Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
File:                     4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa (raw, json)
Hash identifier:          jIhaHdw5a/FvsZsaK70R5vtmASNi3aAXDKrNKlD7EkM=
Subject key identifier:   29:9F:D6:17:D5:B0:15:83:B8:71:86:81:5A:B0:DC:AF:80:8A:1B:FD
Certificate issuer:       /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial:       010D0C9F43285845A6F37143BA093585A15F7400
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        198.175.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:71:43:ba:09:35:85:a1:5f:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=d988854d-9321-403f-939d-94f26aab9136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:f4:48:b1:b5:f2:71:cb:67:b1:dd:29:9a:
                    8c:17:ec:ac:4c:9d:e6:9a:6b:04:61:9b:ca:df:e4:
                    d5:56:67:af:e7:69:57:16:63:da:62:17:77:6c:16:
                    7b:83:8f:f1:ce:3d:3c:44:5a:be:97:c8:6d:5d:d5:
                    a9:12:76:fb:40:41:26:81:3a:e2:fd:38:ed:4d:79:
                    6b:20:00:b4:df:27:3a:a7:ae:22:18:b3:4d:74:ac:
                    25:e5:dd:da:e5:a4:91:13:9a:5f:bb:d8:2a:82:3e:
                    b5:ef:7a:f9:04:78:86:09:9f:f4:e3:71:6d:79:ac:
                    a6:3c:48:4d:29:51:a5:f6:0f:9e:70:42:bf:23:43:
                    c3:51:74:98:8e:cf:ef:e3:b1:bb:5a:e7:60:28:85:
                    5e:76:dd:43:d7:d8:79:cb:9c:8a:69:17:2b:e4:ef:
                    1a:d3:d6:58:d8:13:05:36:a6:d4:bf:75:d0:d3:54:
                    3a:4a:be:b5:41:6e:13:1e:8e:20:6c:72:ba:4f:db:
                    be:59:16:5e:b6:4a:75:ff:f2:3e:b9:f5:6a:6e:d1:
                    c4:a1:f8:9e:d5:67:6b:be:6b:1f:29:4f:90:35:ef:
                    b5:64:48:2e:7d:60:37:c0:00:0a:3d:8a:2b:e1:ad:
                    9e:66:1c:86:f1:2e:3c:23:23:7e:d7:3f:82:5b:10:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9F:D6:17:D5:B0:15:83:B8:71:86:81:5A:B0:DC:AF:80:8A:1B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl

            X509v3 Authority Key Identifier:
                keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:2b:02:d0:76:ab:39:cd:99:a4:69:a7:31:ac:bc:d0:79:
         4e:cb:a7:46:b6:6e:8a:68:c2:3e:93:3e:40:64:7c:a6:3e:07:
         fd:0f:ac:b2:88:e6:6b:7d:67:79:be:a0:af:48:c8:d0:dc:55:
         a3:8a:00:51:bb:a9:14:19:0f:4f:b9:54:37:61:32:fc:6a:24:
         ae:11:a3:a4:96:ab:91:e3:64:40:a2:e7:dc:b3:0c:53:0e:11:
         92:26:29:e6:c1:e4:1a:6c:f2:a7:6b:00:72:5f:b4:03:3f:d0:
         31:8d:ce:3b:29:e2:03:f1:e5:c6:88:18:f3:12:ee:d5:37:d2:
         b3:1f:de:14:85:aa:8b:ea:c9:95:7e:2f:c1:7a:d3:9d:a4:ab:
         13:e1:36:7b:74:3c:e1:fd:c8:51:7c:22:52:ca:20:46:25:c6:
         6a:1b:4d:af:31:7b:fd:e7:fd:1b:61:24:03:d0:0a:82:4f:db:
         42:a5:be:e7:6e:3a:7d:c1:01:9c:0a:3f:9a:32:02:d0:79:6b:
         36:14:a7:ce:b0:86:80:4a:41:e1:34:5b:f1:d4:e3:7b:a8:00:
         63:41:9f:ca:a2:06:82:b1:88:28:d3:54:19:30:71:72:5e:39:
         38:b6:69:1c:b1:6f:2c:9d:31:f3:4f:b7:49:88:07:95:5e:35:
         0f:10:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:26 2024 by rpki-client on console-fra.rpki-client.org