:ff:4b:98:70:65:e5:9e:fd:07:a0:0d:
                    6f:e4:cc:86:b0:be:2c:e2:78:0d:8e:59:80:59:4f:
                    c0:f4:d6:95:49:85:3c:b7:d2:5b:73:5b:51:07:5d:
                    b5:55:d2:81:49:08:07:d4:40:68:cb:05:cb:ef:f1:
                    5d:85:5d:01:bd:24:05:1c:a6:58:43:a9:bc:8e:41:
                    f1:7a:bb:7f:5d:8a:4b:9b:ec:35:29:3b:78:b3:82:
                    81:b0:fe:00:c8:22:c1:3e:54:72:34:4f:c1:a6:4b:
                    9e:a1:bf:be:7c:a0:e3:33:b6:19:c0:72:4c:b7:59:
                    5e:39:d3:e2:b3:d2:b7:8d:09:75:5e:4c:77:04:af:
                    f5:4f:d1:d1:fd:1b:d1:a8:c5:82:1c:03:40:2d:5e:
                    02:66:1c:30:b6:f4:c3:22:e7:e9:c7:6a:d4:51:17:
                    cc:09:1a:ca:c9:45:51:80:b2:74:dd:a5:3c:a9:26:
                    70:7b:2e:2f:e9:ae:83:1d:76:ca:8b:a0:8d:a0:9b:
                    8b:74:f7:79:b4:34:ae:7f:f2:46:07:86:b7:ad:29:
                    ca:74:5b:26:80:6b:fa:c4:17:fe:4e:f6:e1:a9:8b:
                    1d:0c:c7:fa:ac:5e:27:be:63:1d:10:e3:d7:bc:e9:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D7:47:B8:43:34:2B:FF:26:2B:68:E6:94:EA:EC:33:0C:9B:B4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad70845b-11cf-3999-94d2-96b88b4f4408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:62:b5:cf:3a:21:25:06:3f:b1:a7:fa:7f:9a:3c:ff:f8:
         70:be:b6:87:cc:c1:b9:a9:55:3e:9c:81:be:a6:8b:b3:1c:0a:
         81:b7:00:74:62:9d:60:04:c7:fe:65:2c:f8:b5:d3:ba:8e:b9:
         90:ca:b3:ec:1c:95:db:9a:d0:3b:6a:45:07:df:73:68:c4:b5:
         a6:aa:63:60:63:d4:ca:be:96:65:88:9a:f8:39:a2:f4:ec:24:
         b7:67:b3:b9:6d:fb:35:95:1c:2e:38:d2:21:cd:1c:2f:4d:dd:
         e4:22:8d:40:2e:89:43:72:04:8c:ec:78:a8:65:d7:3f:80:75:
         48:4b:9e:3b:2b:5d:6e:c2:3b:2e:6e:c0:1c:a6:d7:cc:03:cb:
         dd:75:dd:95:22:b4:03:14:b0:38:0a:d3:5c:e6:ed:eb:54:2e:
         cd:28:cf:bb:f5:e1:fc:4e:b2:84:be:87:12:19:db:05:a9:9d:
         9d:05:1d:80:ed:eb:32:d1:4c:bd:5c:9b:a2:bd:e0:c8:2c:b0:
         04:28:f9:bc:5d:32:fb:d8:2d:74:e0:1b:23:f8:77:4e:17:1a:
         1e:d2:30:b2:dc:fc:05:9b:97:c2:ea:27:1a:df:65:ba:c2:86:
         e3:03:45:af:1f:c2:cb:8b:e0:2c:eb:59:54:b9:5c:c2:34:d3:
         2a:e5:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:32:19 2024 by rpki-client on console-fra.rpki-client.org