Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa
File:                     6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa (raw, json)
Hash identifier:          inv6GEzQpTGH1HYLncbJEh3VTF6egnio0GXYpIabxss=
Subject key identifier:   32:47:DE:A3:50:6A:B4:A3:17:F7:17:48:9F:E5:0C:23:17:74:AE:FC
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285845777DCCB384CCE8A6CABCFB10
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        198.73.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cc:b3:84:cc:e8:a6:ca:bc:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=ba69b800-8a6c-4b0f-81a9-a61e74afa7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:38:ee:15:3f:f2:f1:58:e5:5a:f8:ba:4d:
                    68:db:78:dd:94:80:3d:14:8f:77:98:f3:1c:5f:51:
                    9f:c5:0c:6c:72:17:95:d1:df:95:2b:17:3d:74:5e:
                    c3:5b:64:c8:a7:42:28:86:c2:75:3b:7b:52:44:95:
                    c4:3f:6a:2d:ce:5a:98:0c:6f:0b:86:d1:21:02:93:
                    06:15:00:c6:6c:92:e8:4d:c1:f2:71:34:a9:9a:74:
                    52:8e:e8:20:92:4b:84:52:31:b5:92:82:25:72:ec:
                    46:ec:12:e5:ff:5a:89:94:4e:91:d3:48:2c:c2:6c:
                    ee:28:f4:a3:56:1a:0b:ff:ce:db:df:46:b9:62:82:
                    f2:53:9b:ec:1d:95:bb:3f:45:61:45:37:e7:23:5d:
                    8a:eb:ee:0e:e8:11:94:a0:31:6b:75:64:27:21:b0:
                    0d:9e:be:e4:52:b5:af:59:ea:7d:48:dc:13:ce:17:
                    4c:f0:85:f5:2c:ac:28:2e:61:f4:05:d2:6c:d6:20:
                    b0:5a:72:75:2a:fa:10:b8:7f:41:8c:fd:7f:46:96:
                    e8:12:ba:07:8d:2c:4f:ad:13:ec:37:ec:eb:7f:9e:
                    19:7d:5f:db:36:cc:56:08:f2:b3:25:3e:52:c0:28:
                    c5:23:3d:06:ed:55:a2:a6:a6:b5:06:33:d4:cc:1d:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:47:DE:A3:50:6A:B4:A3:17:F7:17:48:9F:E5:0C:23:17:74:AE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/6cbf69d2-aab4-35b1-81be-8f74202c4f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e6:d4:93:b7:89:33:5c:96:1e:34:64:7a:d6:2f:8f:71:17:
         0a:61:23:37:d6:09:f7:bf:41:87:2e:8c:fc:f4:b5:59:42:5a:
         5d:c2:6d:b1:0e:2f:80:47:8a:ba:4b:44:14:07:2a:c7:8d:39:
         2b:3e:09:d6:0d:52:7d:c1:18:c7:46:30:84:0e:57:a6:6b:6c:
         56:6e:65:a6:4c:0d:a0:09:c5:12:dc:da:2e:07:1a:5d:d0:18:
         c3:fb:3a:b9:ec:7b:8c:3c:e6:00:3c:68:15:d5:ea:79:71:4e:
         1a:b9:ef:b2:ec:b7:ef:b6:66:70:4d:9e:a6:21:a1:c1:7c:14:
         b2:07:59:de:19:af:57:70:cb:8b:8f:56:a6:6f:5f:b6:02:80:
         f9:58:95:08:cb:fe:c3:54:fc:2e:e6:98:41:db:98:38:50:21:
         fc:7e:95:6e:18:8e:8f:32:8e:2e:04:f5:29:96:46:52:2f:96:
         2c:6e:dd:29:e5:a4:38:4c:e7:1e:f7:cb:3a:14:98:9b:89:bb:
         4e:dc:c5:99:10:e7:e7:62:28:5b:f4:a7:d4:c7:10:bf:2f:d2:
         2b:9e:f4:98:02:26:6f:56:f3:da:28:d0:4c:e4:b5:dc:6c:3e:
         49:d2:ac:a3:bf:7b:62:0b:8b:ec:a2:06:ca:08:60:cb:9d:be:
         b8:63:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:56 2024 by rpki-client on console-ams.rpki-client.org