Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa
File:                     f630205b-9c91-3f36-9c56-8a7d876e6812.roa (raw, json)
Hash identifier:          +sq9RlS2ldowMtJuOWxYJVGYBqYQVy3gws+bmml2buM=
Subject key identifier:   AE:72:8E:06:AC:C4:EB:2D:EF:4E:BD:9A:C5:A0:61:FA:31:C2:2F:56
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858453317EAF274F910B84250FA80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        173.199.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:ea:f2:74:f9:10:b8:42:50:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=b2e73ea7-1aee-4ece-bf8a-6f9c889e6e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b1:3e:b1:4e:d8:d0:7c:4a:b5:a4:33:e6:6d:
                    eb:4b:eb:82:fe:9a:db:f6:4a:c3:02:ed:fc:c3:d7:
                    fa:c0:9c:cb:27:0f:5a:72:9f:c4:c9:8f:eb:f6:53:
                    ae:8e:92:48:47:f7:b6:48:54:50:e6:9a:04:9b:13:
                    1d:8c:ad:20:23:9d:d5:71:a2:40:ee:e3:a8:46:26:
                    18:40:e7:c5:21:03:07:e7:ee:ed:c1:b8:23:70:87:
                    a0:89:6a:c9:e2:69:18:19:4a:62:fc:e5:89:c5:c0:
                    ab:92:46:5c:37:ac:b8:08:72:f8:73:bf:b5:0c:fd:
                    84:49:cb:a9:8c:f4:51:03:b7:57:c5:9e:9b:41:e2:
                    3b:94:e3:21:9f:f9:76:21:ce:7a:1c:61:a3:c4:6c:
                    fc:64:45:58:66:ec:86:43:e4:dd:4a:00:7a:91:d2:
                    15:51:37:5f:f8:6c:54:95:99:b0:ee:8d:f6:de:2e:
                    99:76:46:ec:81:96:d1:a7:6e:42:10:f7:5f:e1:70:
                    a2:41:a2:64:0d:f8:0c:92:25:92:0e:b6:bb:56:5f:
                    d0:89:4c:24:91:83:c7:c5:7d:79:cd:b1:30:30:7d:
                    c0:b8:06:cb:a7:4f:df:02:e9:6d:43:ae:06:ce:dd:
                    b8:73:38:fa:62:c8:d7:11:ba:f8:56:82:d1:73:e0:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:8E:06:AC:C4:EB:2D:EF:4E:BD:9A:C5:A0:61:FA:31:C2:2F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:29:39:c6:52:ac:61:d7:50:ce:56:ed:6b:a2:61:fb:3d:a7:
         b9:3a:bd:0e:20:21:a9:dd:37:3c:bd:cf:0f:36:c4:4d:f2:d1:
         eb:14:43:45:73:d5:61:42:6f:b2:ad:21:f5:3e:84:d3:2f:75:
         7d:99:3b:09:4f:ad:83:ee:fa:30:e8:21:fd:a4:a2:6e:bc:bb:
         6c:a7:3e:1a:2b:a7:76:d1:c2:8e:ec:90:ce:09:e5:f1:f4:6f:
         c2:7e:21:27:80:54:77:c7:7d:38:4c:d2:7c:6f:99:44:be:55:
         f4:65:62:9e:0a:68:33:a5:d9:49:3b:3c:1c:e2:1e:ab:77:cb:
         b7:ab:57:23:d6:31:fb:37:48:14:fc:d4:63:b7:42:66:b2:41:
         7e:47:f2:1c:4b:86:e6:b8:55:f1:d2:f7:d8:d8:e1:89:5a:d4:
         73:e1:ad:9c:bf:4d:e5:1a:8b:be:cd:e3:bc:53:88:58:0d:7c:
         8d:1a:ef:a2:6b:94:f3:92:36:39:26:f3:32:e1:7d:d7:cf:66:
         ce:05:87:de:05:28:60:04:e4:97:b4:84:9e:13:00:13:b6:a1:
         a4:39:9a:36:e7:08:44:9b:b3:63:5e:f0:55:13:db:8c:ce:f7:
         0e:63:a6:5d:b5:d5:c1:0e:40:ed:15:9b:11:55:ca:1e:66:97:
         a7:45:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org