Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e86616a7-cffd-3c15-bbc3-988d725ee05e.roa
File:                     e86616a7-cffd-3c15-bbc3-988d725ee05e.roa (raw, json)
Hash identifier:          IGSxpgrq0GFYEV9Zq+UZG1tH6+9XEruiDi4nSaB0MWU=
Subject key identifier:   67:DD:8E:30:6B:7F:6E:1A:EB:B5:16:2B:7C:B7:09:D2:1E:71:99:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF3537F4B0FB07EBCD04A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e86616a7-cffd-3c15-bbc3-988d725ee05e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:1e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:35:37:f4:b0:fb:07:eb:cd:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=10175461-680c-46f3-a735-6e999aa7953e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:5e:7a:da:3d:7f:df:9a:ad:99:60:2f:5e:
                    ea:97:49:78:cb:ce:89:b9:62:0a:ce:c3:ba:2b:1d:
                    c9:8c:22:05:01:88:aa:e3:a8:c5:d0:35:c8:09:72:
                    32:55:1c:55:b2:3a:59:75:14:04:90:d2:b8:5f:f2:
                    c3:2c:c3:d5:34:db:70:14:43:bd:eb:6c:63:39:74:
                    bd:f2:cc:20:2a:05:06:dd:cf:42:1d:6b:48:46:b4:
                    b7:79:00:da:95:0e:f8:d2:e7:44:62:06:67:94:e4:
                    ac:af:69:f7:7f:ad:5d:03:57:c1:52:bb:89:46:3e:
                    f2:ac:11:21:6a:b3:83:86:8f:59:48:b9:b5:c4:ef:
                    4f:ea:49:9e:cd:15:1a:c9:74:84:51:d2:3b:54:91:
                    65:f3:54:7c:f1:7a:06:61:b8:d0:16:a7:fe:10:a8:
                    49:36:02:3d:ee:e8:ef:7e:34:b5:96:e1:61:49:ca:
                    e5:9c:a9:e9:a0:55:23:a6:4e:15:a3:c1:01:fb:a7:
                    08:0d:1b:2e:79:07:a5:0d:0e:a3:8a:a6:f7:0d:51:
                    25:fb:8a:0d:4d:15:c2:d3:cb:cd:89:52:03:25:c2:
                    8e:24:f1:fc:1f:24:21:80:f1:0e:af:44:8f:56:02:
                    1d:b1:6c:3b:dd:a6:f2:27:7f:e6:40:eb:b0:fe:ee:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DD:8E:30:6B:7F:6E:1A:EB:B5:16:2B:7C:B7:09:D2:1E:71:99:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e86616a7-cffd-3c15-bbc3-988d725ee05e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:3e:6e:ea:da:59:cd:b9:52:7e:5e:25:d7:6f:74:5b:3f:
         0d:bd:eb:cf:fc:07:e5:2b:1c:8c:a1:6f:ac:2d:9f:e8:cd:b5:
         82:d1:df:1f:f2:ed:27:f5:d3:dd:22:e3:83:92:ed:b6:46:95:
         22:be:08:9f:6b:96:53:78:7d:f2:5a:e1:d4:3f:d8:88:9b:cd:
         bb:bc:e8:69:a7:9c:18:55:68:0e:9d:2b:f1:31:ca:8a:42:a9:
         e4:0c:99:79:e8:b6:4e:10:4f:d2:5b:56:66:11:e6:69:b4:b0:
         5c:a8:20:8a:59:29:87:96:d6:5a:4a:63:4c:02:72:4f:d8:dd:
         f5:96:e7:67:61:90:ad:9f:a6:bc:0b:55:b5:9a:da:78:65:8d:
         bd:7e:26:47:5d:c4:16:de:d3:bb:07:68:d3:3f:ac:08:03:40:
         6f:ac:c4:ad:c5:bf:dc:ba:1b:38:d7:81:b2:a8:62:7a:b0:d8:
         36:f4:4a:0b:a0:11:d9:94:f4:a4:b8:8b:3f:56:37:fd:6e:6b:
         4f:12:fe:2c:49:ae:b3:f0:ff:31:bd:99:77:20:4e:ba:9e:ae:
         a3:8a:b0:e3:32:94:10:76:f5:31:1d:53:77:3f:1d:52:e3:05:
         0c:06:bf:ea:2c:a0:37:cb:70:1e:fe:9e:6c:d5:10:ec:59:db:
         7d:69:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:27 2024 by rpki-client on console-ams.rpki-client.org