Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa
File:                     07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa (raw, json)
Hash identifier:          6TPVLCL1VWxaczC/MLOl5cKZe0CCf8G++yCxY2w7YG0=
Subject key identifier:   51:2D:B0:7A:2D:DC:20:68:00:7D:E4:45:C7:3D:DD:0E:8A:1E:ED:09
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285844FE2AE4475E3A33E1096D27C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        130.41.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e4:47:5e:3a:33:e1:09:6d:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=3f579ead-789a-4f4d-abfd-308cf1772595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:99:e4:2c:62:a7:9e:a3:f1:c2:18:c0:ec:
                    d5:8b:46:71:d0:1c:de:67:13:de:5a:26:ae:bd:2b:
                    d1:88:e2:87:1d:73:66:6e:45:2d:15:2f:ee:f1:17:
                    01:af:ca:fb:8c:56:a4:4a:0b:54:cf:c5:b9:d5:40:
                    2f:52:6c:a9:09:41:ff:36:39:b1:34:e2:3e:12:7e:
                    df:bb:72:85:49:0e:67:84:2a:cb:08:04:36:31:ad:
                    c1:6d:40:c5:57:9b:b9:ca:99:51:37:a8:1d:69:e8:
                    ea:26:54:37:3c:c6:13:65:ca:d4:fb:64:8d:cc:24:
                    8c:34:60:55:af:f4:4b:54:5f:2c:a4:3f:e5:d4:a3:
                    b3:e4:b1:c2:c6:00:a8:46:fe:43:89:8f:91:50:4c:
                    a5:83:65:32:3a:e6:61:e3:51:37:48:30:56:06:82:
                    49:e7:e2:57:f6:6b:29:2f:9b:0e:a5:f7:ba:eb:34:
                    0c:9e:f6:68:85:1a:00:64:6f:17:bc:9d:11:f0:ae:
                    c4:cf:45:27:0c:c8:90:94:97:c3:7a:fa:66:5f:eb:
                    91:46:67:1f:79:48:b5:3d:cc:1c:07:dd:63:b8:39:
                    51:f7:75:3d:bd:3d:95:96:d7:fd:e1:49:03:ef:a4:
                    38:10:63:2e:d3:8e:82:7e:c2:3d:6c:de:18:a5:b0:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:B0:7A:2D:DC:20:68:00:7D:E4:45:C7:3D:DD:0E:8A:1E:ED:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:75:a4:39:9c:c6:16:34:35:86:63:af:6d:83:d4:5e:90:
         aa:d2:21:0e:5b:33:69:c2:23:fe:1d:c0:2f:0d:16:0a:f6:40:
         91:9c:06:3a:9e:80:c1:59:a6:de:db:3e:3f:b3:aa:ee:7a:d8:
         50:a6:92:79:91:a7:47:b1:a5:0c:b5:cc:b4:f7:4e:6e:b4:ed:
         66:3f:51:28:84:4b:c7:39:55:7f:44:ea:35:1f:cc:02:c9:a0:
         d1:39:b4:a1:9f:4d:de:a8:29:a2:1e:fd:53:2c:88:9a:d0:b2:
         02:2e:f6:8d:64:f7:dd:be:c6:27:27:10:40:1d:b5:6b:90:ba:
         8f:46:7b:09:51:cd:68:c7:e9:6e:c9:5b:5c:36:14:77:03:4a:
         bd:c3:05:4b:3a:b2:d9:7f:9f:0a:31:5c:a2:29:21:07:9c:84:
         b8:f4:dd:5a:29:55:e3:6f:a4:f5:c1:e9:f4:14:5f:39:40:6c:
         5b:69:88:87:7c:cb:06:86:9e:6f:c5:46:da:82:4f:13:e0:b5:
         0b:de:fa:95:77:73:be:80:9f:0d:97:4f:b5:ef:db:ca:e8:d4:
         db:14:6f:6c:67:ce:65:27:31:02:7a:f1:95:57:0f:5f:b0:40:
         89:ef:a4:fb:9d:91:4d:15:29:c1:3d:0f:f5:09:23:88:4b:92:
         85:83:02:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:52 2024 by rpki-client on console-fra.rpki-client.org