Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa
File:                     3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa (raw, json)
Hash identifier:          kwTMJflovEaW8ZflgEcs6N5g31y28S0K4/taFrjKcHM=
Subject key identifier:   1F:13:19:DC:35:D0:45:F9:B2:C0:EB:AD:A3:DB:CD:D7:36:3D:5D:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB00A90AF967CBCC794D380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        66.240.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:0a:90:af:96:7c:bc:c7:94:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=be7579ed-c779-4a58-9b68-c7d456b68846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:ca:74:a3:d1:07:d3:f2:d3:3b:78:3a:d1:
                    d7:45:ce:2a:64:94:1f:82:c3:6e:0a:29:6f:5c:00:
                    20:de:3d:a2:0e:b2:c2:f9:c3:f7:f4:64:f0:59:7d:
                    01:41:ca:5d:08:48:55:fb:37:19:e3:86:cc:93:ac:
                    ff:08:cc:b2:a1:74:a2:f1:07:00:ec:63:ad:23:5e:
                    3d:30:0f:fb:e6:ac:f5:2a:00:9c:9c:9d:24:13:c1:
                    35:ee:3d:6f:1c:28:43:44:95:7f:58:e1:20:96:71:
                    26:1d:7f:15:6f:90:dc:29:37:90:2d:76:ee:2d:92:
                    61:3b:fd:13:a3:64:d1:91:99:db:d4:94:8e:67:15:
                    d5:d1:f2:83:0e:a2:65:b5:e1:2a:62:68:f2:bc:32:
                    36:c8:a7:9f:5f:74:ce:a9:49:ab:8c:05:8f:23:45:
                    d9:04:00:d9:93:35:07:4e:da:02:1a:c9:c9:f9:87:
                    10:93:07:f2:82:82:f7:55:78:31:af:af:d6:35:69:
                    03:0e:91:d7:99:79:a0:a3:61:5f:c5:a6:d1:2b:45:
                    79:d9:36:f5:14:55:54:0a:44:b0:57:be:8e:d1:80:
                    0e:4d:45:ca:7e:8f:88:1b:a0:3f:b2:31:bc:1e:90:
                    9c:25:76:12:09:6b:38:e9:29:d1:0d:b9:3a:b1:64:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:13:19:DC:35:D0:45:F9:B2:C0:EB:AD:A3:DB:CD:D7:36:3D:5D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f08e6bf-4c37-3181-95f1-4ada67cb5ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.240.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:3c:97:ff:39:38:59:19:e5:d6:a5:14:ec:67:c2:66:bf:
         eb:05:94:e9:67:7e:31:f2:a7:c6:d4:a2:68:21:ee:b6:0e:1e:
         10:f5:cc:75:78:74:67:30:dd:ea:c8:34:d4:0b:da:c9:71:07:
         27:c7:92:6d:5e:09:fe:ea:9e:f2:2d:be:f0:d1:cd:18:a8:77:
         f6:ab:d7:28:13:5e:c9:85:f1:89:39:30:bd:15:43:cf:fa:36:
         4b:39:8a:5b:98:f4:4b:81:79:2c:ea:4b:b9:ce:d9:fc:5b:e7:
         94:46:cb:0a:9e:0e:25:d8:aa:10:58:5d:27:a8:6e:1b:02:b3:
         9f:36:a7:33:ae:e9:2d:19:4a:ec:35:0e:87:88:d8:b5:a6:de:
         72:20:c2:85:ca:38:0b:fd:62:79:ab:ae:3c:55:95:1a:8a:7b:
         84:9e:3a:29:c3:8b:c7:37:1b:83:85:82:92:7f:b8:50:59:8b:
         ac:30:b8:0d:7f:38:44:74:97:3d:65:de:03:10:43:77:79:4f:
         b6:41:01:30:5f:d9:35:35:fe:35:d8:b5:aa:9c:c1:04:98:16:
         e7:ba:af:52:1c:5c:66:ea:26:61:43:29:2a:dd:5c:f4:71:80:
         42:15:ff:97:75:07:71:d9:e6:f7:2b:85:98:12:ec:0b:d3:e9:
         b8:53:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:37 2024 by rpki-client on console-fra.rpki-client.org