Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b85b11d1-8401-3db4-8a16-01e12ef72386.roa
File:                     b85b11d1-8401-3db4-8a16-01e12ef72386.roa (raw, json)
Hash identifier:          riWM0WveVnt5dh0iRsNcptPtk7fNr4j0vauZeabp9NM=
Subject key identifier:   AC:CB:EF:CC:49:D6:F9:DD:27:5B:6C:93:6B:F2:DC:4F:A1:3D:26:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF919F121333C5E32AFA440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b85b11d1-8401-3db4-8a16-01e12ef72386.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2001:559:86e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:19:f1:21:33:3c:5e:32:af:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1fd2b666-c7a6-49d4-9237-f6dbe33ff642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:bb:47:4d:bf:2a:e2:9a:c4:06:5c:c8:25:
                    3a:ca:e2:06:b7:2f:cb:02:0d:97:ee:93:d7:d5:c8:
                    ce:74:6b:45:5b:99:ab:44:c8:4c:59:42:c4:4c:38:
                    88:b0:cb:bf:23:c6:2d:d3:aa:28:b7:69:32:03:d4:
                    55:28:64:d9:0f:c1:c9:32:1a:52:a8:f2:58:f0:d2:
                    b8:a8:54:17:90:ba:cc:fc:7e:3b:f0:3d:6d:ab:c7:
                    9c:bb:98:ee:28:e3:93:b4:41:d8:fb:01:42:db:e2:
                    21:3f:57:52:cb:5c:bc:e6:e8:0e:d1:4a:de:70:21:
                    b1:c5:72:66:ac:fa:0f:c1:66:46:ec:e3:9e:51:3b:
                    b2:2c:81:fc:bf:70:9b:63:3e:5c:6c:f8:be:2e:ca:
                    d8:80:28:15:4e:6c:2f:e0:5c:af:cf:11:7f:aa:d2:
                    6c:fd:a4:ed:c5:e0:43:49:86:0a:15:e7:54:8e:5e:
                    e2:44:d8:86:f7:e8:e6:05:d4:e6:1d:a4:7a:2b:85:
                    e6:3b:74:88:b6:62:16:07:53:66:c2:76:c2:05:08:
                    56:0a:52:36:e4:50:70:86:f7:32:66:cc:08:ac:99:
                    3a:ea:d8:69:20:0c:a9:65:23:50:19:22:92:21:55:
                    78:f9:4e:ec:32:e1:7f:e3:12:94:e2:24:21:0f:a6:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:EF:CC:49:D6:F9:DD:27:5B:6C:93:6B:F2:DC:4F:A1:3D:26:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b85b11d1-8401-3db4-8a16-01e12ef72386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:40:04:19:52:91:d0:96:bf:e2:5a:47:12:47:1d:d3:0f:
         c7:19:82:47:29:56:fd:ae:c8:85:39:9e:56:8b:56:40:ec:cb:
         76:4c:8e:ac:1f:a1:6a:20:6a:0e:45:c5:e6:6d:2f:4b:a7:de:
         6a:34:fd:cc:c0:de:ac:ae:de:57:c0:65:1a:35:84:c6:cf:d9:
         d6:aa:20:87:32:b4:60:e5:7d:8e:5c:0c:c0:8e:6b:2b:0d:78:
         54:e1:ab:1f:02:f9:2e:a5:42:39:d6:a5:63:08:74:04:18:f0:
         4c:a5:33:a1:f2:02:08:77:6c:eb:eb:96:74:11:ea:e3:ff:19:
         e7:7d:45:cc:c0:81:c8:fc:03:9f:07:17:cc:ec:27:7f:b6:83:
         80:13:c9:a3:05:ba:d1:4f:87:ba:ee:15:77:fb:de:e7:e0:cf:
         c9:58:83:55:a8:f1:3f:87:c0:62:7e:ae:aa:6c:40:b6:7c:65:
         ec:3d:e5:7e:6c:e1:c1:28:8d:85:70:76:ab:24:db:28:0f:8f:
         35:b9:91:f6:56:07:2b:27:e9:80:98:fe:1c:9b:9e:f0:4d:00:
         6d:c4:61:ba:de:57:f4:b5:17:fe:dc:81:3f:4e:52:de:b6:94:
         af:e5:02:1a:9b:59:9a:00:80:f6:9b:f3:6e:7c:ba:2d:09:a0:
         9d:90:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:28:52 2024 by rpki-client on console-fra.rpki-client.org