Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a544e3b7-7589-3b66-b791-3313e2d71e87.roa
File:                     a544e3b7-7589-3b66-b791-3313e2d71e87.roa (raw, json)
Hash identifier:          +SZAsw4hcgzKgaXi2fJ6fxxANxsf44VDhMWBLO2LavM=
Subject key identifier:   54:73:2C:09:AC:58:97:E1:A6:3C:16:D0:FB:5F:97:43:E4:A2:C1:CF
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845CB3E43CDDB4956DB756A2B30
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a544e3b7-7589-3b66-b791-3313e2d71e87.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     16904
IP address blocks:        162.221.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:43:cd:db:49:56:db:75:6a:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=f962c076-0398-450f-a396-dd30e0946f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:f4:92:a3:8f:f9:60:24:42:84:c7:17:32:
                    09:10:4e:3c:78:de:44:8e:a2:b6:b8:76:99:b2:1c:
                    23:b7:3b:db:37:7c:3f:77:dc:8b:e7:d3:42:97:db:
                    2e:ac:13:2b:5b:e8:e0:26:23:f2:c4:9d:19:96:7d:
                    64:5e:03:37:36:b0:34:26:92:5f:81:88:f3:96:f2:
                    4d:26:2a:43:18:8f:dc:b0:a4:b6:63:3a:4b:37:0e:
                    7c:5d:cb:57:17:16:b8:d4:34:d9:e7:aa:4f:c3:00:
                    72:83:8b:ea:bb:29:09:69:54:e0:62:3f:ea:57:9b:
                    20:ef:6d:ed:45:88:b6:8d:a2:7f:1a:97:a5:04:42:
                    b2:3a:73:c7:81:5b:a7:ce:57:8d:4f:fe:50:e9:c4:
                    04:01:88:4d:6d:40:aa:63:e7:c2:13:62:42:0f:ba:
                    48:5d:8d:32:5e:8f:3e:fe:a5:13:ea:44:d6:a2:7d:
                    09:65:c1:58:4a:dc:43:46:8e:30:4a:e2:af:84:88:
                    be:bd:4d:92:3f:48:d0:90:5d:f3:92:0a:fc:60:f6:
                    bf:ef:bf:8e:15:a7:4d:eb:09:34:02:dd:83:bd:71:
                    a3:cb:f9:a1:42:29:64:a2:16:70:f4:9a:24:ad:4e:
                    d1:62:1d:1c:b7:0c:a0:c0:14:7f:5c:97:36:d2:b1:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:2C:09:AC:58:97:E1:A6:3C:16:D0:FB:5F:97:43:E4:A2:C1:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/a544e3b7-7589-3b66-b791-3313e2d71e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:10:e0:31:99:52:b2:ff:93:c0:fc:10:00:85:52:62:0c:f3:
         98:4c:b8:a3:ee:8e:1b:3a:82:fc:59:03:6c:e2:d5:49:ff:f6:
         2d:4c:fd:eb:38:2b:61:10:6b:91:7a:39:6b:4e:a0:31:c9:aa:
         0c:92:3f:14:34:3d:e3:24:a2:d4:27:76:96:61:ca:0e:df:d2:
         7b:a0:67:97:9b:33:e5:05:93:91:0d:3f:08:2b:59:bb:de:ba:
         00:db:2e:30:48:1c:c8:f1:c9:13:63:1a:6d:bf:7a:b1:db:0c:
         e9:fd:ef:c4:14:45:e0:c5:e6:e5:ca:97:d4:7b:0b:0c:d2:fb:
         01:d8:f3:45:ac:b5:72:b5:9e:05:f9:64:e3:9a:b9:56:ab:93:
         52:f3:97:f2:41:ab:c0:7f:07:6e:bb:e9:44:d2:bb:fc:a1:8c:
         8c:e0:e0:71:cc:39:b8:49:a7:b2:5b:3c:30:29:00:bf:f9:d0:
         8b:7e:0c:95:17:0d:8a:8d:85:25:2f:5c:2a:d9:23:91:c5:5e:
         c3:89:3c:f2:95:e9:81:95:8f:99:61:1e:c1:b2:d8:d2:9c:6c:
         c0:9d:f5:25:f4:84:83:a2:1c:80:99:a1:bf:47:c8:95:42:2c:
         ae:88:28:39:f6:4f:df:01:1b:c5:40:38:f7:3d:39:e8:d3:45:
         05:9e:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:05:00 2024 by rpki-client on console-fra.rpki-client.org