Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/58d12fa0-45b7-3ce4-8c80-8f83e4265b0c.roa
File:                     58d12fa0-45b7-3ce4-8c80-8f83e4265b0c.roa (raw, json)
Hash identifier:          s9I8mBSw0bZyxvyKpep2sZju7GwUiZveJj6sQVBhxqg=
Subject key identifier:   0D:18:76:98:3A:40:EC:1C:9B:DD:FF:3A:86:3D:06:4D:D5:6D:34:36
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B2FA6F0CFCE464B15DC880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/58d12fa0-45b7-3ce4-8c80-8f83e4265b0c.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.42.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b2:fa:6f:0c:fc:e4:64:b1:5d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=84e7e18c-c197-4763-948d-b2c85ee7733d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:13:60:cb:af:6a:f3:35:26:97:9e:2b:90:
                    85:44:66:4c:a5:cb:2b:dc:af:a7:4e:53:ee:6c:7b:
                    ae:96:7c:e3:b5:3b:0c:7f:ec:38:95:a5:77:89:cd:
                    65:d8:24:10:39:24:3a:d1:e0:18:91:88:de:65:83:
                    b5:3e:b4:be:7b:29:61:71:cb:47:42:17:8f:78:70:
                    9c:3e:54:72:c5:e8:69:17:4a:e9:cf:f4:bc:06:ae:
                    8c:2e:08:e9:1c:88:57:1f:64:77:88:be:a1:cb:4e:
                    6a:7c:1e:11:d2:b3:37:9f:30:9a:33:17:29:ca:24:
                    08:9e:e7:8d:ac:ce:b0:78:c6:4a:2e:5e:6c:19:4b:
                    6c:e9:c4:8d:18:e3:df:8d:6d:82:af:0b:78:93:23:
                    fc:04:dc:0c:2e:95:fd:f8:79:9e:a6:ca:b3:46:17:
                    5b:18:54:00:34:d7:d7:ec:61:70:45:82:7e:1e:2b:
                    0d:91:1e:5e:9f:f6:a5:20:ac:36:f5:24:5a:7b:42:
                    52:6c:32:8c:11:7f:1e:c2:83:e1:3a:49:51:0b:59:
                    30:98:23:34:11:ed:5c:5d:27:3d:f6:95:62:30:64:
                    d6:a8:a6:92:32:73:95:14:a9:c6:6e:03:a1:b5:8b:
                    45:4b:fd:03:5a:74:96:58:e9:02:54:88:a0:bd:a2:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:76:98:3A:40:EC:1C:9B:DD:FF:3A:86:3D:06:4D:D5:6D:34:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/58d12fa0-45b7-3ce4-8c80-8f83e4265b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:d1:34:3e:cb:62:97:0f:b6:c4:bd:d4:09:c5:df:c2:4f:
         cc:5a:c7:fb:0f:fd:c9:0b:15:8c:5d:53:3d:82:81:21:53:bd:
         25:ca:84:a1:c7:fd:8c:3d:b5:01:50:f9:58:39:96:a5:c5:67:
         db:66:c8:47:69:c6:2f:db:69:8d:9e:f2:79:48:c4:5d:d5:9d:
         34:57:fa:bc:52:77:72:10:6d:bf:9d:87:8e:f4:f7:e1:a4:04:
         ae:99:93:28:d4:08:2c:97:24:e3:9c:23:45:48:82:aa:b8:65:
         af:cc:bd:55:2f:d8:87:0c:24:63:84:a7:3e:c5:5b:54:66:a9:
         17:4a:fa:8b:24:ce:6d:5f:41:fd:d5:b5:41:1e:22:c1:0b:19:
         a6:f7:49:61:ea:be:d4:a0:18:71:a1:76:40:7d:8e:bd:ad:bb:
         dd:42:84:d5:2f:c4:eb:24:d3:dc:47:a3:e0:46:88:3d:06:73:
         97:aa:ee:57:f9:b1:5b:fe:87:a4:a6:47:fa:87:06:0f:12:4f:
         f8:86:fc:75:86:5e:c7:f3:23:ec:2f:97:fc:1e:8d:84:9f:cb:
         22:3c:fb:a4:09:34:df:1a:3a:31:fc:7a:ad:b8:cf:9e:f4:84:
         ad:21:eb:cf:06:65:33:3b:29:7a:75:56:61:45:1a:66:a2:88:
         a5:33:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org