Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa
File:                     5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (raw, json)
Hash identifier:          /58iAJa8c21TdhwFicWNvZA6I2lZLBwWSxa9PgXx2EM=
Subject key identifier:   6C:D8:50:20:1C:BC:63:08:4E:A2:F3:10:6C:0C:1B:54:D0:56:66:37
Certificate issuer:       /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Certificate serial:       010D0C9F43285845C01386EA9AB999B4E11E7380
Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        148.59.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:86:ea:9a:b9:99:b4:e1:1e:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=7a10c99f-5d80-48ff-80e8-37c229b031a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:eb:ee:df:ab:62:4d:2d:ea:07:cf:c1:a9:
                    c0:df:b6:b0:85:4d:93:45:7e:c1:e2:dd:21:f8:b4:
                    6a:fd:fe:e8:f9:d8:41:35:15:f2:ac:73:c3:3d:5d:
                    5c:3e:c6:7b:e4:d5:ef:ce:7e:71:e4:86:50:ac:7e:
                    75:bb:85:78:3e:1f:0c:f6:00:47:7f:46:d0:e2:97:
                    07:fd:b7:41:97:36:96:d0:84:f1:de:be:f8:a7:be:
                    a1:99:ba:79:a0:1c:a3:4a:26:7d:20:c5:13:b6:8c:
                    15:e5:af:15:4d:e7:72:5a:dc:de:63:02:a2:89:ce:
                    ac:b0:ff:36:69:0a:03:65:9e:37:fd:db:4d:9f:0a:
                    a1:e4:c5:56:70:05:22:fe:f1:c1:41:3c:41:80:d2:
                    15:9c:fb:16:49:7d:fc:8e:d1:af:54:df:8a:fc:db:
                    6e:b4:08:fc:49:53:c9:6d:b7:57:0a:ae:ae:cf:d3:
                    25:bf:8e:86:21:40:f7:66:d9:d7:9b:bb:55:d5:ed:
                    62:51:9f:b5:4f:bd:ae:33:73:87:c8:ce:18:8f:05:
                    2c:0b:90:c1:ec:5b:8d:4d:06:34:93:5d:df:84:b9:
                    56:f8:25:09:39:0f:e8:be:46:2a:18:9c:1a:db:e1:
                    71:31:e3:57:a8:4b:44:60:9f:9d:a8:ad:ac:4c:1d:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:50:20:1C:BC:63:08:4E:A2:F3:10:6C:0C:1B:54:D0:56:66:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl

            X509v3 Authority Key Identifier:
                keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:8b:b1:75:5b:e7:8d:aa:1b:9c:22:07:77:fb:0b:d7:78:
         aa:2f:29:11:22:a3:aa:80:01:48:73:a7:ae:fa:98:ef:ce:72:
         42:90:da:fe:87:fd:d0:f1:d0:f5:56:4d:00:11:42:15:95:9e:
         4e:52:be:b9:40:9e:ad:a5:9d:c9:58:02:14:7d:cd:6a:bb:9a:
         65:e9:4b:8c:10:48:c0:5a:cf:31:03:ce:84:d0:85:38:89:16:
         2d:ff:52:a2:2b:4e:18:3e:e7:2d:59:41:be:d5:eb:35:4a:90:
         4c:32:0c:da:be:4a:1f:58:68:fd:f2:e7:18:f5:9d:e1:b9:d9:
         9e:d0:2a:d9:c1:1e:91:d5:41:aa:6f:48:3a:24:bc:3c:6f:d9:
         ca:50:43:c8:48:f2:7b:f7:23:0b:bd:fc:64:e4:b7:27:73:fc:
         48:91:b1:55:c1:9d:9a:4a:70:a2:d0:32:f6:18:45:bb:2d:71:
         4b:5e:3c:4b:44:65:1b:b5:c1:51:5c:c0:04:4b:a1:52:28:e5:
         aa:50:8e:cf:85:67:7f:cf:47:a4:63:d0:d0:47:d9:99:9e:81:
         af:65:38:16:48:c9:c8:6b:83:3f:92:43:bc:33:78:7a:36:96:
         7e:8e:6f:0a:b6:1d:f6:3f:3b:7b:df:c9:a9:6c:b3:0f:91:05:
         75:2b:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:39:51 2024 by rpki-client on console-ams.rpki-client.org