Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
File:                     79033610-1a65-35fc-b61f-1ebcb23beb94.roa (raw, json)
Hash identifier:          mSpz9NZWn+qTUWVx0NlclVeLd6pWoBVD2ZzBF+XSZns=
Subject key identifier:   E6:F1:0C:CB:DD:ED:D8:E6:D4:BA:EF:EE:DB:76:6C:EE:82:88:98:36
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584784567ACFFA5133F4AE854FC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     3223
IP address blocks:        172.94.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7a:cf:fa:51:33:f4:ae:85:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=7de5ded9-1dcc-4cf5-9a9d-e00227f25161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:f2:ac:78:5c:c8:27:fa:ea:ce:f3:dc:dd:
                    e1:39:d4:6a:36:d4:14:b8:2d:63:d5:b7:70:39:9e:
                    05:15:49:af:b9:d3:9f:e8:ae:bb:ca:4b:dd:e9:10:
                    40:5a:99:64:95:a3:21:5b:97:3b:d2:a3:25:69:f9:
                    07:cb:65:df:4c:b5:97:1c:4e:57:fd:c0:9f:6c:d8:
                    90:ac:97:69:60:c6:1f:13:3f:48:d1:12:b6:6e:55:
                    0f:20:7b:dd:cd:03:bc:bb:6a:a8:cf:67:99:e6:71:
                    7a:36:22:3d:e6:b1:f5:9b:a3:87:4b:0d:3e:01:b7:
                    d7:75:85:25:b4:e1:33:44:69:44:bd:22:ba:1c:6e:
                    cf:aa:a0:0a:ff:58:df:cd:d7:55:e2:6a:18:84:46:
                    76:0f:5e:05:cc:d4:9d:40:0c:09:e0:46:04:3c:a1:
                    c7:ee:4f:35:36:5b:3a:b1:ae:9e:3e:2d:73:ac:3f:
                    bd:81:f1:f7:fd:d4:30:78:7c:87:46:51:d6:f9:4c:
                    16:1b:bd:a7:9d:c5:98:2a:98:56:64:6a:3d:68:94:
                    24:94:8b:00:4b:1e:df:8d:3e:72:2b:0c:2a:42:31:
                    44:03:d2:77:f5:39:e7:31:f8:f9:c3:e1:59:c1:10:
                    2f:a9:44:ba:1d:4c:b4:7a:30:9f:9f:6f:ee:dc:88:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:0C:CB:DD:ED:D8:E6:D4:BA:EF:EE:DB:76:6C:EE:82:88:98:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:80:18:c4:f3:12:aa:2f:67:2a:b3:fa:0f:fe:4d:7e:f0:08:
         31:c2:83:72:b0:84:d1:12:9a:3f:d4:ac:4c:c9:56:d7:f2:15:
         84:0c:9f:b2:90:dc:1f:11:36:58:58:1a:28:e6:3e:81:c7:86:
         c2:aa:3f:92:d2:31:b7:35:36:b8:2d:b3:f3:96:8d:ed:cf:fd:
         a8:71:8b:7a:b4:95:39:64:0f:39:9e:9d:a8:bb:aa:f7:17:fc:
         e5:dd:4c:8b:e8:ff:1a:80:a8:af:a3:74:da:16:49:3e:fc:de:
         a1:d1:61:3b:84:f7:d2:44:15:a7:75:0c:91:f3:76:fa:6a:9e:
         b9:a9:a4:ff:75:ec:d8:21:18:69:d6:06:11:3d:c1:18:ee:eb:
         28:8b:07:35:56:91:87:6f:bb:df:16:26:d1:38:70:8f:96:7d:
         97:fb:cc:1a:a2:b2:2d:eb:79:27:84:f7:79:cb:13:c9:7c:0e:
         f7:85:b4:a4:ee:5b:ce:b8:b6:59:4a:08:97:56:4e:02:cb:61:
         d4:2f:14:c7:f3:70:99:5a:4f:ad:f7:19:1b:8e:b6:9b:39:d5:
         a4:cb:5f:13:88:bd:0d:24:9c:17:7f:91:74:8c:03:2d:ad:7b:
         12:7c:7c:90:ae:1f:6f:ec:50:25:a3:23:c8:0c:da:c8:3e:93:
         03:d8:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org