Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa
File:                     41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa (raw, json)
Hash identifier:          1W1uhql1syjbVMZt6QkRmyXV5PyLmmVG/ZqSH/5fywE=
Subject key identifier:   3E:C6:D2:A3:30:68:40:BD:DE:83:E7:FA:B3:C7:7C:B1:9B:BA:43:A3
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285844F0354390407367F6488A8480
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     46562
IP address blocks:        199.58.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:43:90:40:73:67:f6:48:8a:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=a38b63b5-e059-4b75-a7bf-d69163e8d3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:f7:32:8a:16:a6:91:7f:e9:b0:3a:bf:ff:
                    f8:51:65:f0:16:db:34:0a:b0:37:06:85:68:58:6d:
                    4b:8f:12:92:a6:0e:8a:11:60:16:7f:f7:0a:2a:19:
                    22:da:4c:52:4c:46:09:19:46:69:fe:83:e3:cf:3e:
                    61:d5:f7:42:04:79:9f:d6:18:b2:00:56:6e:22:96:
                    09:37:cc:f9:86:5e:10:5a:40:67:a5:96:da:29:66:
                    3f:dc:49:b8:07:e7:fc:11:24:b7:5f:7c:54:7d:60:
                    4e:77:b7:41:43:cd:b1:59:1a:ea:7a:27:16:87:18:
                    a3:f2:e5:b1:40:ef:33:73:8b:aa:7c:de:00:56:d8:
                    39:c3:85:33:65:18:10:df:67:8e:bf:45:0c:0e:98:
                    3f:4a:6f:82:68:4a:71:74:71:c8:55:67:97:6e:be:
                    96:70:77:9f:81:4f:9f:2d:e4:a0:b3:93:71:62:f7:
                    14:d9:ba:8d:9e:d5:19:2f:da:94:b1:fe:b7:93:03:
                    8a:15:ed:4a:d1:d2:6e:9b:05:73:8e:9a:28:5e:a0:
                    fd:19:0c:87:ff:99:e3:f6:af:29:f8:05:6d:d2:b9:
                    aa:6b:1a:9d:26:b0:73:59:43:6b:3f:66:a7:2d:dd:
                    b4:64:7e:12:6c:3d:03:51:0d:4e:0e:25:79:7c:b7:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:D2:A3:30:68:40:BD:DE:83:E7:FA:B3:C7:7C:B1:9B:BA:43:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/41c42170-c5cf-3c27-a40a-c1ffc3171c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:69:b4:ca:3e:5a:4b:8b:37:19:62:59:31:7e:0b:4a:70:
         41:7b:01:a1:a0:52:7b:40:89:8d:8c:aa:4e:ed:78:8d:61:e2:
         ed:40:c9:c7:47:e8:20:56:07:66:62:6a:b4:eb:a0:ee:80:87:
         84:86:cf:8c:3f:e6:f4:5c:9b:4b:eb:ae:d2:0a:93:03:49:92:
         75:91:dd:fa:a1:fb:07:81:98:bd:73:30:2d:7b:c3:71:fc:5b:
         8d:92:06:e4:1d:1a:d8:ef:8d:b9:75:c9:25:65:d9:ac:f0:4f:
         21:ba:04:84:d4:92:bf:0f:ec:6a:68:74:c5:fa:cc:9b:f9:50:
         a5:ad:8f:2f:54:17:fb:54:5b:f5:89:b0:94:63:ec:bc:ec:7a:
         4d:82:3e:4a:69:31:b9:df:55:93:2d:89:18:18:6e:79:77:12:
         65:6a:e5:d2:b2:c2:b7:65:72:54:cc:21:e0:ee:a1:a2:80:e0:
         07:ff:6b:ce:6c:c0:80:70:f0:88:34:b4:6d:a6:6f:0e:1f:e1:
         20:21:38:c8:55:e6:b9:ba:12:5d:9d:f1:a3:c5:71:9b:7c:4f:
         9f:3a:27:5b:02:a4:c6:78:5a:1e:7e:04:b2:8e:5d:c3:4a:da:
         c5:fd:ca:61:bd:d7:6b:81:fc:9b:d2:ae:0d:29:53:ab:6e:1e:
         e8:d2:08:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETwNUOQQHNn9kiKhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI0MDIxOTAyMDAyNVoXDTI0MDUxOTAxMDAyNVowLzEtMCsGA1UEAxMk
YTM4YjYzYjUtZTA1OS00Yjc1LWE3YmYtZDY5MTYzZThkM2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHr3MooWppF/6bA6v//4UWXwFts0CrA3BoVo
WG1LjxKSpg6KEWAWf/cKKhki2kxSTEYJGUZp/oPjzz5h1fdCBHmf1hiyAFZuIpYJ
N8z5hl4QWkBnpZbaKWY/3Em4B+f8ESS3X3xUfWBOd7dBQ82xWRrqeicWhxij8uWx
QO8zc4uqfN4AVtg5w4UzZRgQ32eOv0UMDpg/Sm+CaEpxdHHIVWeXbr6WcHefgU+f
LeSgs5NxYvcU2bqNntUZL9qUsf63kwOKFe1K0dJumwVzjpooXqD9GQyH/5nj9q8p
+AVt0rmqaxqdJrBzWUNrP2anLd20ZH4SbD0DUQ1ODiV5fLfHTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7G0qMwaEC93oPn+rPHfLGbukOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNDFjNDIxNzAtYzVjZi0z
YzI3LWE0MGEtYzFmZmMzMTcxYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGkabTKPlpLizcZYlkxfgtKcEF7AaGgUntAiY2Mqk7teI1h4u1AycdH
6CBWB2ZiarTroO6Ah4SGz4w/5vRcm0vrrtIKkwNJknWR3fqh+weBmL1zMC17w3H8
W42SBuQdGtjvjbl1ySVl2azwTyG6BITUkr8P7GpodMX6zJv5UKWtjy9UF/tUW/WJ
sJRj7Lzsek2CPkppMbnfVZMtiRgYbnl3EmVq5dKywrdlclTMIeDuoaKA4Af/a85s
wIBw8Ig0tG2mbw4f4SAhOMhV5rm6El2d8aPFcZt8T586J1sCpMZ4Wh5+BLKOXcNK
2sX9ymG912uB/JvSrg0pU6tuHujSCMY=
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:37:16 2024 by rpki-client on console-fra.rpki-client.org