Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2cc40-8100-37a5-8504-a05fbde5017d.roa
File:                     f3e2cc40-8100-37a5-8504-a05fbde5017d.roa (raw, json)
Hash identifier:          VVhd8BAMqOUiRqI7bdKIesquE2Ypp2UVR5NEzFvEpbQ=
Subject key identifier:   74:85:2C:CA:CD:88:D9:6A:64:70:51:C9:D5:E3:1E:5E:81:EF:95:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF91662EF7C5AF346B1F3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2cc40-8100-37a5-8504-a05fbde5017d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2001:559:85f6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:16:62:ef:7c:5a:f3:46:b1:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b9013092-7557-4e41-aebb-1644f1c421d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:34:b1:6f:62:ff:37:3b:04:ec:ce:2d:07:
                    b1:a8:f5:9a:72:6e:b2:b0:bc:15:e3:75:52:3f:5d:
                    35:86:d9:ff:11:4c:1c:17:f6:3d:4b:d3:2a:a8:f1:
                    f7:ba:27:14:a8:21:43:e2:fa:dd:89:f1:3f:82:b4:
                    19:53:b6:5e:27:39:2d:6d:0a:2f:5f:1f:49:59:54:
                    d4:70:d9:05:98:41:55:70:52:30:41:b4:f9:2c:69:
                    0f:b6:24:0b:fe:d6:a9:15:ba:78:92:fb:dc:7d:8c:
                    df:84:de:50:b7:9e:16:ca:eb:d5:11:80:cb:7b:de:
                    ce:67:46:95:d3:10:cc:0a:03:21:31:04:64:35:2b:
                    53:28:77:0f:62:dd:51:14:54:2e:9e:62:77:8d:0e:
                    15:5c:a6:35:61:47:85:ea:d4:30:87:21:1d:6c:e8:
                    49:2b:82:04:2d:18:94:8a:aa:9c:e0:99:7b:2e:ef:
                    d6:c7:05:f2:f6:a9:2c:14:50:4e:4e:12:9c:5a:53:
                    de:08:eb:d5:47:0f:2c:fb:20:d8:e1:4c:24:f4:96:
                    79:5f:b9:eb:42:f2:f2:56:5f:05:58:01:f0:4c:4f:
                    b9:7b:bc:84:2b:e3:ea:08:8b:03:f0:e4:ce:ef:db:
                    de:27:11:b4:a6:9b:b7:6b:07:ef:3c:96:04:34:09:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:85:2C:CA:CD:88:D9:6A:64:70:51:C9:D5:E3:1E:5E:81:EF:95:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e2cc40-8100-37a5-8504-a05fbde5017d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:ef:1e:12:0c:4a:3d:41:fa:51:a7:7c:d6:7d:ae:bc:af:
         28:6a:e8:70:40:db:74:e1:80:f4:7e:42:8c:ca:4d:e9:6f:6b:
         e1:ac:66:45:ee:b9:5e:2b:90:ca:3f:95:8a:5e:73:a8:5e:b4:
         2c:60:03:e5:b8:ac:cf:9f:86:a5:3e:e3:b9:a2:28:91:90:da:
         43:30:e2:8c:d2:7f:55:7e:a2:69:8f:fb:60:a3:93:76:bf:6d:
         27:1a:f2:5e:78:bb:2c:cf:d0:8e:dd:84:94:e2:54:c9:28:12:
         1d:2c:89:80:52:fc:64:cc:58:d0:ce:99:f2:55:44:83:60:2f:
         e6:e9:95:8d:1b:75:db:5a:7f:28:66:93:84:2a:5f:f4:8e:92:
         91:06:af:fc:5f:23:82:05:3c:82:1d:24:08:77:2c:60:62:74:
         23:d4:22:02:d3:53:f0:87:d0:91:10:0a:c4:20:d9:43:33:3a:
         0a:61:f8:13:f3:52:97:4c:9b:73:87:86:5f:98:87:81:94:ff:
         7d:ae:24:2d:e0:df:97:27:1f:df:65:d1:20:1c:bf:e2:09:62:
         4c:5a:4b:ed:37:d4:46:7d:79:e9:33:5d:ab:1e:8f:ed:03:be:
         35:36:1e:72:31:12:cf:85:fe:89:93:41:b6:20:6e:e4:58:23:
         e3:24:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:24:13 2024 by rpki-client on console-ams.rpki-client.org