Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/596ee793-cacc-3932-8bd2-1b14ac0ad3f1.roa
File:                     596ee793-cacc-3932-8bd2-1b14ac0ad3f1.roa (raw, json)
Hash identifier:          4vNmw8k06ic9oykschu7YEcvll3tz+7TRU2zYY2S/+g=
Subject key identifier:   A5:B3:2B:33:55:D4:49:18:43:97:BD:50:89:0E:1F:FA:05:95:56:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848424B0AFC0B577EB296229420
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/596ee793-cacc-3932-8bd2-1b14ac0ad3f1.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     33656
IP address blocks:        73.58.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:0a:fc:0b:57:7e:b2:96:22:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=1359dc3e-819f-4e86-8598-b3304e4cf0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ae:b9:ec:03:76:35:a0:9c:47:3d:40:b8:b2:
                    07:61:83:29:88:44:72:45:94:57:5d:1b:dd:59:58:
                    83:42:05:b9:37:e1:79:63:cd:97:8d:fe:fa:e0:87:
                    29:be:6c:39:2b:09:2e:2b:1e:3e:29:90:e5:0a:68:
                    71:ab:b9:45:31:c7:ad:5b:35:e8:4a:9a:5d:88:8a:
                    0f:c3:42:8d:0b:81:4e:eb:76:c1:c1:23:d6:90:f2:
                    8b:1f:6e:68:cf:6f:52:d9:47:ef:9d:d1:9d:cc:c6:
                    ff:0a:aa:e0:73:9c:36:00:e3:dc:d1:7a:80:81:0c:
                    87:4f:e1:8d:d7:57:85:b1:83:21:16:08:2c:11:24:
                    3f:46:cf:25:2e:23:7f:a5:4d:91:81:e4:a3:23:9e:
                    d0:f7:0c:cd:09:5d:b0:b0:bd:ca:27:be:c2:5e:67:
                    21:9e:88:f4:bf:f0:f6:e8:78:b7:54:63:44:d9:6e:
                    a0:7a:91:0d:e5:fe:69:d4:18:13:d0:e1:79:f5:d8:
                    24:f1:5f:65:ad:db:6b:bd:46:02:6a:4d:e4:72:f8:
                    a1:8d:93:21:bf:8b:73:20:a1:2b:e7:73:f9:0b:a2:
                    ae:57:bd:0d:f1:45:66:fb:81:80:7a:b9:37:7d:07:
                    bc:8a:59:33:c6:2c:f9:07:17:62:bf:a7:15:75:e4:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B3:2B:33:55:D4:49:18:43:97:BD:50:89:0E:1F:FA:05:95:56:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/596ee793-cacc-3932-8bd2-1b14ac0ad3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:47:4b:b0:ac:18:6c:e2:c6:3d:ad:49:68:6e:82:34:fa:9d:
         d0:15:b2:42:25:4d:2c:43:1a:e1:44:08:0e:f4:47:fd:7b:d6:
         9f:ad:1b:de:0c:ec:8e:62:d3:3f:d7:e5:8c:f7:69:95:a2:2e:
         b2:c9:c8:96:52:97:b5:6c:3b:ba:fd:4b:6f:fc:77:d8:a1:22:
         a6:1f:be:dd:69:18:ed:78:c4:b5:5f:ae:10:47:46:19:ca:e4:
         5e:4a:b6:6b:df:b3:25:1c:f3:e0:2b:53:b3:c2:a9:e1:72:d4:
         d6:e2:cc:e4:12:25:68:df:6d:31:99:2d:0a:ad:5d:0f:49:89:
         59:b5:a4:31:9f:39:a2:1e:5c:75:1a:62:ae:68:0a:49:d6:9e:
         01:cd:c4:e9:75:41:ee:ca:8d:77:77:2b:7f:56:09:db:7c:0c:
         56:36:bf:bf:83:f7:9c:0d:20:95:70:db:14:95:f8:65:cd:8e:
         e5:da:f8:53:b8:63:22:df:48:f7:a5:a2:1c:b2:c1:1f:44:ca:
         79:8c:4c:0a:41:fb:93:74:22:a8:ec:19:f0:e1:08:40:ba:b3:
         7f:c7:40:f9:49:f6:48:43:e6:e1:4f:ff:18:b7:45:e9:8b:3c:
         c8:9e:c1:63:00:2a:b2:f3:34:2e:32:3c:65:21:4b:27:21:2f:
         19:6b:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:59:01 2024 by rpki-client on console-ams.rpki-client.org