Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
File:                     76988ed8-0896-3fce-b0d6-0f4b3b091909.roa (raw, json)
Hash identifier:          a9O3WBWxM+pFA3YydC8vrE7tCbosR2GBf49rwluU5Fo=
Subject key identifier:   4E:34:F2:EB:B1:79:97:8B:8E:E4:02:B8:C4:BD:5F:DB:CC:C1:6A:5A
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285847A073E9CA35179AD152B42280
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
Signing time:             Tue 22 Oct 2024 14:42:50 +0000
ROA not before:           Tue 22 Oct 2024 14:42:50 +0000
ROA not after:            Mon 20 Jan 2025 15:42:50 +0000
asID:                     212238
IP address blocks:        173.244.58.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:73:e9:ca:35:17:9a:d1:52:b4:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct 22 14:42:50 2024 GMT
            Not After : Jan 20 15:42:50 2025 GMT
        Subject: CN=4df06abe-0ba6-43bc-8705-ef3f0422db00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:62:4f:a1:ba:a9:85:fe:f4:32:5c:c4:0a:
                    5d:5d:33:a3:7a:20:04:eb:c9:7a:2a:2b:1f:c2:13:
                    0e:4d:bb:9e:93:0c:4f:55:51:76:46:4e:c2:a9:0d:
                    f5:f9:79:90:bf:87:62:24:74:aa:a5:ef:a2:bc:7c:
                    2c:04:63:3d:58:c6:f8:c8:f2:70:df:8b:a8:13:05:
                    9d:0c:a0:73:49:9e:cf:e1:7a:5c:2a:a6:02:1e:13:
                    88:33:09:86:a4:ce:e6:92:45:a3:8c:0e:53:d5:ee:
                    28:1e:1d:1c:0e:25:3e:74:f3:2f:f5:67:51:da:c1:
                    fb:de:63:5b:f4:4c:23:5c:79:76:f9:05:0b:c6:06:
                    0d:a0:84:b3:1b:12:b4:68:1c:37:5b:83:13:8d:88:
                    41:06:5e:55:4e:c5:15:5b:68:2c:62:fb:77:38:25:
                    b1:04:66:60:7c:de:d8:d1:93:23:76:76:2a:00:f2:
                    c0:87:94:a9:2d:f7:ce:b0:f6:da:e1:52:ce:a0:f7:
                    f7:f8:8a:c1:07:d8:67:72:83:0b:45:73:c4:d9:24:
                    1c:76:d3:5a:09:72:a0:65:61:9d:b4:2d:77:32:53:
                    59:08:96:1f:c3:04:0b:5d:66:7f:d2:5e:2c:4b:a5:
                    f0:1b:d4:1f:a9:ad:6b:85:8f:a7:68:4f:25:a2:f1:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:F2:EB:B1:79:97:8B:8E:E4:02:B8:C4:BD:5F:DB:CC:C1:6A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.58.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:f6:02:28:4b:a4:96:62:9b:0b:12:0b:d0:66:6e:3e:21:
         cb:3c:07:bc:d5:08:9a:ae:06:46:55:83:0c:16:87:45:ae:0b:
         2b:24:29:4c:bf:f9:b5:01:f4:29:f1:a1:ec:05:93:84:e9:c7:
         60:1d:27:1e:96:b7:29:9a:e2:05:44:46:9e:94:e5:89:00:99:
         ab:53:54:2e:7d:dc:02:a7:22:bb:ed:1e:25:89:47:52:42:70:
         f8:6d:5d:96:c1:48:e7:b9:1d:a9:ad:a3:fb:a7:bc:13:44:b0:
         9e:4c:f7:4b:4e:f3:19:13:a0:d6:92:61:57:a1:2e:af:84:87:
         b7:f2:0d:86:ba:bd:66:55:f2:4d:45:b4:e5:4c:4d:34:2a:ba:
         31:b7:df:90:c7:26:1b:45:c1:b8:1c:48:1c:b8:78:cd:18:46:
         d9:7a:97:f5:e3:a0:dd:a7:2f:1f:e9:aa:da:af:c6:65:04:2e:
         30:8d:62:28:8e:29:b1:7b:68:d2:73:fc:ee:3b:e3:3c:95:62:
         1a:5f:66:e5:0b:d8:1b:d3:c1:03:9e:13:01:7d:b7:b5:37:99:
         b0:1d:76:55:ac:77:75:52:cd:30:fb:69:71:38:6f:7b:4d:76:
         e1:79:9b:73:e8:6b:09:ee:4e:98:e9:75:ed:13:b9:ad:ae:45:
         2d:1f:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:40:03 2024 by rpki-client on console-fra.rpki-client.org