Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa
File:                     1faf7ad3-e3f9-3487-b235-101953ee16ec.roa (raw, json)
Hash identifier:          smCgOiHu/TsAUiS67V/eVzfgWIExeLVcYkfUw2DK4E8=
Subject key identifier:   83:3A:C9:EC:E0:34:D5:CC:E7:4E:20:AA:73:B7:12:46:93:E4:E1:8A
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285845D39E59E6DE2C8B7F7FEF7700
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     6079
IP address blocks:        45.58.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:59:e6:de:2c:8b:7f:7f:ef:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=15809085-93a9-4e35-b09c-9923b76d36f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:42:b9:1d:19:53:8f:31:e8:02:ca:d8:f7:
                    4a:ad:fd:b7:5b:85:32:81:01:97:45:8c:33:bc:cd:
                    1a:ca:d3:30:1b:7d:2b:de:12:69:00:80:e3:4b:cc:
                    d5:1d:6b:29:d8:ff:c1:18:cf:ee:87:5f:65:a8:12:
                    0e:cf:49:63:ba:3e:fa:62:5e:15:30:b1:10:06:12:
                    23:db:83:d5:07:27:9c:70:b4:94:3d:70:79:1f:32:
                    4f:d4:45:90:0a:40:d4:b7:81:f8:99:2b:20:64:74:
                    f6:ea:54:58:d9:c6:31:9d:a5:a5:17:cc:e3:b9:31:
                    a9:ff:f0:d5:db:6a:0b:c7:2c:99:6c:77:dd:e9:50:
                    92:75:f2:b7:6b:3d:89:40:da:bd:5d:02:79:12:ce:
                    3f:52:36:87:be:d5:f4:da:41:61:92:78:59:c3:9b:
                    0c:56:b4:fb:a9:b4:89:2b:fb:87:d7:f5:f8:77:e8:
                    90:41:7e:47:2f:c6:01:6c:56:b5:14:c2:49:ca:06:
                    cd:9a:76:8a:55:da:ee:05:73:ad:ef:e8:eb:09:ad:
                    aa:ad:d6:ce:38:e1:04:77:cf:94:dc:c0:72:1a:e2:
                    ab:f7:05:01:52:c6:b1:a5:38:48:92:0a:f8:15:c9:
                    d3:9e:d6:cd:c6:24:8f:cb:b3:a3:34:17:1b:5f:3d:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:C9:EC:E0:34:D5:CC:E7:4E:20:AA:73:B7:12:46:93:E4:E1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:6f:dd:84:3b:0f:38:c0:f7:72:ad:17:e0:f5:ff:f2:55:
         9a:72:35:fa:c4:a8:fd:2b:56:4a:0c:dd:16:5d:9e:b5:20:8e:
         65:46:a2:f4:d0:a5:0a:c4:8a:f0:90:b6:19:e1:6f:aa:cf:45:
         39:d7:fa:f7:5f:41:ee:e3:64:86:89:6f:98:f9:14:c3:f0:78:
         4c:b7:c1:0a:68:65:52:2c:52:a8:7f:dd:05:e0:a3:ee:66:e5:
         24:fe:16:b6:c6:c8:c6:d6:2f:17:28:29:2d:51:82:9a:0c:3a:
         9c:f0:61:00:91:cd:58:91:e0:84:1d:fc:90:80:fd:5a:bc:2b:
         9f:52:de:04:15:9d:e8:38:59:77:d7:26:ea:83:7a:95:ca:06:
         96:26:f6:2a:1b:66:8a:34:9f:d6:4a:8b:42:2d:74:38:b8:cf:
         c2:c8:df:d5:01:f7:5a:76:79:26:48:30:8f:a8:54:26:c9:69:
         ac:98:27:94:26:c2:39:c5:c0:8f:0a:16:3a:f5:6e:af:a8:0c:
         17:37:92:d9:3b:c6:6b:60:ce:18:30:0c:c3:80:bf:e5:4d:9f:
         56:ce:18:e1:cd:0f:e5:07:23:e5:96:a5:00:f1:33:f7:00:f9:
         3b:ce:1d:d7:1b:0f:2a:94:7e:d8:fa:61:90:64:47:a7:cd:33:
         bc:30:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:07 2024 by rpki-client on console-fra.rpki-client.org