Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3567bb0b-8134-3f59-8621-ad586c105646.roa
File:                     3567bb0b-8134-3f59-8621-ad586c105646.roa (raw, json)
Hash identifier:          oPw0izZVYdEh4mmxPxIYQTsyK9xETYFYxf3xkzuoYoo=
Subject key identifier:   05:FA:9C:88:AB:5D:F7:BD:9E:47:2D:35:0F:88:D2:18:D0:B4:72:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9237DAED0BCBB5DBC5E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3567bb0b-8134-3f59-8621-ad586c105646.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     29929
IP address blocks:        65.244.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:23:7d:ae:d0:bc:bb:5d:bc:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=ff714396-baf4-44ca-a9e8-9e08c7cfd6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:81:1d:3b:c6:d9:9d:c5:98:e8:c9:35:5a:
                    db:82:1f:a2:ee:9f:89:cd:33:79:bc:23:68:55:43:
                    bc:78:11:ec:d6:56:d1:33:c9:43:55:a8:b4:03:f5:
                    ac:f1:b9:4f:28:ff:8a:89:b2:dc:4b:40:4c:92:45:
                    35:0f:78:a5:f6:28:c9:f0:15:a8:53:d5:c8:95:69:
                    76:2a:09:96:07:0f:58:22:e7:6e:50:d8:19:f9:aa:
                    d3:61:8c:5d:ff:7f:b2:4e:49:a1:7a:4a:dd:63:44:
                    0e:70:de:4b:b7:a4:49:9f:6b:97:b8:97:13:c2:7e:
                    b9:d0:d6:48:e3:08:12:9f:9c:d3:69:fe:86:9c:94:
                    05:65:73:d7:20:2e:ee:6c:d8:69:6d:a1:97:79:d8:
                    d3:ce:f2:33:0f:12:45:e5:c2:82:4f:bc:ec:c7:ef:
                    e2:a5:9d:56:88:c9:b4:08:ea:e6:33:ea:d8:f9:33:
                    7e:ed:3d:64:54:5e:1e:e8:45:52:85:87:ff:87:2b:
                    4d:e1:87:f8:8c:da:e3:0a:f4:4f:9d:47:b8:cb:9a:
                    15:5e:ee:81:42:77:cb:d6:36:c9:69:c7:00:e7:7b:
                    25:df:f1:2c:9d:f5:a6:db:ea:8f:e5:5e:4f:dd:77:
                    52:ea:ec:ed:4d:a5:d8:9b:4e:ec:f0:03:87:ea:78:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FA:9C:88:AB:5D:F7:BD:9E:47:2D:35:0F:88:D2:18:D0:B4:72:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3567bb0b-8134-3f59-8621-ad586c105646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.244.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:f4:ab:05:a5:b8:23:c1:63:17:ae:9e:38:f6:43:e4:e2:
         e5:f5:bd:cb:97:7d:7b:68:f0:b8:17:7e:8a:58:ba:f8:ba:68:
         9d:cf:17:55:a0:7b:3f:4f:f6:44:19:bf:b4:92:26:2c:12:df:
         f0:ef:09:e1:a6:ef:89:d5:73:f5:5f:01:35:34:3e:ef:de:a4:
         2b:03:73:b7:42:6b:9d:72:37:af:31:61:08:b0:0a:40:73:8a:
         e1:90:3f:c3:a3:36:85:20:48:0b:84:5a:e1:8d:cc:de:c3:3c:
         0e:f7:ce:97:52:52:b0:ec:02:74:c6:47:bd:a4:f3:4c:c1:8a:
         73:18:11:8f:bf:42:83:3b:d9:ba:82:23:fe:06:f9:0f:a1:fd:
         b0:65:6f:40:40:89:4b:ff:21:08:0c:69:b6:1b:90:4d:8d:fb:
         29:13:52:78:72:b0:90:35:f7:3c:b6:c9:09:f0:f4:6e:28:c9:
         f0:63:7a:4b:59:a3:04:42:6f:3b:a7:81:64:ea:d4:ef:2f:dc:
         df:f2:af:65:f3:da:68:31:74:ed:c1:db:5b:5d:18:97:de:24:
         49:cb:31:c6:f2:50:ed:bc:df:9e:36:67:e8:17:da:9e:8f:03:
         81:25:90:6f:6e:ab:27:c3:a7:17:70:e8:4f:86:a2:b9:03:9c:
         87:bc:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:33 2024 by rpki-client on console-fra.rpki-client.org