Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd8f2917-5ed1-3c1c-813e-f72cebdac65b.roa
File:                     dd8f2917-5ed1-3c1c-813e-f72cebdac65b.roa (raw, json)
Hash identifier:          6HKVW77d0yeoeDfs52TCSC/o5Kwg3TPHZZ9E1i9WwAI=
Subject key identifier:   88:9C:CB:78:C3:8A:5B:7A:9C:52:9B:E2:CA:03:00:93:DF:6D:A1:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC10CEF68D7FDBDD604300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd8f2917-5ed1-3c1c-813e-f72cebdac65b.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        71.58.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:10:ce:f6:8d:7f:db:dd:60:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f5b46b70-3e39-480a-a869-99ee09215fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:55:89:58:41:9c:9e:a3:de:7d:c4:a5:4c:
                    19:85:31:c7:c2:55:1e:5c:71:76:98:59:41:d9:29:
                    19:66:08:ec:57:e2:eb:c6:71:1a:25:6d:c5:2b:5b:
                    b0:d3:e5:fa:c1:c3:39:9d:bb:3c:af:20:3b:88:6f:
                    1b:10:4d:3c:b7:aa:42:0f:54:2d:ae:7c:26:c2:19:
                    8a:92:28:2d:11:62:93:cb:46:a6:eb:ac:bb:ed:3c:
                    35:55:5f:34:a9:0b:61:37:70:af:1e:a9:6e:8b:8e:
                    6a:2d:19:b3:7a:51:79:b5:d9:fb:c1:6a:19:74:56:
                    56:03:d6:81:b0:a1:6e:d6:84:5e:56:01:f4:d1:23:
                    2b:8a:a2:a5:39:9e:d7:b5:5c:82:e9:a4:11:a3:80:
                    f8:75:0e:0d:ad:fa:77:c7:56:25:39:8f:ea:52:de:
                    79:85:d4:aa:2a:89:0d:cd:38:1a:51:49:bd:72:a3:
                    77:53:d9:22:cc:09:c9:8b:2b:d8:00:5f:20:cf:be:
                    bf:89:ca:55:86:62:e7:2d:71:a4:0b:92:29:ff:83:
                    58:83:f0:04:35:80:0a:e5:ea:cd:85:4f:84:3c:7e:
                    57:29:3f:84:b0:fd:04:f5:b9:12:b2:45:70:36:b3:
                    e0:db:37:ef:84:f0:37:8b:86:45:99:88:7a:d8:c7:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9C:CB:78:C3:8A:5B:7A:9C:52:9B:E2:CA:03:00:93:DF:6D:A1:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd8f2917-5ed1-3c1c-813e-f72cebdac65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.58.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:ba:00:19:be:aa:10:96:0a:df:93:71:b5:e7:d2:e9:6d:
         e9:8b:42:7e:cc:94:38:0f:cd:2d:1c:f1:4e:7e:4c:85:1a:a0:
         a0:7d:30:d9:66:c2:b5:5d:91:e7:f1:d1:23:22:98:0a:f3:7f:
         b7:a9:4b:52:4d:7b:4a:72:37:92:f7:2e:2a:40:1c:0f:2d:2f:
         9d:d9:8d:b2:cd:db:b9:b7:29:85:fd:d5:ba:1d:3e:e2:24:84:
         b2:04:ed:7a:e5:56:75:3b:99:c4:0d:27:f9:3a:fd:d9:d9:3c:
         1d:65:ce:be:98:b9:e2:b6:b8:d8:d4:e5:ac:a1:09:1e:74:be:
         e3:ed:4a:ce:81:66:28:9a:be:34:a9:2b:33:b4:b3:0b:fd:10:
         ec:1b:15:17:dd:10:57:6c:31:9a:52:39:b1:2e:1d:26:74:7a:
         17:52:77:3c:b3:2a:57:08:f3:61:c9:63:dc:04:01:01:32:42:
         e9:68:17:ec:49:1c:6b:3e:77:8b:48:cd:d5:35:bf:31:d6:ea:
         ec:23:b2:c7:b5:44:a4:60:cc:19:fd:d6:4a:32:13:8e:c1:43:
         1c:f4:4d:5f:67:5c:47:f1:7e:af:a3:ff:44:f9:e4:c7:a1:5d:
         f8:6a:de:65:9c:34:c0:d2:69:03:91:a3:a3:26:c0:a0:c6:ea:
         24:47:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:00 2024 by rpki-client on console-ams.rpki-client.org