Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f7f8f1-fa8e-3fbb-9477-dac96f7f70e6.roa
File:                     80f7f8f1-fa8e-3fbb-9477-dac96f7f70e6.roa (raw, json)
Hash identifier:          LHZit9bX3LsWRxxzVUnjjgDeYtC5s5nCb8yol1ofWHg=
Subject key identifier:   6E:74:50:28:F7:B0:CD:56:E0:7D:5D:7B:A9:2D:86:F7:82:D1:92:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC8FB45CFC17E387632200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f7f8f1-fa8e-3fbb-9477-dac96f7f70e6.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        73.58.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:8f:b4:5c:fc:17:e3:87:63:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=6c85fb0b-92d0-423b-85f2-e7bf2f550612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:31:38:41:2f:29:81:5f:fa:38:14:8c:15:a3:
                    66:46:41:a3:02:fb:8a:ef:c1:c9:70:ff:0c:43:7c:
                    8d:25:5a:41:5a:b1:96:75:b1:6d:a8:1a:3a:27:59:
                    a3:2b:4c:de:84:82:45:e4:c2:b2:fc:d0:72:30:d6:
                    ee:80:f7:ea:f2:7f:cf:69:da:58:bf:65:3c:ec:ff:
                    f4:30:bc:68:68:76:bf:5b:f8:b9:9e:63:28:25:56:
                    f5:a2:2b:5f:cc:19:0b:87:e5:b7:8b:d3:2b:16:bf:
                    82:13:62:38:e8:e6:b7:f1:69:8a:f8:95:70:c9:b0:
                    b5:86:b0:e2:94:35:fc:14:82:ac:92:95:0b:d2:25:
                    17:7f:33:0d:22:1b:75:ef:91:d8:b9:5d:f5:c9:ce:
                    76:8a:36:10:7f:ac:bc:46:0b:3e:f0:70:6b:31:82:
                    c0:70:e3:b2:31:3a:50:34:42:06:cb:f5:17:0e:3d:
                    fc:9b:1e:16:ba:b4:36:02:13:87:22:6e:65:de:fe:
                    a5:9c:57:4f:be:6d:2c:76:af:2b:27:af:4f:d4:7f:
                    c7:7f:88:06:c6:47:a4:10:68:18:5c:7b:32:d4:05:
                    c3:83:c7:a8:5c:17:71:05:67:5a:28:29:76:ab:e7:
                    74:bf:92:e1:9a:a2:b0:c1:71:fa:48:f5:59:20:23:
                    fa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:74:50:28:F7:B0:CD:56:E0:7D:5D:7B:A9:2D:86:F7:82:D1:92:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80f7f8f1-fa8e-3fbb-9477-dac96f7f70e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.58.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:dd:4d:57:80:03:e3:6e:3b:93:37:ec:30:de:7f:34:4c:
         23:25:61:1f:41:fa:0c:18:b4:9a:e5:83:0c:57:fd:15:14:40:
         a7:66:f2:20:ae:e4:0c:71:1b:f4:b5:e2:f4:b1:67:39:e0:7a:
         3f:83:1a:b6:2b:17:2d:9c:38:d7:a1:ed:60:89:b0:6d:fe:ac:
         24:4a:d5:b6:09:ed:8d:d0:6a:d3:96:92:d2:9a:22:cc:25:47:
         ae:04:b2:77:4c:d9:38:af:3b:02:9c:00:cb:48:4b:d6:89:7d:
         7c:60:37:1f:a4:55:38:9b:f3:8c:4b:50:c7:f8:96:ed:1d:a9:
         21:a6:5c:3a:99:d8:6f:15:de:31:6b:46:aa:06:a8:69:d4:96:
         e5:fa:24:48:3c:a7:25:0c:9c:8e:f8:31:48:89:b6:40:bc:bc:
         9e:65:70:3d:88:cf:cf:a7:8d:10:81:6e:30:4f:2c:ab:cd:2b:
         04:cb:0c:56:98:35:f2:f6:82:78:4a:e2:f0:68:20:57:9a:62:
         db:8c:78:92:93:db:09:16:2a:57:c5:60:5d:f0:a9:28:75:fd:
         5b:dc:da:3a:91:f8:24:c2:5b:2a:ba:b7:08:1b:6a:e9:53:45:
         d5:9d:81:bb:e8:34:c6:79:ff:26:97:ea:1e:b1:34:d2:d7:f3:
         62:c5:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:39 2024 by rpki-client on console-ams.rpki-client.org