Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
File:                     79033610-1a65-35fc-b61f-1ebcb23beb94.roa (raw, json)
Hash identifier:          WxN0cHZEwpTzQaRcm88Iz7wqG8NswtfLV91u94EWd9s=
Subject key identifier:   51:02:17:52:5E:1D:33:D5:41:71:7B:E2:54:BB:D7:F6:47:2B:04:AA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845C5A8E8D36779EC449ED89480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     3223
IP address blocks:        172.94.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e8:d3:67:79:ec:44:9e:d8:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=e83fcdd5-642d-4f2b-aa00-5ca047ea6a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:1d:01:6b:48:75:e7:ef:bb:54:d6:fd:93:
                    6b:06:53:c3:9a:3e:14:b0:04:59:93:a3:1e:fb:80:
                    07:1a:1b:9d:9e:88:18:76:18:90:a4:b9:b9:e9:2f:
                    64:b3:c6:49:3f:40:f4:21:a6:a9:89:94:03:68:ab:
                    18:3a:b1:2f:ee:37:99:ba:93:0b:79:67:6d:a1:8c:
                    57:a5:8c:3b:a7:3c:f7:16:47:df:55:d2:f1:af:ce:
                    f6:eb:ab:7e:d9:80:73:d6:a7:96:d1:ce:d6:b3:6c:
                    2d:7c:24:e5:d1:a8:91:2c:7a:2a:33:5b:b2:00:f5:
                    38:31:ec:aa:ce:4b:b5:98:59:ed:14:9c:c5:29:03:
                    88:83:70:59:c2:4b:22:9c:d7:4d:fd:f3:75:72:b5:
                    94:ff:5b:c3:4c:e3:79:6a:bc:07:88:a4:13:34:40:
                    c4:19:dc:df:b0:99:c8:e1:51:d4:74:43:7c:26:61:
                    2d:f5:90:3e:bc:6a:ea:f2:76:6a:78:be:de:b2:28:
                    42:f7:8a:7e:89:01:2c:cc:bc:8f:13:b8:ad:b8:65:
                    12:41:14:7b:ac:94:12:49:49:73:7f:7c:0e:a9:43:
                    92:cd:59:99:7b:d4:94:c8:5c:a1:cc:86:b0:83:e7:
                    21:be:5f:a0:01:64:09:cd:d3:89:01:3b:ef:81:d1:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:02:17:52:5E:1D:33:D5:41:71:7B:E2:54:BB:D7:F6:47:2B:04:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:55:72:75:be:1d:62:b6:19:fe:c6:26:5b:96:72:2e:92:0f:
         9d:85:8b:1c:69:f4:3d:5b:85:02:f8:f7:80:02:ea:a6:2a:9d:
         d2:19:97:0a:0c:e1:cd:96:cb:43:31:1f:df:37:65:6e:e8:95:
         b2:ef:78:f3:d1:5e:9d:61:22:24:88:73:44:2a:2a:20:8e:40:
         41:84:fa:f5:7a:27:43:57:32:14:95:32:c8:a2:5d:ef:ab:4c:
         9d:aa:23:e7:ab:a4:14:28:d5:d4:21:be:d5:6d:7c:75:1b:06:
         1b:88:81:f5:f3:b7:62:d7:39:3c:77:63:5e:ca:42:b9:de:5f:
         cc:00:1a:9d:77:b7:b1:c8:d8:4d:c0:8f:0f:72:26:19:61:66:
         85:e1:4e:ea:25:52:55:f6:ef:ca:2f:0a:e1:b4:d1:ae:0b:7c:
         95:ee:ae:a3:fc:e7:e3:64:aa:3a:11:ed:23:17:c9:01:b1:d3:
         87:b8:46:2b:81:da:46:c6:90:59:5d:30:c0:8b:c3:70:15:f4:
         8c:65:6d:15:72:5d:f9:23:0a:c0:27:7d:93:29:b3:a1:92:7d:
         a9:ec:45:b0:1e:dd:c9:c3:45:41:f1:07:a4:35:4e:33:62:b0:
         bc:4c:49:06:85:91:71:a5:16:5d:42:eb:b4:66:1a:5d:f8:99:
         1a:34:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:54:18 2024 by rpki-client on console-fra.rpki-client.org