Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c34fa46d-55f3-34bf-b7a3-9b687910c044.roa
File:                     c34fa46d-55f3-34bf-b7a3-9b687910c044.roa (raw, json)
Hash identifier:          UmS+RjdBn/lB9mn6Pp0oA4wF7+9t8CkLgpujikE4tg8=
Subject key identifier:   6F:F1:43:EB:DA:B5:76:11:B5:01:05:0C:C9:5E:C0:02:E5:0B:3D:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD179AC7D1A8F945B9C940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c34fa46d-55f3-34bf-b7a3-9b687910c044.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2001:559:5e1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:17:9a:c7:d1:a8:f9:45:b9:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f6d97168-0fa7-490c-898b-8a13a4639da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:de:5f:99:50:d2:7e:f1:c7:57:34:d0:66:
                    1b:dc:3d:b2:4f:a0:7c:c6:6f:c8:de:fd:ed:e7:0d:
                    83:87:ba:17:8f:97:e1:c8:4d:fc:d0:2d:4f:0e:5c:
                    73:ab:09:8b:0f:7e:66:70:d9:a6:12:c3:f0:14:6c:
                    9a:72:25:e2:9a:65:31:40:96:79:aa:63:d0:c7:85:
                    58:e0:d9:d5:a0:af:d1:ca:a0:a3:2e:e0:59:45:94:
                    4f:22:47:69:42:53:b2:2a:20:d6:32:20:a7:33:27:
                    47:34:ad:6e:33:c9:3f:82:d1:d8:6b:4c:1b:db:f6:
                    77:b0:a3:ca:09:6b:4f:f5:c5:18:32:e7:24:09:87:
                    15:d1:4f:a9:46:08:35:87:11:2d:e0:7c:4e:aa:7e:
                    4a:2d:ad:e3:24:17:b1:e4:01:54:44:d2:29:42:0a:
                    db:49:8f:ba:58:e4:60:ca:da:4f:f0:48:49:eb:34:
                    ff:b6:66:1e:00:fa:50:9b:82:f9:88:ac:06:fb:c0:
                    a7:99:16:2c:b7:8f:8c:ef:94:20:a2:41:08:5d:fa:
                    28:a9:04:0f:08:2d:37:e1:af:ce:14:5d:91:97:0f:
                    bd:fb:70:77:54:6d:ad:fb:02:f6:f3:7e:ea:7d:b1:
                    a5:5e:78:18:22:23:b0:ee:04:7b:3d:51:bf:a8:f0:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F1:43:EB:DA:B5:76:11:B5:01:05:0C:C9:5E:C0:02:E5:0B:3D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c34fa46d-55f3-34bf-b7a3-9b687910c044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:37:a4:00:98:95:22:28:a2:3c:61:62:aa:40:24:6e:35:
         c1:8f:fa:77:a2:31:5e:16:57:4f:02:2b:b5:20:50:5d:a7:45:
         66:96:81:c4:a9:92:92:f5:f5:fb:47:a8:3e:3b:e7:7d:7c:ab:
         35:62:5f:a7:cc:51:1c:13:63:52:8c:af:57:a6:e0:68:0f:ae:
         b5:5b:70:b8:47:50:ad:65:ab:5b:01:a4:8c:89:72:05:a8:fd:
         6e:b3:f5:36:96:be:88:0f:df:d4:88:ea:cb:af:0f:a9:16:1d:
         8e:a9:5d:c5:99:6a:0b:12:a0:02:24:30:12:1b:3b:13:6a:44:
         49:f7:c9:77:cc:72:ac:67:d2:34:81:e5:62:19:bf:54:23:86:
         48:d1:ad:53:e4:6d:03:de:6a:f7:aa:de:d0:b0:ee:f3:6c:04:
         26:c6:cb:c0:b7:73:97:4b:b7:03:60:19:31:e5:a7:ca:93:bd:
         02:de:12:86:72:e0:4f:3c:d4:51:f1:2a:7f:7f:15:5e:a9:9e:
         d0:6e:34:31:04:7a:db:12:30:16:2d:d0:66:97:72:57:cb:cb:
         2e:b1:31:26:e0:90:97:28:67:78:1c:74:a1:1a:ee:2a:90:e6:
         a3:df:da:2e:dd:c3:22:b9:bb:ba:5b:b4:a1:0c:0c:79:e4:3b:
         5f:c7:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:55:48 2024 by rpki-client on console-fra.rpki-client.org