Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6ffc3a9-0984-3902-9399-45d3d906f990.roa
File:                     b6ffc3a9-0984-3902-9399-45d3d906f990.roa (raw, json)
Hash identifier:          HEYLt4XkVlAMYjQwh9TlQDrgawJpQxSlECFHm1KEB8M=
Subject key identifier:   FC:9B:5D:4C:04:4E:A8:90:E1:1E:40:B2:B0:46:BC:A8:95:FB:52:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF94B17D8D946761B08A180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6ffc3a9-0984-3902-9399-45d3d906f990.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        2001:559:140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:4b:17:d8:d9:46:76:1b:08:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bcd31d16-3136-4229-81c4-99107a71f7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:55:46:b2:9f:68:7e:9d:81:ec:19:33:86:
                    0e:0b:53:8f:90:4d:8e:7a:cd:89:a8:62:93:4d:e1:
                    e8:29:b4:22:b0:53:9c:8e:6a:54:11:2f:33:5d:18:
                    e6:56:1d:d6:43:bc:67:df:ea:6a:38:e0:e7:b5:4b:
                    22:d8:61:00:b0:b1:a2:ad:3c:80:47:40:24:a7:3b:
                    83:20:1a:ae:eb:8e:a2:ab:09:2a:4e:58:48:29:75:
                    f3:bc:ae:56:4c:c5:bb:89:54:e8:1a:f6:b2:95:01:
                    94:ec:c5:f0:48:18:b5:3a:eb:f5:dd:0d:e0:b9:96:
                    b4:59:58:cd:b0:26:59:93:a9:a9:d3:3a:4c:a8:56:
                    fc:2c:e3:af:f0:86:78:40:3e:ef:db:75:02:5c:7f:
                    fd:8c:db:90:73:d1:8a:21:85:c9:2d:b7:4c:0c:dc:
                    cc:9f:81:c0:fb:cd:c5:56:9d:42:76:79:83:d2:73:
                    cd:4a:52:85:9d:83:e7:c2:d9:e6:fc:10:8e:f4:ad:
                    37:f2:8b:c8:4d:23:bb:95:8d:22:5e:66:40:98:12:
                    30:37:9f:a5:0f:91:53:9d:38:a0:41:97:f1:43:5a:
                    5d:29:60:98:ce:ed:95:ff:e6:31:cf:c8:23:0e:42:
                    d3:ce:fe:6f:1e:61:13:8c:1c:d8:70:b6:bb:87:15:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9B:5D:4C:04:4E:A8:90:E1:1E:40:B2:B0:46:BC:A8:95:FB:52:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6ffc3a9-0984-3902-9399-45d3d906f990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:09:61:15:0b:49:5c:cf:6b:8e:c4:8c:2c:5f:7b:21:5a:
         63:16:c5:0b:47:9b:b0:f2:29:35:64:e8:32:1e:47:00:7b:4f:
         7e:48:e0:a0:d4:4d:e1:fc:fa:e8:00:ce:5a:14:21:f5:d2:f1:
         fd:31:82:ae:c5:05:34:2d:e7:41:a9:04:02:b4:de:7c:85:73:
         75:9c:26:10:8c:48:16:39:42:af:46:94:8f:bb:d7:5e:20:86:
         47:e2:03:60:cf:8a:25:d9:1c:c0:52:51:bf:27:4c:d0:43:db:
         8a:1f:e5:6c:7d:84:b2:54:46:aa:b7:78:2d:44:ae:3e:e7:31:
         e7:92:34:2b:b8:fc:a0:07:0a:e7:71:08:1f:87:d5:a0:80:12:
         a2:1b:22:ea:c4:6c:df:6e:2b:bd:05:25:50:64:18:61:8e:53:
         16:1b:ff:81:3e:d6:f9:08:48:18:a4:25:cd:f0:a3:ae:58:01:
         56:69:57:79:c9:33:23:e6:17:19:37:50:2c:c0:80:b3:90:d8:
         6f:db:fb:34:e7:24:31:a7:58:9d:21:83:1c:29:a7:79:11:76:
         7e:44:92:f5:8f:4c:e9:08:d4:24:f9:72:18:17:b2:22:19:20:
         7b:d7:10:06:12:5b:0b:6c:b9:e8:a5:8d:ea:f2:31:d1:95:5c:
         91:5e:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:28:38 2024 by rpki-client on console-fra.rpki-client.org