Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
File:                     58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa (raw, json)
Hash identifier:          txkip/xmsy7syk52mubpukjvclyoi+vHe8fydBQc8/s=
Subject key identifier:   47:A4:89:12:32:9D:A6:0E:27:10:52:D6:BD:83:D4:10:99:53:72:21
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F432858460313FB671DB460F8045ED0C0
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     393981
IP address blocks:        204.239.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:13:fb:67:1d:b4:60:f8:04:5e:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=b8cc036b-eb84-4d1b-bdc5-eb74210cc407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:94:d5:cd:85:5e:20:23:44:e7:d9:80:04:
                    e8:18:fd:aa:7f:b3:ac:df:a3:68:be:ec:8d:04:40:
                    5f:7e:27:82:1b:4b:9c:22:1f:e6:6e:60:d2:6d:d8:
                    06:d7:3d:2b:4e:41:37:0f:30:cc:cc:ed:8c:f5:26:
                    cb:1e:62:0d:5c:46:4e:cc:8b:90:1c:89:95:36:0a:
                    22:c1:d3:3a:bd:1a:32:ab:18:8f:fb:3f:e8:52:a2:
                    35:76:98:ef:95:cd:b4:d9:99:bf:8e:f3:12:cf:61:
                    3b:52:4e:55:1a:6c:d7:8c:fa:0b:13:3b:87:6f:b7:
                    12:b1:8c:fc:0f:1b:64:bf:0b:ae:41:05:95:40:35:
                    7c:11:e4:7f:fd:e9:73:4e:90:1b:96:47:dd:0f:90:
                    66:bc:aa:bf:14:51:f2:52:05:ae:87:28:0c:90:1f:
                    bf:c1:04:77:ee:70:2f:c0:5e:4a:75:f9:c3:a6:39:
                    a1:07:43:ad:0d:2c:35:0f:22:c4:42:65:f4:b2:88:
                    ef:14:e7:8a:e7:7c:c7:7a:4a:88:6d:21:4b:cb:c3:
                    4d:0c:6f:c7:ea:34:27:14:42:03:e9:e4:03:bb:ac:
                    fc:f1:09:9c:90:90:e5:5a:00:c6:b9:64:32:17:d3:
                    05:f3:e2:ec:71:d9:f0:0f:bb:33:b8:8a:e0:86:12:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:89:12:32:9D:A6:0E:27:10:52:D6:BD:83:D4:10:99:53:72:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:29:fd:46:4d:65:99:30:e7:33:ce:ad:40:2a:68:c4:3c:
         5d:5e:db:2d:e8:c9:c0:35:5b:c0:a0:fb:8a:30:63:ba:d3:cf:
         25:39:f6:d6:ff:ba:15:19:13:a3:02:9f:5b:96:9b:07:76:ee:
         b0:db:73:54:84:c8:a3:43:e6:09:d3:cf:ff:0c:88:55:76:21:
         f8:be:34:b2:9c:b3:af:7f:b8:e2:d6:48:b6:57:80:23:3e:77:
         a4:70:63:02:2b:e1:07:55:21:a8:51:78:6a:83:76:8f:da:ed:
         46:e6:6e:74:c4:44:5b:00:da:04:b9:4f:45:49:75:07:00:9d:
         1b:d6:7b:32:4c:af:f2:21:11:75:b0:6c:4a:41:2b:04:bd:f1:
         4e:0b:2f:e4:f7:b7:43:5d:af:ad:f4:42:a3:d5:7d:b0:d7:f5:
         45:28:5a:32:7c:62:57:8b:84:a2:16:0e:f1:30:c3:b9:35:07:
         b0:3f:9e:14:fd:09:a8:af:b3:0f:01:5b:1d:22:6a:90:7d:03:
         dc:92:8e:e9:73:b4:0f:ec:dc:a8:44:8d:c7:fc:a7:bb:26:4a:
         fd:79:a4:83:99:e5:dc:bb:e2:65:f8:29:d0:c6:16:4c:d9:0d:
         4b:6c:93:2d:97:9c:28:15:ab:69:ea:c0:e7:15:91:67:ca:e2:
         73:68:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 00:00:11 2024 by rpki-client on console-ams.rpki-client.org