Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df246df0-e3a4-3f1e-a859-79d0fb402340.roa
File:                     df246df0-e3a4-3f1e-a859-79d0fb402340.roa (raw, json)
Hash identifier:          ixSweORrmH1tgVAWdB/DzG9ItzB9Lq24exyYPk70a5k=
Subject key identifier:   59:30:62:B5:FF:00:FB:26:25:10:02:C7:D0:CD:47:E0:1F:E7:70:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7AD8CE8458924AC457680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df246df0-e3a4-3f1e-a859-79d0fb402340.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:8759::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ad:8c:e8:45:89:24:ac:45:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=dc9d9c5a-bc58-490b-bdb5-99e6aa6d359d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:46:eb:c5:45:ac:e1:b5:9d:a6:5b:9b:84:
                    98:ce:dd:57:73:fa:d8:99:a5:52:21:b5:d4:ac:ce:
                    3a:ba:8c:26:4e:90:c3:1e:db:50:fa:a1:f2:3f:91:
                    88:87:b1:5b:f1:26:c6:ae:d5:c0:50:67:5b:58:d5:
                    71:82:65:fa:4d:a5:2a:83:47:8b:5a:0a:80:97:55:
                    67:90:8e:6e:a4:d6:7f:78:12:d0:e3:ec:3f:87:88:
                    24:52:9f:f3:31:bf:c5:29:fd:a2:d6:19:e6:c9:b7:
                    e3:2b:12:90:cd:c6:fa:d1:00:cb:12:77:91:94:62:
                    a3:fb:f5:e0:25:51:eb:c4:ed:34:ff:9c:8d:91:22:
                    33:80:62:35:01:22:1a:31:ee:ba:ea:42:84:00:24:
                    c5:c0:00:87:87:ea:13:b1:d8:66:45:15:45:c5:68:
                    82:85:a3:15:87:d8:9e:d6:96:1f:c6:15:99:b7:1a:
                    63:2e:74:0b:6f:c3:36:d2:65:79:02:37:9d:10:21:
                    f0:1c:be:c6:b5:14:2a:9b:4d:5c:cb:7a:72:b0:2d:
                    07:cb:c2:44:b1:f8:96:61:5b:27:8d:34:88:90:b5:
                    a6:79:b3:a6:b0:67:ed:6d:04:8b:19:e3:99:bd:de:
                    8a:4b:9a:93:87:c2:f9:81:a6:41:c8:be:79:a4:c5:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:62:B5:FF:00:FB:26:25:10:02:C7:D0:CD:47:E0:1F:E7:70:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df246df0-e3a4-3f1e-a859-79d0fb402340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8759::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:1f:22:59:32:05:76:da:7d:73:50:bd:d2:52:3f:5e:62:
         65:35:bd:f8:a3:77:38:53:92:31:03:82:48:d6:a0:12:f9:4b:
         d2:d6:d3:35:38:77:f6:c4:0a:f5:74:24:75:7c:df:e1:d3:a6:
         c6:42:d6:de:8e:85:27:1a:fa:7b:63:a7:67:b6:7c:48:17:45:
         ff:96:79:59:df:36:8e:e4:2f:97:cf:72:ba:28:a4:5f:d9:dc:
         d2:b7:70:70:53:1f:e8:d9:29:8a:2f:37:ab:a7:77:d9:ed:1c:
         e6:d1:3a:45:3b:4a:e8:df:6e:f6:a6:0a:ca:3e:f1:ca:24:87:
         57:01:15:e6:f4:e1:97:87:a9:39:11:b8:86:33:a1:1a:f0:2e:
         6b:6d:c1:c0:0d:b9:e1:52:82:f1:f0:6f:93:2f:67:48:52:35:
         d4:38:71:fa:3f:ab:4d:9f:f4:59:a6:97:28:c2:ef:a4:ef:02:
         75:eb:39:dc:62:b2:19:95:45:12:8d:4b:32:3a:37:1b:7b:9a:
         aa:ed:42:d8:81:2a:b5:46:82:ed:29:ae:54:36:d3:85:6a:cb:
         f6:f6:a5:5b:91:b7:8d:7b:40:1c:1a:f9:c4:78:64:31:ab:c6:
         d1:74:4d:07:ec:12:4f:ca:96:df:ff:0e:49:f3:ca:a6:a9:7d:
         6c:b4:0d:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+962M6EWJJKxFdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZGM5ZDljNWEtYmM1OC00OTBiLWJkYjUtOTllNmFhNmQzNTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX5G68VFrOG1naZbm4SYzt1Xc/rYmaVSIbXU
rM46uowmTpDDHttQ+qHyP5GIh7Fb8SbGrtXAUGdbWNVxgmX6TaUqg0eLWgqAl1Vn
kI5upNZ/eBLQ4+w/h4gkUp/zMb/FKf2i1hnmybfjKxKQzcb60QDLEneRlGKj+/Xg
JVHrxO00/5yNkSIzgGI1ASIaMe666kKEACTFwACHh+oTsdhmRRVFxWiChaMVh9ie
1pYfxhWZtxpjLnQLb8M20mV5AjedECHwHL7GtRQqm01cy3pysC0Hy8JEsfiWYVsn
jTSIkLWmebOmsGftbQSLGeOZvd6KS5qTh8L5gaZByL55pMX92wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFkwYrX/APsmJRACx9DNR+Af53AaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYyNDZkZjAtZTNhNC0z
ZjFlLWE4NTktNzlkMGZiNDAyMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADLwHyJZMgV22n1zUL3SUj9eYmU1vfijdzhTkjEDgkjWoBL5S9LW
0zU4d/bECvV0JHV83+HTpsZC1t6OhSca+ntjp2e2fEgXRf+WeVnfNo7kL5fPcroo
pF/Z3NK3cHBTH+jZKYovN6und9ntHObROkU7SujfbvamCso+8cokh1cBFeb04ZeH
qTkRuIYzoRrwLmttwcANueFSgvHwb5MvZ0hSNdQ4cfo/q02f9FmmlyjC76TvAnXr
OdxishmVRRKNSzI6Nxt7mqrtQtiBKrVGgu0prlQ204Vqy/b2pVuRt417QBwa+cR4
ZDGrxtF0TQfsEk/Klt//DknzyqapfWy0Dbc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:09:54 2024 by rpki-client on console-fra.rpki-client.org