Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58f86644-b70c-3a2c-b6cf-e0d2bbcd8893.roa
File:                     58f86644-b70c-3a2c-b6cf-e0d2bbcd8893.roa (raw, json)
Hash identifier:          BJfgk54UP6pY66j19D8lFT2V8KgkKus4jZs+YehDAYE=
Subject key identifier:   49:F0:C7:8F:F4:31:3B:75:2B:25:65:42:49:06:BA:82:5C:F3:67:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB0D256D7F88539D6D5600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58f86644-b70c-3a2c-b6cf-e0d2bbcd8893.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        71.203.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:0d:25:6d:7f:88:53:9d:6d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e58155c9-9088-4fe1-aff4-68225e53805a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:c4:b5:89:9c:fd:1f:f3:e7:7a:a5:b0:00:
                    1d:8e:2b:b2:c5:b9:59:00:d3:30:b8:cb:71:c7:96:
                    61:16:0f:32:c2:b5:49:c6:de:14:98:d1:52:3e:cc:
                    e2:a6:ea:b2:c0:df:67:12:9f:55:85:28:80:76:82:
                    35:27:cb:8c:9c:b5:1c:e2:77:0d:6e:89:d1:61:e5:
                    0c:f7:94:09:4f:a5:f9:60:be:15:15:b2:da:a6:c1:
                    c9:c6:eb:98:c6:b7:f2:20:2b:a5:73:fc:01:d1:93:
                    34:6b:bf:f7:2f:71:ce:17:86:ba:6c:25:c5:5d:c9:
                    a6:e3:ec:47:56:31:8f:1e:29:6e:29:29:4a:3f:89:
                    db:e0:5f:1d:aa:a4:cd:9d:a1:99:c7:0e:cf:31:a0:
                    52:60:b3:3e:46:38:6c:ba:18:2a:3f:e7:9f:a5:dd:
                    1d:44:eb:1a:1b:a5:a2:69:73:b7:fb:bf:dd:1e:e2:
                    26:a7:20:5c:75:c7:9d:76:33:80:9d:97:21:c6:fd:
                    5e:c2:b7:36:e8:95:c2:29:b7:af:da:61:91:8a:99:
                    dc:60:1c:40:67:2b:fc:e2:c8:f2:45:fb:52:38:88:
                    a6:27:ce:24:ee:8d:62:58:89:e7:40:77:31:29:af:
                    7f:6a:f4:37:38:0b:36:4d:a6:c4:f1:b2:d1:70:c0:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F0:C7:8F:F4:31:3B:75:2B:25:65:42:49:06:BA:82:5C:F3:67:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58f86644-b70c-3a2c-b6cf-e0d2bbcd8893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.203.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:0a:eb:17:49:73:cf:03:57:8e:48:52:f6:56:57:8e:dd:
         6a:2a:ce:3e:49:f9:71:88:0e:a4:52:d3:be:9c:4d:21:eb:ce:
         3a:da:bb:40:5f:04:06:e1:5d:f0:e4:15:ed:fc:1d:6d:ec:0f:
         5b:b3:8e:5c:be:b2:fc:5d:69:cf:b5:92:21:21:72:ce:72:a1:
         c8:e0:f2:36:ca:5a:85:b8:c5:98:9e:5e:f5:4f:06:ac:f0:db:
         ec:73:b9:6b:5d:62:11:cb:25:04:dd:4d:99:fc:8b:0c:6f:1b:
         51:83:32:b6:f3:49:3e:84:6e:b0:78:0a:48:6f:87:ed:c0:2d:
         62:09:06:9c:c6:8a:4e:34:c1:77:ac:b8:5f:e8:05:a4:57:93:
         50:69:01:a3:15:63:d9:c7:e2:fe:34:6a:fe:e0:27:bc:48:c8:
         66:52:3b:a1:1a:43:70:cf:52:42:0c:b0:d4:f5:f5:f8:f5:40:
         e0:8d:81:27:9d:51:be:2f:55:e4:76:c4:e1:6e:d1:1f:43:c8:
         c0:f4:25:e4:ce:eb:cf:96:83:3c:92:f1:55:96:f0:25:36:a2:
         65:e3:40:bc:67:92:a0:8d:31:92:a0:50:49:11:c0:e6:4c:5f:
         7c:d1:44:d3:30:f9:58:e3:c6:e6:e6:4d:c4:8b:56:6b:db:8a:
         89:c5:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:11 2024 by rpki-client on console-fra.rpki-client.org