Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9d7553-e223-327a-9c54-943aebe058bb.roa
File:                     df9d7553-e223-327a-9c54-943aebe058bb.roa (raw, json)
Hash identifier:          8z32Ps+qmqCPcwXJATEXlgHY5vuziKQrk3gA01WHB2E=
Subject key identifier:   4C:62:22:ED:9B:96:B4:29:F6:10:81:4F:02:B5:6B:C3:F7:D6:D9:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF724E8BEDC92AEF889D460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9d7553-e223-327a-9c54-943aebe058bb.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:703::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:24:e8:be:dc:92:ae:f8:89:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=d29eb2d0-b2c1-4fcc-8cf0-541666c60aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:13:1f:95:31:fb:22:f6:53:43:17:c3:7c:
                    3a:85:69:f0:91:6a:17:9e:29:47:f5:b9:b3:39:ee:
                    51:51:a5:e5:d9:8c:a8:0c:01:48:1c:20:59:0f:91:
                    db:29:2a:86:26:87:bc:ee:78:46:da:52:24:29:09:
                    2e:0b:4c:ce:c9:d2:00:57:94:8d:9e:b0:99:55:ee:
                    81:3f:47:fc:7e:0c:34:67:a4:70:82:fd:6d:5f:05:
                    5a:23:11:aa:5a:39:d7:17:86:d4:3a:30:ee:22:9f:
                    d4:fb:9d:e7:21:bb:e0:e9:ac:e0:6e:c2:4f:e2:0b:
                    99:01:84:f3:d6:ae:5a:14:69:69:51:e7:cc:33:53:
                    fc:ef:d6:93:4c:2f:8c:9a:78:f2:f0:5d:37:32:d6:
                    cf:67:1f:08:c9:5a:a3:13:30:35:58:b2:34:88:72:
                    99:72:b0:17:08:7b:a2:00:c7:62:02:89:36:fa:64:
                    1f:9e:2c:39:2e:c9:70:21:5d:4e:3e:06:08:72:b0:
                    70:51:71:69:28:4f:7b:fc:5a:39:1e:b7:cb:57:d1:
                    29:68:eb:0c:7c:10:bc:2a:99:2e:7b:03:78:0d:f0:
                    94:00:26:fc:93:e5:f6:21:f5:a6:28:2e:08:b5:4a:
                    d5:cd:20:78:be:9d:7a:1c:98:52:e2:39:a7:4c:3c:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:22:ED:9B:96:B4:29:F6:10:81:4F:02:B5:6B:C3:F7:D6:D9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9d7553-e223-327a-9c54-943aebe058bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:703::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:53:3d:48:d8:9c:b6:5a:21:6a:cc:4b:d4:97:69:07:fe:15:
         16:f7:ac:ae:c1:01:c5:4c:4b:1e:7c:df:4d:e4:36:c4:e9:18:
         2b:7d:3e:ee:ad:a0:63:e9:c3:03:b6:1a:e5:86:02:25:65:91:
         2a:36:c8:73:9f:76:d5:49:5d:2a:e3:71:da:d8:9f:cc:a0:91:
         4a:49:07:2b:ee:ba:91:0c:b5:fe:ff:c5:5c:76:6a:fa:cf:63:
         04:27:13:22:06:b5:95:38:ec:27:27:c0:ab:df:9b:48:50:65:
         e9:61:25:ad:50:4f:4e:96:3c:fc:b4:17:8c:9a:15:64:d1:14:
         67:6c:9e:64:89:a6:5e:a7:5d:c9:73:40:29:9e:ce:2b:42:27:
         d9:2f:91:31:77:d5:91:9c:b9:79:32:ce:a2:fd:0f:28:59:f2:
         40:f2:8e:b0:d6:35:5e:62:56:ee:ab:49:06:24:99:78:f4:f5:
         42:82:ed:f4:c8:d6:01:c1:81:a8:de:96:76:22:66:93:8b:50:
         ee:7a:4d:ba:c9:d4:b3:38:dd:b3:69:e9:f7:31:c7:33:ec:e9:
         eb:9e:41:a8:10:af:24:6a:b3:6d:68:68:0e:31:26:6c:6e:5c:
         09:df:cd:57:76:65:d9:4b:c0:51:bc:d7:4a:f9:f2:c3:c4:02:
         74:a8:8b:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9yTovtySrviJ1GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZDI5ZWIyZDAtYjJjMS00ZmNjLThjZjAtNTQxNjY2YzYwYWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiwTH5Ux+yL2U0MXw3w6hWnwkWoXnilH9bmz
Oe5RUaXl2YyoDAFIHCBZD5HbKSqGJoe87nhG2lIkKQkuC0zOydIAV5SNnrCZVe6B
P0f8fgw0Z6Rwgv1tXwVaIxGqWjnXF4bUOjDuIp/U+53nIbvg6azgbsJP4guZAYTz
1q5aFGlpUefMM1P879aTTC+Mmnjy8F03MtbPZx8IyVqjEzA1WLI0iHKZcrAXCHui
AMdiAok2+mQfniw5LslwIV1OPgYIcrBwUXFpKE97/Fo5HrfLV9EpaOsMfBC8Kpku
ewN4DfCUACb8k+X2IfWmKC4ItUrVzSB4vp16HJhS4jmnTDzXdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFExiIu2blrQp9hCBTwK1a8P31tmHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY5ZDc1NTMtZTIyMy0z
MjdhLTljNTQtOTQzYWViZTA1OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMZTPUjYnLZaIWrMS9SXaQf+FRb3rK7BAcVMSx58303kNsTpGCt9
Pu6toGPpwwO2GuWGAiVlkSo2yHOfdtVJXSrjcdrYn8ygkUpJByvuupEMtf7/xVx2
avrPYwQnEyIGtZU47CcnwKvfm0hQZelhJa1QT06WPPy0F4yaFWTRFGdsnmSJpl6n
XclzQCmezitCJ9kvkTF31ZGcuXkyzqL9DyhZ8kDyjrDWNV5iVu6rSQYkmXj09UKC
7fTI1gHBgajelnYiZpOLUO56TbrJ1LM43bNp6fcxxzPs6eueQagQryRqs21oaA4x
JmxuXAnfzVd2ZdlLwFG810r58sPEAnSoizA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:14:36 2024 by rpki-client on console-ams.rpki-client.org