Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58803681-19f3-3def-b339-635b63fd1484.roa
File:                     58803681-19f3-3def-b339-635b63fd1484.roa (raw, json)
Hash identifier:          H7XnHOYhMPwokA7zDMSL+x5mlLH3qVoXeU2VnvDVSfw=
Subject key identifier:   48:32:BD:03:37:71:F3:D8:23:A9:E0:50:B4:AA:6B:8C:9E:C3:01:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC6B21B8324455359621C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58803681-19f3-3def-b339-635b63fd1484.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     40207
IP address blocks:        64.56.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:6b:21:b8:32:44:55:35:96:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=ffcc154c-4ebf-4b20-bf3c-1db924a126c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:34:c8:dd:6c:2c:33:8a:26:9f:a8:e1:42:
                    21:7b:48:9b:c7:be:85:1f:8f:45:e5:65:80:74:02:
                    eb:de:28:b4:f4:c8:a5:bd:05:e1:08:57:b6:79:77:
                    dd:71:d7:29:8d:93:2b:16:c0:6d:6f:a7:36:b6:05:
                    49:4d:cd:7f:22:f9:0d:dd:ff:62:ff:d3:c1:a8:5f:
                    1c:9b:08:52:b7:06:f9:8c:d1:7d:63:9a:92:8f:b8:
                    97:9d:69:2b:e4:d9:e9:11:4d:fd:7f:79:af:d3:e1:
                    08:7d:98:c4:5d:e3:4d:5a:b4:b3:13:86:45:70:5f:
                    24:3f:70:4d:46:65:4d:d5:7b:f7:2c:7c:4a:49:da:
                    a2:8d:22:bd:62:63:d6:96:e3:cc:41:e3:98:66:28:
                    88:95:66:d8:c7:55:ad:3c:69:62:f8:ec:36:48:b7:
                    63:05:37:d8:6d:90:db:7f:0d:d6:31:6a:8c:7c:31:
                    18:71:85:14:85:ed:b9:a1:f7:d5:0b:8a:1a:e2:c1:
                    84:eb:07:25:ac:8d:e3:5a:f6:a9:33:89:0c:40:41:
                    3c:25:32:b7:84:3c:ea:b1:63:09:f8:e3:e3:5c:bf:
                    57:6b:8e:e2:0d:ff:fd:46:46:6a:55:fe:35:ca:6b:
                    a6:a8:41:43:78:d0:14:0b:0e:8d:57:5d:b1:65:e2:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:BD:03:37:71:F3:D8:23:A9:E0:50:B4:AA:6B:8C:9E:C3:01:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58803681-19f3-3def-b339-635b63fd1484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:7d:8f:90:83:9b:d0:c8:cb:0f:a9:13:92:60:c8:3e:b7:
         ee:13:b2:30:2d:f7:b0:2a:2d:82:57:69:e0:27:72:36:91:2b:
         40:04:00:d1:0b:08:4b:a3:97:28:c6:38:a8:aa:94:90:a4:e9:
         8e:33:53:84:cc:de:2e:7d:84:18:bc:83:6e:78:15:1d:20:25:
         f9:12:6a:39:45:8d:26:55:27:f2:10:89:83:d2:cd:9c:38:65:
         c6:e2:5c:ef:bb:55:44:66:a1:4b:c6:fe:bf:e4:7c:43:6b:51:
         17:7b:b7:ec:a6:f0:79:0a:5e:2c:cb:ee:b4:2f:d0:ab:68:dc:
         a5:23:32:0a:99:94:c2:e6:24:7b:10:fb:50:2a:16:e5:0e:8f:
         1d:97:6f:de:f4:bb:f0:12:bd:0a:2f:84:f3:f6:ef:e4:25:2f:
         83:e2:be:a9:e2:23:7e:93:07:81:d5:02:61:5c:be:6e:a4:90:
         76:4c:95:3a:6e:e7:a1:b8:19:42:b3:09:d1:a2:89:39:6f:e5:
         d9:97:97:51:32:3a:42:4e:36:4d:a4:17:c6:88:7e:5a:24:7f:
         2b:c8:23:87:a1:aa:6e:f7:a5:cd:a3:16:d2:f5:61:d2:81:ce:
         aa:e2:86:4b:56:08:ea:72:2a:84:d9:db:76:e2:3a:dd:38:24:
         b1:b0:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:17:03 2024 by rpki-client on console-ams.rpki-client.org