Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa
File:                     b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa (raw, json)
Hash identifier:          bNyIVGg+yiQ1MATYnM+z7Kf3nkm4v/hjLo+ICI8npeQ=
Subject key identifier:   F7:55:78:CC:DE:A3:D2:55:89:B0:63:B2:06:DC:B3:D8:74:C4:13:F7
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285845174AE46A81A5D56902623500
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     237
IP address blocks:        35.58.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:e4:6a:81:a5:d5:69:02:62:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=a51ffb28-d671-465a-bab9-98229525f4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:86:0e:94:38:86:41:ed:a0:9c:e9:47:cd:
                    a6:50:76:0b:9f:5f:63:00:47:79:4f:e4:f9:fb:a8:
                    5d:30:6e:f2:7f:31:58:27:ea:28:0a:ef:f9:2a:8b:
                    1d:5e:36:65:22:3b:cf:3d:38:b2:1e:ea:9a:45:f5:
                    15:80:11:3e:49:26:3b:9e:48:d1:8e:c6:37:de:97:
                    37:a4:19:ed:04:62:0e:b4:cc:bc:d1:43:ae:89:14:
                    39:ef:3f:ef:b4:a6:94:51:5d:a5:cc:e1:4e:9e:ee:
                    28:9d:2b:bd:02:3f:bc:3f:39:a3:23:6a:74:47:0d:
                    a4:f9:6b:13:8f:5c:c0:dc:74:cc:90:63:14:67:d3:
                    34:54:04:a6:05:64:f3:4f:5c:05:e5:86:f3:c2:f4:
                    01:e6:5d:4d:b6:6d:e3:fb:9b:39:86:03:ae:9c:96:
                    16:58:81:68:ba:ad:4d:a9:49:cb:c8:0b:80:01:fd:
                    8e:46:d6:e6:1e:e8:a0:5b:5a:4c:ce:1a:80:9e:f1:
                    ef:b8:19:de:86:69:5d:71:1d:3d:8b:77:7d:88:03:
                    03:c9:59:2f:50:7c:86:46:e5:ac:f2:d3:67:92:06:
                    23:0b:07:cc:dd:d2:0d:e2:4e:f9:52:9b:49:ce:aa:
                    83:c1:c5:67:9f:2e:3f:68:8a:08:5e:73:8d:f7:63:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:55:78:CC:DE:A3:D2:55:89:B0:63:B2:06:DC:B3:D8:74:C4:13:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b5:a0:8a:f1:0a:97:d5:e7:d6:89:b8:68:a4:7d:ec:d5:4d:
         db:0e:ae:8b:0b:5c:3d:cc:d5:13:37:52:75:5d:93:ee:c3:22:
         63:fd:71:49:14:eb:d8:19:89:9b:bd:1d:92:bf:36:52:c3:2f:
         3d:ec:90:b3:9a:5e:c1:70:cc:f2:30:5c:98:76:84:75:71:3e:
         55:89:70:c5:3f:50:54:37:16:2e:f5:e0:6b:17:cd:9d:c0:c0:
         5a:1b:6d:8e:45:29:b3:85:ca:5b:ff:59:7e:b7:04:49:94:a4:
         46:85:1b:ca:2f:03:a5:1d:61:d9:97:38:bc:9b:80:21:cd:3b:
         e2:82:bc:41:c0:74:51:51:fa:ac:47:7d:3a:f5:64:36:3e:6a:
         ce:52:16:0b:78:c6:49:43:60:52:73:cf:97:75:f6:05:f4:14:
         20:ee:f3:06:ae:42:5b:c5:ff:fc:fe:ce:af:1f:50:dd:0d:de:
         f4:e5:10:ca:08:0c:7c:2f:98:07:86:f8:82:be:75:d5:e0:21:
         e4:29:73:cd:ab:38:b6:79:30:63:a9:a0:d3:41:d5:db:30:d2:
         fb:ad:dd:50:1c:23:a8:ce:34:9e:28:53:48:d0:a0:88:bc:24:
         ba:65:b0:6a:25:f2:c9:75:3d:ea:44:e0:51:39:e5:be:fc:98:
         90:2e:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:34 2024 by rpki-client on console-ams.rpki-client.org