Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa
File:                     56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa (raw, json)
Hash identifier:          a949nucCZrv5XGoOzgXh2tNV+HIz8CFH28aUeHImPzc=
Subject key identifier:   F8:35:EE:F5:2E:29:71:9C:FB:AB:E4:CF:8B:6A:A8:BE:C9:9A:AA:79
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F432858479EDBCC6D1F19EBF1E6979B80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     3477
IP address blocks:        192.58.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:cc:6d:1f:19:eb:f1:e6:97:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=cffb55b9-f8fa-4ad6-8fa0-f0c4408200f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2f:d5:b1:6e:86:91:d8:e8:48:5f:81:03:12:
                    b4:0f:d8:e7:e8:09:58:e7:fd:b7:08:9e:f0:03:a2:
                    11:62:86:96:1b:d4:b8:5e:51:59:28:29:d0:da:64:
                    8a:82:f5:4e:31:4b:6f:1a:2a:b9:77:f8:59:b0:34:
                    97:ee:ec:2b:d5:2f:b4:c1:57:5e:e8:cf:70:b6:e6:
                    02:c9:90:be:03:e7:01:1b:25:38:1d:be:e7:ef:92:
                    ea:a1:75:a0:20:4a:2e:fc:9c:ca:1f:63:4d:95:6d:
                    1c:6b:48:39:5a:d4:76:d0:28:42:25:f5:ed:ed:e2:
                    45:f6:17:e5:93:59:56:fc:db:1f:ff:85:e9:f3:a1:
                    ed:cc:7f:af:71:12:63:e7:ff:59:7d:20:c2:af:ee:
                    3c:dd:6a:92:36:fe:19:96:60:86:0e:ff:fd:c2:8c:
                    ff:e3:1e:61:cd:a1:c2:00:5f:a0:b2:70:41:ab:fe:
                    d1:9c:8d:93:f9:f3:5e:46:94:ef:7e:87:2f:7e:cc:
                    fc:94:98:a5:c6:a5:80:db:a7:fa:db:79:7d:77:f5:
                    d6:f4:77:a4:fd:be:0a:80:65:64:92:32:30:e8:87:
                    52:ea:e3:b3:91:e9:25:46:7c:01:dc:d1:d4:51:0f:
                    d5:2a:ec:e9:5e:a6:48:d8:e5:19:79:30:6e:55:46:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:35:EE:F5:2E:29:71:9C:FB:AB:E4:CF:8B:6A:A8:BE:C9:9A:AA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:a3:f7:88:10:c2:d0:36:63:57:4f:ac:16:a1:4d:ff:d2:
         be:28:98:10:f5:cd:a7:99:4c:49:fc:f8:49:05:d4:6a:99:d9:
         48:5c:3c:43:87:bf:79:df:b5:00:08:8c:09:f6:5c:3c:bc:df:
         ef:78:81:0c:98:d9:42:00:dd:43:8b:6a:62:58:97:6f:26:1a:
         11:5c:03:c4:62:f7:f9:f7:eb:9b:ac:0d:51:8a:9d:e7:3f:55:
         7c:38:ef:ee:bd:f7:54:e3:63:02:66:73:39:41:a4:60:9e:84:
         76:41:06:b7:c9:a7:45:d8:8a:6f:ff:e1:92:51:4e:1c:13:0b:
         9d:58:51:7b:18:ac:e4:fa:e7:65:6c:9b:63:18:82:31:b6:c9:
         cd:b7:7f:9d:b0:b0:e6:98:c1:7c:0d:c2:a4:46:e5:a9:70:31:
         07:7e:86:33:36:a7:03:ef:bf:60:ea:5a:6c:c6:68:ba:1b:2a:
         31:bf:59:70:8e:32:e4:6f:fb:5d:8c:29:3f:b7:47:9a:2e:69:
         41:c0:03:25:c9:14:9a:eb:bc:3c:ca:11:04:b8:62:9e:e2:e1:
         8e:4a:cf:74:c4:ad:6d:31:fb:c3:73:b8:24:b4:27:a6:a0:3c:
         9a:05:1a:cf:70:83:9e:5b:5d:c4:c1:1c:b1:58:e8:ab:0e:f3:
         ce:83:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:13:52 2024 by rpki-client on console-fra.rpki-client.org