Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/4a3c30a6-11ad-3dcd-8315-34748f536be7.roa
File:                     4a3c30a6-11ad-3dcd-8315-34748f536be7.roa (raw, json)
Hash identifier:          tzt1DLCZx8ME/r5KWKT4CcgEjItTdMKWbOiuenfNv8Y=
Subject key identifier:   B9:30:43:F1:F9:84:9E:A5:12:C0:89:59:18:A2:37:AA:59:1F:26:54
Certificate issuer:       /CN=fba57140-a369-4a3a-8edc-69732d179924
Certificate serial:       010D0C9F4328584755045892B0F5025FD06751C0
Authority key identifier: 0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/4a3c30a6-11ad-3dcd-8315-34748f536be7.roa
Signing time:             Wed 25 Sep 2024 14:12:25 +0000
ROA not before:           Wed 25 Sep 2024 14:12:25 +0000
ROA not after:            Tue 24 Dec 2024 15:12:25 +0000
asID:                     395279
IP address blocks:        134.199.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:55:04:58:92:b0:f5:02:5f:d0:67:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba57140-a369-4a3a-8edc-69732d179924
        Validity
            Not Before: Sep 25 14:12:25 2024 GMT
            Not After : Dec 24 15:12:25 2024 GMT
        Subject: CN=2c6c459d-23ff-4ee5-babd-875abc3b0032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:55:fb:89:14:72:8c:f5:52:43:88:fe:8b:
                    87:42:91:9f:0c:86:04:1e:ee:b2:ab:52:2d:14:cd:
                    79:ab:f4:86:60:84:f7:c8:af:1f:d7:88:c3:8e:6b:
                    50:07:28:75:7e:ef:66:60:e6:50:73:46:ca:f7:34:
                    a4:06:ed:cf:6e:c0:4e:3a:aa:a2:a7:9a:2f:48:36:
                    c0:0e:25:93:43:88:4c:6a:82:ec:77:62:05:6a:24:
                    82:e4:e5:e2:df:18:c8:3a:c7:b9:02:39:89:aa:64:
                    b7:58:e3:0d:e8:27:eb:50:a7:68:8c:f3:ef:ae:d8:
                    2a:ce:77:f2:5d:50:5a:3c:24:dc:15:03:c1:b9:c4:
                    e9:75:d2:d9:fb:9f:61:cc:a8:ce:e7:81:11:1c:43:
                    8e:04:fe:36:f6:45:fd:f6:0f:35:3e:20:e6:55:11:
                    60:8c:a1:74:b0:f1:b1:16:05:76:17:10:3b:43:9e:
                    0b:60:fc:4d:6a:c0:b3:fc:24:6a:52:ca:9a:5a:f4:
                    cc:dd:a3:bc:2e:e0:0f:d5:4a:9d:57:fd:f2:92:00:
                    b6:a3:6d:e5:ec:1b:02:34:a0:b4:1b:56:b2:86:ac:
                    e1:06:aa:b2:06:29:5d:3f:8f:8f:d1:ac:d9:92:e9:
                    65:0a:47:cd:59:b3:6f:81:7c:12:1d:3f:d2:34:57:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:43:F1:F9:84:9E:A5:12:C0:89:59:18:A2:37:AA:59:1F:26:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/4a3c30a6-11ad-3dcd-8315-34748f536be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.crl

            X509v3 Authority Key Identifier:
                keyid:0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:70:d3:c7:23:8e:4a:fa:26:ef:c8:95:cb:49:60:7e:f8:69:
         b1:30:c3:ec:12:9c:50:c6:c2:3d:ef:6d:ee:bb:0b:50:4b:0d:
         0f:be:25:c2:5c:d3:00:92:81:ba:5b:e5:51:98:ca:4d:dd:23:
         8b:3f:ff:7f:87:4a:59:d0:b8:49:10:ab:87:8d:7d:30:a3:f6:
         b3:c9:65:9e:a4:93:8f:ee:c9:f5:ca:e4:31:c0:27:bd:ca:da:
         0b:c7:1d:6e:e2:41:b2:48:2a:29:84:51:28:a6:78:79:02:b5:
         a4:2c:c0:95:16:3d:12:90:fe:31:fd:e5:68:63:2b:59:65:ba:
         ac:e6:34:b1:01:5e:d7:ac:71:b4:3a:8d:31:94:a7:e2:fb:ab:
         e8:51:7b:65:cf:9e:36:1e:fe:d4:5d:f9:c7:e1:74:e5:4f:3e:
         76:21:ea:b6:4a:99:60:cf:9f:b9:f6:fd:14:9d:9a:85:af:8e:
         ef:89:dc:14:c4:df:6f:87:1f:10:74:60:3f:09:ac:f0:17:14:
         fe:cb:5f:c6:6b:15:a6:5d:21:03:d5:ed:58:58:c3:07:4c:79:
         04:9d:7c:75:5d:e1:4b:0c:6d:05:b0:1e:b3:a7:81:2c:0f:af:
         43:50:84:ec:f7:ff:88:ca:00:4c:01:51:4a:67:46:6f:7e:bc:
         5a:8e:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:05 2024 by rpki-client on console-ams.rpki-client.org