Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f4920c7-c874-38ab-bf3c-1d9f51bf5936.roa
File:                     7f4920c7-c874-38ab-bf3c-1d9f51bf5936.roa (raw, json)
Hash identifier:          6WPhKmcfNOvWW25rWLrkSTFDzB9yeglxgmRH+A4VDOo=
Subject key identifier:   0F:77:F2:B7:3E:EC:44:1E:C6:6B:65:83:9F:B4:33:BF:07:5B:0A:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049AE174CDC589919452080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f4920c7-c874-38ab-bf3c-1d9f51bf5936.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        71.59.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:ae:17:4c:dc:58:99:19:45:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=d93963f7-95da-4b4e-b3c6-c5cd93186120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:68:30:5c:73:7b:ef:b5:f6:c8:14:8f:c8:
                    e2:27:31:38:05:20:3d:68:b1:13:ac:30:1d:91:1c:
                    75:f4:74:7c:1a:95:ff:5d:be:36:6b:72:49:ee:91:
                    30:59:50:5f:7d:7f:38:71:f1:c0:bb:8d:2c:2e:aa:
                    f1:e7:2e:c4:13:6d:78:dc:e8:3a:60:7f:60:1e:e4:
                    ec:f5:6a:23:83:1b:4b:cd:a5:fb:66:5f:81:2d:87:
                    59:f6:9b:b6:0c:c7:e4:0e:8b:a4:87:15:0c:be:e2:
                    e7:82:9f:5a:df:89:fd:f2:09:07:9d:fe:79:01:35:
                    61:39:f1:a0:83:9b:b5:2c:3b:58:b2:d5:c7:8b:84:
                    4e:16:9d:ab:29:06:52:ec:4b:d1:ac:51:5d:18:07:
                    a8:14:63:04:f3:1c:b7:ac:df:90:e2:e6:62:03:7f:
                    e0:ce:dc:f8:29:fe:c5:f6:fb:22:fd:55:7f:a8:3f:
                    17:a8:f9:20:36:4d:b3:4a:0f:2e:93:7d:d9:be:68:
                    be:76:f6:14:7f:bd:3f:9a:89:94:16:4d:17:14:b1:
                    2b:bc:2a:db:1a:a5:57:12:3e:bf:85:df:a9:31:d0:
                    d1:4d:71:cf:2f:02:a7:68:96:85:d1:a9:36:4f:f7:
                    e4:96:2b:ce:60:75:f2:4b:76:69:0d:43:a4:30:9d:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:F2:B7:3E:EC:44:1E:C6:6B:65:83:9F:B4:33:BF:07:5B:0A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f4920c7-c874-38ab-bf3c-1d9f51bf5936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.59.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:bd:58:0f:7b:97:f5:60:29:27:66:1d:38:2c:33:11:e0:
         8e:e9:e0:5e:37:02:0b:95:92:2c:7f:96:65:fc:d1:c3:52:19:
         fb:06:7f:1d:cb:53:75:9d:f0:ef:d3:3c:7d:10:77:4f:f6:ed:
         52:b4:52:98:07:09:f4:9d:2e:d3:db:58:cd:29:d9:c0:c4:23:
         f9:e8:5c:28:ca:85:cb:fd:9c:6d:97:84:92:54:63:15:e8:79:
         32:96:b5:30:48:b9:3a:24:07:aa:14:74:82:de:23:a8:6e:e9:
         18:0d:c6:67:e2:e5:04:eb:8d:05:8b:ff:ee:da:5b:7a:92:69:
         35:0f:bf:15:2c:c8:49:4a:86:43:a0:aa:1d:5e:35:4f:8f:1d:
         80:73:63:b4:95:48:d4:d6:c1:01:42:c4:a7:02:6f:aa:7d:2b:
         d9:4d:cb:9e:28:40:0d:53:56:ca:55:b5:f5:eb:b0:32:5b:eb:
         2a:c9:c1:80:f3:c2:d0:99:eb:19:ac:19:f6:0e:09:dd:97:43:
         a7:4a:16:c3:78:a0:bb:7b:e1:52:52:df:81:5c:50:ac:bb:a6:
         55:db:73:71:61:db:5f:a6:ab:61:22:86:e3:30:5d:b8:a5:e1:
         67:20:0b:fd:ea:31:c0:4e:06:64:22:9f:0d:6e:11:f1:20:ef:
         73:11:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:30:40 2024 by rpki-client on console-fra.rpki-client.org