Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa
File:                     4efb0180-0036-3a86-b06e-97ab544504f2.roa (raw, json)
Hash identifier:          u6WRm4WqXnMBU1ohL5Ij9N5NePc5yA3U4G4KglFmTW0=
Subject key identifier:   5A:AB:44:3C:2C:14:89:23:6F:4D:3B:A3:5F:FA:E0:AB:8E:7F:86:9A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285845BD48E501CEFB894736544AA0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        130.41.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e5:01:ce:fb:89:47:36:54:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=fc043e84-246f-4d28-9e93-0a93dbce76f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:b9:29:7e:ea:0a:db:07:2a:a9:3f:e6:ce:
                    60:f2:e3:93:ac:de:52:9e:1d:7b:fb:00:cf:15:24:
                    d1:e7:d3:73:b3:0c:2a:6f:1c:77:d8:98:8f:a4:29:
                    91:01:5a:a9:c8:54:cb:9f:bc:b8:e2:e2:e7:31:1b:
                    a7:a5:dd:ef:08:09:fb:7c:15:95:d8:dd:04:6a:f9:
                    42:49:49:d6:f9:e4:d2:72:a6:3b:51:ce:09:dc:54:
                    b5:14:16:f9:af:3c:87:42:40:dc:85:cc:4f:7a:e0:
                    be:bc:d9:17:70:34:cd:c2:20:16:55:d3:de:e9:26:
                    17:27:4a:1a:2f:b9:6a:82:90:63:d2:d2:55:16:3a:
                    94:bf:d9:c3:00:d2:31:49:c1:df:03:72:e1:b9:8a:
                    d3:65:37:5b:28:f8:dc:12:24:2d:ec:85:97:0e:96:
                    65:85:69:48:a6:bc:c3:a1:e3:8a:02:e5:7b:d5:0f:
                    8f:d1:57:da:52:cf:bb:12:ad:c2:75:e0:d8:78:15:
                    2d:80:0e:47:a7:5e:bf:e2:ee:ef:da:4d:41:39:4a:
                    b5:f8:1c:30:f8:98:85:d3:cc:1e:9b:27:6e:98:54:
                    2b:6e:47:4d:a3:d2:1c:fb:84:00:d0:b8:37:b6:e4:
                    74:91:4d:f7:a6:e6:42:ac:8b:d0:60:6a:dd:22:c4:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AB:44:3C:2C:14:89:23:6F:4D:3B:A3:5F:FA:E0:AB:8E:7F:86:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:47:f9:5f:29:e8:4d:e9:75:72:7e:7e:f3:e0:fe:7e:cf:4e:
         ce:04:ce:57:b8:21:62:bd:79:90:47:b9:d3:a0:01:08:a7:30:
         5f:39:b0:92:6a:79:77:94:32:02:b8:81:53:97:a6:d6:69:ba:
         50:4b:07:fb:86:12:2b:d4:32:30:da:c5:f8:4e:26:f5:ef:88:
         1e:80:22:49:79:11:47:df:19:83:0c:45:65:0a:1d:e5:dd:30:
         65:c1:aa:84:6c:27:68:21:ac:c5:fd:89:a0:f9:c5:7a:f3:50:
         58:b7:15:98:d5:0b:19:69:bb:d1:53:be:0e:65:66:77:b3:be:
         87:1c:1e:46:b1:a2:5d:62:1d:69:77:3c:05:e3:05:6b:f3:53:
         13:da:7b:f9:ce:8b:03:e1:69:23:0b:c3:1d:c2:9a:2d:28:b1:
         eb:e8:be:28:e3:35:34:97:7d:8e:ac:25:b0:48:a2:95:21:d5:
         a5:8b:8c:2a:4f:ab:9c:bb:5a:f6:ae:f8:1b:12:5b:be:97:94:
         02:8e:27:3d:8f:59:5f:0d:13:8d:33:72:0e:65:f0:7e:fe:bb:
         28:65:7b:ac:37:64:7a:91:60:f6:9d:37:8a:42:cf:1c:53:b6:
         a5:5c:05:f9:46:3d:26:5d:f9:27:7b:cd:ac:5f:6f:80:9f:39:
         e2:3d:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:44 2024 by rpki-client on console-ams.rpki-client.org