Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa
File:                     58132a11-8e2a-354a-b569-5f5fc420c67f.roa (raw, json)
Hash identifier:          zq8Wm/897TOcqyER8Ffwr7uRExFUJgU/2/ob4dasl0w=
Subject key identifier:   48:0F:41:24:18:79:23:6E:9E:48:AF:F0:00:A2:04:01:66:68:C0:FE
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F43285844F2FFFBC6F54BB290DA3976A0
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     399628
IP address blocks:        64.94.156.0/24 maxlen: 24
                          64.7.197.0/24 maxlen: 24
                          64.94.153.0/24 maxlen: 24
                          64.95.14.0/24 maxlen: 24
                          64.95.9.0/24 maxlen: 24
                          64.94.159.0/24 maxlen: 24
                          2620:96:a006::/48 maxlen: 48
                          2620:96:a005::/48 maxlen: 48
                          2620:96:a004::/48 maxlen: 48
                          2620:96:a003::/48 maxlen: 48
                          2620:96:a002::/48 maxlen: 48
                          2620:96:a007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:fb:c6:f5:4b:b2:90:da:39:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=e179be49-f41f-484b-abcc-a2756860d93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:b6:f4:6b:69:52:08:47:22:3b:6d:e4:4c:
                    76:fa:b3:35:73:3b:92:5e:53:a1:71:bb:37:37:76:
                    d7:d1:93:f2:f4:05:ef:5c:53:ef:c2:83:18:5d:37:
                    5a:46:e0:7e:91:66:05:13:ae:52:da:90:53:15:ca:
                    6d:e8:54:c8:5d:f0:8e:43:eb:53:87:cb:08:10:5b:
                    d4:5a:1c:9c:6a:8b:ca:c5:9f:a0:61:7b:3a:16:b6:
                    dd:b1:18:b5:4d:50:5d:0e:fb:a4:62:d1:8b:ba:f6:
                    52:e4:81:a2:75:3b:b7:1d:ae:c5:86:af:5a:04:39:
                    a4:bc:a9:d7:93:30:95:c8:c5:03:28:71:ea:22:1b:
                    f7:40:68:fd:0d:ac:2b:7f:45:9b:bf:dc:c9:b0:c1:
                    9d:11:f8:5c:7d:f7:71:6f:af:cc:b0:0a:7c:66:f1:
                    01:7c:a0:b3:e3:43:8c:42:d6:92:d5:aa:ef:d5:47:
                    08:9c:de:25:7b:1e:72:5d:91:a3:20:88:a9:91:f1:
                    d0:48:cc:1f:0b:8d:85:4b:ce:0b:f7:ba:79:f3:a0:
                    61:90:a6:d4:5c:6c:1f:14:84:2d:f1:5f:92:9e:56:
                    4d:f1:ce:fd:8e:52:49:7f:55:85:96:72:8a:24:c6:
                    39:b6:fb:bd:17:29:a1:0a:59:8f:14:50:bd:f9:4f:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0F:41:24:18:79:23:6E:9E:48:AF:F0:00:A2:04:01:66:68:C0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.197.0/24
                  64.94.153.0/24
                  64.94.156.0/24
                  64.94.159.0/24
                  64.95.9.0/24
                  64.95.14.0/24
                IPv6:
                  2620:96:a002::-2620:96:a007:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:3d:d9:05:cb:61:92:a7:44:f2:66:57:e0:4d:ba:11:e3:
         28:e3:6f:66:6b:06:b9:2c:ee:9d:f7:7f:fd:d1:8e:b6:c0:99:
         c1:43:64:71:63:70:8d:eb:cb:c6:20:c1:55:c0:cd:ae:7d:f9:
         33:c4:a6:fa:a2:5e:42:b6:95:d6:8f:81:3c:25:e3:08:59:b8:
         07:3c:09:b8:f2:32:a6:ad:c3:51:33:81:a1:75:58:68:6d:f6:
         cf:ab:84:6d:04:a7:dc:85:a4:cb:82:22:b4:76:1d:be:da:ff:
         77:8f:47:66:20:10:f5:6e:cf:48:b8:79:2c:8c:b1:49:b4:ff:
         43:7f:1d:cb:d6:5f:8a:21:26:40:9f:80:18:34:e1:ee:ed:11:
         fd:a1:65:de:79:4e:4e:9f:53:4c:a2:3b:c2:f8:33:e4:73:03:
         80:ec:3c:74:37:31:6a:d2:a3:0b:9b:25:2b:2a:b3:15:c7:38:
         e4:51:f4:23:80:76:df:67:2c:e5:c2:ef:d1:71:58:9b:09:49:
         f3:26:51:6e:67:c3:4d:eb:a2:c3:62:f4:06:d0:36:96:62:64:
         02:64:31:e2:34:08:6e:1b:a1:23:e5:09:c9:1f:02:14:ab:a3:
         37:78:e4:6e:9c:84:b7:07:bf:13:b2:4f:66:48:5a:0d:a8:55:
         fc:fb:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:54 2024 by rpki-client on console-fra.rpki-client.org