Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f00291f8-83f9-30f5-862c-2f4854fb7d79.roa
File:                     f00291f8-83f9-30f5-862c-2f4854fb7d79.roa (raw, json)
Hash identifier:          TjT+TqK9K/vh/DNJAEuJlMFaTnb81tpaPR9c7zj24Hw=
Subject key identifier:   5E:59:87:F1:CA:F8:CD:7B:EB:A3:F7:B1:03:77:81:20:2E:A7:84:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600496A867E7C2E179F6BD780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f00291f8-83f9-30f5-862c-2f4854fb7d79.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        73.58.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:6a:86:7e:7c:2e:17:9f:6b:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=da6be08e-f6a5-41b0-b4d1-7ff6e8d553a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:80:1f:48:d1:72:27:13:db:bc:73:23:e6:
                    af:1e:9b:8d:c2:4c:cd:15:e8:b8:b1:5f:ca:c0:71:
                    6a:72:7c:ad:5f:c7:90:ce:4c:85:54:61:ef:e4:3f:
                    0d:c3:b5:2f:f3:b4:20:b2:b7:75:49:17:92:99:7f:
                    22:aa:c6:eb:a2:d5:fc:34:89:e7:88:55:f4:94:dd:
                    21:b7:76:00:dd:c8:48:47:10:3b:f2:52:5c:bc:98:
                    2f:4d:da:1b:b1:29:26:48:8f:5d:66:48:20:c4:b7:
                    05:00:d6:f5:58:3a:33:2d:44:f0:8a:de:30:b4:c0:
                    21:ce:82:4a:4a:47:3a:c1:4f:bf:a9:e2:e9:66:e0:
                    21:db:92:33:39:53:52:ce:03:a1:3a:0d:fe:d7:c5:
                    d3:68:90:4e:74:40:eb:64:0c:2a:58:5c:62:3c:e0:
                    e4:88:3f:3a:b3:62:09:92:c1:c4:1a:35:84:17:46:
                    c8:67:fa:91:af:18:6a:a9:5b:68:1d:ea:70:e5:d8:
                    c9:dc:35:d3:fe:a7:ed:ee:b0:73:88:46:49:d0:a5:
                    b4:17:58:65:fb:d1:44:9e:07:cf:01:af:94:69:fd:
                    7b:81:8d:13:9d:d6:20:08:71:df:54:34:89:a7:30:
                    1c:1b:c3:89:93:33:11:e1:f0:26:6d:b0:64:2f:52:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:59:87:F1:CA:F8:CD:7B:EB:A3:F7:B1:03:77:81:20:2E:A7:84:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f00291f8-83f9-30f5-862c-2f4854fb7d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:40:ab:d6:6f:29:e1:ea:36:ca:8c:84:9e:82:62:1d:f1:5a:
         9c:c0:8e:4a:9b:50:66:1b:92:bb:21:14:3d:41:d1:c5:98:db:
         90:7c:a0:c0:4e:d2:b8:df:45:bd:9d:91:84:a9:17:6f:b8:c3:
         df:ff:b8:b3:09:60:95:22:34:fc:e7:43:f6:a5:47:89:71:c4:
         ac:1b:17:e8:b6:11:cc:40:3d:90:46:db:e0:79:0d:b3:9a:8d:
         66:22:cb:e7:22:3b:62:3d:45:01:8b:85:62:d0:20:38:1e:e5:
         73:5e:13:68:7e:38:82:5a:56:25:87:14:89:9f:85:f8:fa:5b:
         c1:c6:24:81:de:da:80:85:83:b5:00:2c:87:b2:00:89:e9:94:
         81:d0:d8:56:f5:b8:ff:70:40:21:13:75:19:5c:bf:3d:4a:78:
         04:5f:d4:da:48:16:a7:73:20:91:44:b5:41:60:a3:8f:3c:27:
         f7:3e:55:51:19:2f:6f:c6:43:ff:95:bb:27:0b:8f:c4:32:b1:
         ad:39:27:f9:28:02:b0:bd:ff:02:44:7f:3d:04:b3:7a:99:69:
         3d:6b:7b:2d:29:8a:08:42:66:4b:f8:9a:b5:7e:dd:9a:ce:11:
         dd:70:3c:8d:76:cc:f0:d6:75:53:9b:de:fc:2f:b7:da:42:69:
         a6:20:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:45:48 2024 by rpki-client on console-fra.rpki-client.org