Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f44639-8154-301d-bf12-bc4afc711cd1.roa
File:                     c2f44639-8154-301d-bf12-bc4afc711cd1.roa (raw, json)
Hash identifier:          lv8lA2rwW7TqThWxuWVod04jjqvoEXZo47ePAN++TdU=
Subject key identifier:   B7:03:6B:B9:BC:42:08:E0:64:32:D0:0B:72:FA:47:92:DD:48:63:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7B104E00A428FFF600480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f44639-8154-301d-bf12-bc4afc711cd1.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:c3a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:b1:04:e0:0a:42:8f:ff:60:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1d0ce2af-7343-4ffc-91f1-9ba7f4540301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:89:8f:3b:5c:36:6a:5e:87:be:30:06:f7:2d:
                    1d:6c:bf:67:07:9a:8e:77:a9:04:08:4e:75:3c:d4:
                    8d:9e:db:47:19:b0:23:e3:02:dc:1c:93:e5:ff:05:
                    dc:2c:38:16:21:7a:c6:50:40:2d:b6:b6:86:50:3c:
                    8a:e6:c1:40:aa:e1:00:b6:0a:d6:2f:b8:33:39:8c:
                    a5:d0:a3:48:a4:25:6b:56:32:43:34:b2:f6:82:a4:
                    80:a8:a3:d1:8a:a0:36:88:09:50:ef:1a:78:73:e3:
                    f5:b0:b3:29:e6:f1:b3:9b:ac:51:76:9f:fb:f8:79:
                    bc:98:ef:1c:50:a7:75:44:9d:a5:c7:3f:0f:53:ed:
                    c7:55:42:81:d1:eb:f2:f7:56:ec:85:f0:8b:4b:cd:
                    5d:78:b5:39:8b:4c:16:cf:19:75:2a:5f:2c:18:15:
                    0c:63:bf:cb:b2:93:30:6d:d6:fa:ce:cc:0d:a4:d3:
                    9c:9d:8f:ca:a8:07:84:da:c7:aa:b8:f9:9d:d7:52:
                    7b:c7:83:3e:1f:2a:ab:18:35:a3:8c:22:f5:78:4e:
                    e2:88:4d:dd:d0:46:fb:d4:c4:09:ae:f3:b0:c7:1e:
                    8d:a3:4c:f2:5c:08:4a:b2:bc:42:67:2d:9b:4e:f1:
                    79:b6:fe:fe:ac:2b:78:51:06:78:32:ec:eb:d3:8d:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:6B:B9:BC:42:08:E0:64:32:D0:0B:72:FA:47:92:DD:48:63:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f44639-8154-301d-bf12-bc4afc711cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:16:bf:cf:92:03:79:e9:93:fb:1e:bf:14:20:fc:0b:7e:
         87:4d:50:d4:00:e1:cb:96:05:d0:3c:f4:bc:19:d1:78:cf:93:
         a3:d1:3f:b2:f4:0b:cb:42:f5:86:9b:cc:ae:36:6b:62:c5:b1:
         30:d6:1d:f3:46:4a:ed:e1:07:00:a1:57:f8:1e:8d:3f:9d:60:
         7f:6b:51:37:21:53:c5:a0:56:9e:e6:e0:00:44:e1:c1:94:a8:
         40:5f:f2:38:5e:8b:40:13:1c:2c:d3:e0:2a:a7:9b:39:a6:03:
         ad:0f:81:d1:84:f8:64:de:78:5e:e9:e1:9d:65:8b:da:0b:bd:
         90:fb:ff:98:0b:1c:4a:c4:de:29:3d:6f:c8:d5:1d:e3:0f:d5:
         7d:dc:cc:92:a2:e6:d5:4e:77:d7:56:98:e4:ea:87:bb:34:28:
         a9:07:60:dc:8c:c8:6b:b2:94:17:9a:cd:90:3d:11:cc:73:46:
         48:19:83:37:de:56:e3:3f:8b:78:f9:7e:ee:42:f2:8b:cf:b9:
         62:72:e6:a2:86:83:88:fa:4b:ba:cd:b1:04:e5:c5:63:bd:05:
         d2:64:a2:b5:1f:ee:8f:3e:ce:f8:af:bf:f7:7b:8e:a6:da:db:
         71:bd:b7:c2:7d:3e:3c:e8:39:8f:a8:95:2b:19:29:92:5c:86:
         96:97:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:34:09 2024 by rpki-client on console-fra.rpki-client.org