Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2d55bc73-0d0d-3832-b1b5-750332b80d46.roa
File:                     2d55bc73-0d0d-3832-b1b5-750332b80d46.roa (raw, json)
Hash identifier:          c6A0JrQXikvpEdpPsYDAWcvlGP8OJCVcjShZ6K+VSJo=
Subject key identifier:   33:D8:C0:25:35:DB:FA:B1:2A:6E:30:7C:84:E1:77:CB:C7:1F:A8:14
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858457B2AC3970E6B3C091C07F5C8
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2d55bc73-0d0d-3832-b1b5-750332b80d46.roa
Signing time:             Mon 08 Apr 2024 20:36:40 +0000
ROA not before:           Mon 08 Apr 2024 20:36:40 +0000
ROA not after:            Sun 07 Jul 2024 20:36:40 +0000
asID:                     211585
IP address blocks:        173.244.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7b:2a:c3:97:0e:6b:3c:09:1c:07:f5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Apr  8 20:36:40 2024 GMT
            Not After : Jul  7 20:36:40 2024 GMT
        Subject: CN=21e777b6-605a-49df-822e-e388e043fb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:6c:62:99:cd:13:df:84:71:5c:ea:5e:7e:
                    0b:e8:95:0d:f5:fb:66:74:c8:69:3d:9d:80:35:99:
                    c1:de:7e:40:7d:9b:12:06:74:f0:2b:2c:60:71:65:
                    9d:ad:4f:5e:b2:46:62:34:1d:29:88:c9:a8:19:7e:
                    91:09:e6:55:6d:24:d6:2e:f7:b6:82:7a:b7:07:38:
                    70:04:25:81:a3:bf:cd:45:70:a5:6b:f5:73:1f:9e:
                    d3:3c:e0:74:09:36:df:52:19:db:ae:22:48:31:02:
                    8d:b4:d9:54:25:87:ac:80:b2:98:17:66:a2:c0:3a:
                    e5:95:d8:8b:1e:23:35:f0:25:ac:99:2d:f3:73:6b:
                    6d:68:50:ad:6e:67:86:5c:ea:54:ce:88:c8:4c:2d:
                    da:f2:ba:6a:b3:56:a7:a9:7f:50:8f:c2:d8:22:25:
                    ca:17:8b:6b:c3:98:e8:43:c8:da:f4:ad:5c:31:31:
                    6a:2c:48:fb:27:25:c1:05:41:02:f8:d8:41:05:83:
                    66:70:04:0b:38:a8:5b:8b:b5:d1:c3:d9:ef:df:98:
                    ca:4a:64:0a:0b:3d:a1:80:96:c1:8f:8b:bc:81:0f:
                    7a:00:50:16:fd:a8:42:25:42:3f:a0:62:1c:ff:14:
                    ce:30:29:f2:51:af:30:77:ca:83:8f:36:e5:93:ce:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D8:C0:25:35:DB:FA:B1:2A:6E:30:7C:84:E1:77:CB:C7:1F:A8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2d55bc73-0d0d-3832-b1b5-750332b80d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:69:7a:cc:9c:64:75:c2:c0:1d:bf:6c:2f:c2:91:59:ef:
         1e:2a:b7:32:dd:bb:ed:34:89:96:8e:3a:51:f5:fb:0d:82:b3:
         fe:88:c6:63:db:db:dc:ca:63:c7:10:bb:49:70:33:e5:df:15:
         61:46:3e:56:32:32:64:f8:08:27:0e:54:3c:f9:6d:a6:5d:15:
         87:7d:18:7a:31:64:0d:92:14:52:a0:84:6b:a9:26:b3:30:99:
         3b:66:b5:ba:3e:b1:35:64:39:62:3f:9d:11:63:a6:c1:b0:00:
         5c:bf:2c:63:92:de:8c:23:d5:f0:69:13:0d:0d:11:90:ad:48:
         58:07:5b:56:d8:96:81:91:84:4f:f6:17:7f:0d:1d:b7:52:8a:
         12:34:f8:1a:0d:4a:24:82:6e:d6:2b:31:4a:d3:cf:09:13:62:
         11:f5:1b:7a:3d:db:70:4c:d4:43:90:21:b3:1c:21:e9:a5:81:
         b7:c4:36:98:0b:28:e1:ff:25:65:26:b0:a5:c6:35:3d:f0:3c:
         13:55:ba:b9:b7:4b:be:a0:ed:06:cb:df:a9:ae:2a:f8:91:d7:
         6c:3b:71:87:cb:a2:24:a3:4c:dd:6b:d5:fc:8d:17:5d:2b:25:
         95:17:66:b8:78:21:4e:bf:45:c4:e4:fa:e1:bb:52:5f:35:a2:
         74:db:05:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:09:25 2024 by rpki-client on console-ams.rpki-client.org