Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4fe4a26-ca2e-32d7-981a-8fd190b82703.roa
File:                     d4fe4a26-ca2e-32d7-981a-8fd190b82703.roa (raw, json)
Hash identifier:          HOwUUb6QsYl8hRB8cIuJkqs2OEGGtbH+e2CQ2MNOnSw=
Subject key identifier:   26:D0:36:13:18:E8:DF:BD:7F:DB:E3:35:35:70:7E:E4:07:6A:BC:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB11322B15911B1113CB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4fe4a26-ca2e-32d7-981a-8fd190b82703.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:c562::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:11:32:2b:15:91:1b:11:13:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=14345a43-33a6-4b9e-bb69-acae89011de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:10:0e:03:81:64:66:4a:ec:4e:54:e4:93:37:
                    68:bd:cf:4b:9e:c3:91:fa:ae:6f:aa:84:1a:f4:77:
                    73:49:8f:85:65:d1:74:cb:f8:a2:a5:e0:bb:9e:4f:
                    ae:72:0b:2d:74:88:94:8c:01:d7:30:f0:b8:04:13:
                    4b:cd:34:33:dd:1a:bb:f2:14:68:0b:ac:25:0e:cc:
                    d9:87:00:ed:29:74:c0:b7:be:c6:26:fd:d5:3d:cc:
                    33:73:92:ce:aa:89:0a:3c:49:cc:f7:1f:91:f9:31:
                    d7:5a:c3:ee:37:25:92:af:f8:af:87:5a:f9:da:de:
                    01:d0:34:7c:44:7d:fb:86:de:26:38:91:f5:b5:27:
                    44:6e:78:c7:6c:1e:e9:ac:dc:bf:24:76:9f:2a:ae:
                    e3:34:e2:b5:5b:0b:be:c4:26:bf:49:14:be:df:59:
                    e2:5e:91:77:08:d3:77:85:c2:a7:84:8d:a8:5d:c7:
                    c3:7c:6e:55:45:81:34:75:ad:a5:ca:69:85:1c:e7:
                    91:53:37:b8:3b:c7:70:da:0f:3f:bc:cd:01:93:32:
                    bf:c0:02:cc:06:ca:36:c8:0e:50:be:40:3f:2f:74:
                    43:69:bd:37:51:0f:c0:e3:c7:09:a1:dc:36:3c:0f:
                    2d:03:41:0e:4c:72:2b:dc:2d:1e:f5:0f:50:ef:93:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:36:13:18:E8:DF:BD:7F:DB:E3:35:35:70:7E:E4:07:6A:BC:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4fe4a26-ca2e-32d7-981a-8fd190b82703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c562::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:80:9a:09:ec:3f:5d:3a:d5:71:66:57:ee:91:2d:74:7c:79:
         94:00:28:33:fe:ec:f5:3f:85:a0:0b:be:05:45:95:e9:73:2b:
         ec:90:ae:13:3e:b7:26:df:78:c5:ce:16:36:cd:e0:48:18:4d:
         e6:4b:a0:69:03:6b:df:0b:d6:69:04:9a:1a:3b:fb:72:b6:9a:
         a8:97:45:4b:6f:57:61:93:0b:5a:66:7c:69:7d:b9:82:7c:5a:
         ff:c5:3a:2f:09:31:43:2b:94:48:89:41:74:69:2b:6f:a8:22:
         4d:b8:21:42:16:cd:a6:bf:f5:4d:b0:56:03:ae:e5:f6:a5:96:
         39:d0:2f:86:47:c3:b4:46:36:dd:6b:bf:10:b8:4e:50:fa:7e:
         91:91:13:b7:6b:f4:ae:72:28:cd:69:28:13:fa:61:bc:ee:b7:
         ac:32:da:b5:93:55:60:92:38:d3:ec:16:c9:0d:77:e1:4b:d8:
         a6:a2:f7:1a:6a:a7:92:3f:9e:0d:54:3a:7c:1f:f5:df:2f:26:
         3f:c6:05:26:5f:6a:ad:d7:1c:14:ea:b6:43:5e:9a:8f:c9:31:
         34:90:dd:c1:c5:7b:c6:ef:f4:20:8a:31:3b:e6:1f:8c:52:11:
         46:78:41:6e:4f:c4:72:ca:f9:52:33:35:96:2c:ee:73:8f:0d:
         99:54:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:38 2024 by rpki-client on console-fra.rpki-client.org