Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb6f85a9-ee42-3f2e-9613-941ed73199e5.roa
File:                     bb6f85a9-ee42-3f2e-9613-941ed73199e5.roa (raw, json)
Hash identifier:          c0QLmIyGUkj0AiRZhp3/4Tlc75QKZ8V49sMXlzqH/2o=
Subject key identifier:   D4:B0:93:F6:8B:63:2C:1A:EB:05:12:5B:77:58:F1:B0:70:45:C2:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABD61CF920A2CB01959710
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb6f85a9-ee42-3f2e-9613-941ed73199e5.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:855a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:d6:1c:f9:20:a2:cb:01:95:97:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=c61f95f7-a1ed-43d6-be8a-3a7df3c52a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:4e:5e:ec:21:2f:74:7e:a8:34:20:6f:35:
                    a5:ce:f0:86:30:a0:ba:6f:0b:83:81:32:b1:7d:5e:
                    ce:e3:a2:2c:00:2c:85:6d:0a:63:05:10:89:12:7d:
                    69:7d:36:b1:cf:9c:a1:08:91:5d:ef:22:5e:47:3c:
                    9f:97:9a:1b:66:07:12:c2:20:32:6a:d8:ef:02:83:
                    23:b1:67:02:47:d5:a2:fa:16:af:d6:04:68:a0:e6:
                    26:0a:a6:a8:11:e5:b7:59:13:05:e1:09:ac:5b:02:
                    ea:a9:f2:a2:44:a6:26:95:f2:26:d0:2c:e5:84:b1:
                    7a:0b:f0:70:db:1e:be:f3:46:ad:f8:1d:68:06:62:
                    e0:e0:e3:ba:f8:5b:ed:30:58:70:8b:44:36:2a:42:
                    57:4d:1d:d0:ab:f6:cf:8c:ad:b5:f5:7c:8d:2b:a8:
                    93:d4:be:b9:d6:ae:de:2f:00:b0:f1:27:26:e9:b3:
                    38:d1:1a:84:18:a3:94:fe:b8:c5:44:10:be:ee:66:
                    4d:81:82:6d:15:1a:92:b1:42:bc:22:5c:ad:8c:22:
                    5c:75:bf:c1:c1:e8:6d:1c:0c:dd:0c:f5:ce:08:49:
                    c1:66:11:35:c3:d9:e3:c0:6e:fe:81:c0:73:ab:0a:
                    bd:00:77:76:7a:f6:57:f0:a4:b5:35:c7:52:03:1e:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B0:93:F6:8B:63:2C:1A:EB:05:12:5B:77:58:F1:B0:70:45:C2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb6f85a9-ee42-3f2e-9613-941ed73199e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:855a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:9d:86:a5:71:6c:88:a4:ff:72:df:cd:80:b2:e1:c1:5f:
         bf:66:76:1f:9e:75:7a:53:d2:64:5e:23:af:63:5a:40:b3:54:
         0f:b1:b0:ec:07:fb:8d:9f:94:e3:6f:3a:dc:a6:ef:fc:12:65:
         8c:6c:72:77:37:6d:2b:73:73:2d:0f:76:2d:2f:a5:0f:48:23:
         3a:26:f2:24:37:1b:b2:11:b5:88:12:b9:46:76:00:3a:3c:5e:
         af:e9:be:5f:18:4d:c8:51:f0:af:aa:6b:45:3d:e8:5a:44:d2:
         a6:56:e8:58:f5:45:4a:a5:b2:f9:a2:da:89:3a:19:e5:b9:f1:
         1c:65:d6:a2:46:a1:2d:c8:82:b7:79:03:45:d5:fc:ab:1f:b3:
         1e:b8:71:da:02:f3:f7:dd:a0:39:e3:8d:bc:10:5c:05:20:5e:
         e7:8f:d1:13:54:8c:6d:65:e9:1c:e5:16:e9:2e:f7:5d:9c:f0:
         c7:53:06:b3:c7:50:30:b3:35:20:c0:c7:43:d7:79:70:05:cf:
         bc:ff:1f:29:c4:82:57:7c:68:f4:82:07:bb:f7:d3:0f:ef:e1:
         dc:81:34:18:f1:28:28:dc:cb:58:6f:d1:52:b4:fe:6c:38:82:
         5d:d5:19:3b:75:5e:7b:3f:ec:ad:fc:f3:0e:ed:82:78:8b:42:
         cf:4c:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:55:18 2024 by rpki-client on console-fra.rpki-client.org