Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd8a7d4-0c2a-32f1-b4ef-c4515a4d403d.roa
File:                     fcd8a7d4-0c2a-32f1-b4ef-c4515a4d403d.roa (raw, json)
Hash identifier:          DtlvMVs8TI+Jo159p+Umz7IMiYldxUR1EQ8Nl/iXuwA=
Subject key identifier:   19:AF:34:F2:04:CE:90:C6:66:09:A7:46:4F:45:CB:D5:B3:08:43:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB49CAA7627E20CA0B6BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd8a7d4-0c2a-32f1-b4ef-c4515a4d403d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        2001:559:c0d6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:49:ca:a7:62:7e:20:ca:0b:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=964ff5ad-4ce5-40fd-92d3-de0f0fae4947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:5e:be:b8:d3:d8:2b:8c:13:f6:31:75:75:
                    54:db:c6:91:1f:99:e3:fc:db:8c:30:38:e0:1c:a5:
                    cb:20:bf:f5:3d:90:24:a9:df:2b:31:cc:6f:29:11:
                    ef:5b:b6:63:0a:bd:43:2f:a9:b6:62:ff:8f:16:9e:
                    b0:3a:31:99:39:4d:03:95:0f:eb:9b:89:6b:05:75:
                    8b:fa:39:95:12:64:ac:66:49:11:ab:29:02:41:fd:
                    a5:4b:8d:56:79:80:6a:fe:64:76:15:68:6b:02:d9:
                    8d:69:4f:a1:05:73:6e:cb:3e:25:10:9c:30:60:04:
                    3b:2c:14:d4:ca:d8:be:88:92:68:b7:a4:6c:48:42:
                    0b:90:01:59:20:9e:68:8f:94:8e:db:48:af:0f:13:
                    89:25:c5:17:f2:16:9a:30:c9:6c:94:01:30:81:7a:
                    3b:81:2c:bb:1e:47:82:2a:d9:77:dc:78:86:7d:36:
                    c4:d2:da:34:d6:67:3d:04:c5:ae:2f:2c:ca:e3:c1:
                    30:b1:5c:ff:73:7f:11:1e:ec:5e:cd:a9:02:d3:a9:
                    8a:8e:9f:55:6b:7a:17:30:2b:28:29:53:94:38:2f:
                    49:4e:92:4c:76:9a:44:bf:00:78:c7:03:cc:ea:89:
                    2a:10:ba:9c:5d:30:03:0a:82:e0:a3:0e:2b:f1:f0:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:34:F2:04:CE:90:C6:66:09:A7:46:4F:45:CB:D5:B3:08:43:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd8a7d4-0c2a-32f1-b4ef-c4515a4d403d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c0d6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:ef:17:09:e7:a3:bb:2a:a0:e8:55:d8:8a:57:59:81:58:
         33:e9:a3:a1:09:1f:23:22:4c:a1:2d:ae:88:9b:ba:d9:9e:e1:
         2c:b9:ed:43:36:39:17:b4:27:9d:bf:c9:78:ef:45:fc:46:a9:
         07:f4:17:b3:fb:ec:2d:3b:82:78:44:ad:d9:cf:99:3e:4a:d6:
         5d:f9:0f:3e:74:16:8a:19:5a:21:ad:90:10:9d:45:63:09:be:
         8e:72:02:df:99:11:2c:05:95:7d:ae:4c:86:83:04:83:68:29:
         05:08:c9:b7:07:b1:0d:f0:fe:09:b1:75:3f:3c:c9:36:2a:8b:
         c7:60:50:ec:9b:dd:57:f0:97:62:97:18:b9:3f:46:f0:e3:47:
         1e:01:02:21:40:c5:71:db:77:5e:61:f1:44:75:4a:e9:26:d8:
         72:01:9b:0b:fc:8f:91:5c:41:55:5d:42:1e:83:28:6c:a6:e3:
         fa:a4:da:6f:66:56:97:61:b8:aa:76:e6:d5:73:5a:5e:56:e8:
         9b:bd:aa:9e:ca:2b:fc:8d:09:cf:e0:79:01:72:e7:1e:e3:5e:
         fe:21:f5:07:0a:9f:d9:3d:b0:56:b7:e2:49:f6:3b:50:23:8b:
         69:ad:ee:c5:35:ec:59:e4:1d:de:ba:5b:86:a3:8c:f5:c9:35:
         4a:de:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:49:42 2024 by rpki-client on console-fra.rpki-client.org