Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa
File:                     4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa (raw, json)
Hash identifier:          W7/9dUwmEU0yTlszAwP64JoYfyYE3fd09mTQKUC1nro=
Subject key identifier:   83:03:E2:D9:6D:E1:5F:AC:CB:2D:7A:05:A5:D1:CE:39:5C:F6:B7:8A
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F432858456FA3778C6B8E3784C0A83C00
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa
Signing time:             Thu 04 Apr 2024 17:30:10 +0000
ROA not before:           Thu 04 Apr 2024 17:30:10 +0000
ROA not after:            Wed 03 Jul 2024 17:30:10 +0000
asID:                     7324
IP address blocks:        130.51.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:a3:77:8c:6b:8e:37:84:c0:a8:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Apr  4 17:30:10 2024 GMT
            Not After : Jul  3 17:30:10 2024 GMT
        Subject: CN=f604138d-81c0-423d-86d0-accc7711a735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:d0:97:8e:f7:fb:22:71:fb:f6:75:ab:e8:
                    b5:0c:f3:78:92:96:82:f7:87:0e:ac:b9:39:1a:0e:
                    66:01:10:08:8a:43:c1:48:4f:34:33:b6:f3:a9:ce:
                    21:7e:cb:12:34:ab:6d:6f:5f:d6:ff:1b:7e:39:70:
                    9f:63:35:df:30:ee:7d:12:6d:6d:03:a5:19:f1:2b:
                    f7:7c:6f:a0:bb:d7:ff:c1:4c:b6:9d:bb:e0:fd:69:
                    22:0e:7b:b6:4f:f2:3b:04:61:de:d2:54:e1:34:2e:
                    b2:d7:f3:79:b3:45:49:f1:40:d8:d3:09:ba:d1:e2:
                    6f:a1:21:81:5a:06:4e:ed:ce:09:1d:33:24:34:20:
                    1f:6f:52:42:b9:90:57:99:0f:73:46:6a:8f:73:9f:
                    ca:de:5d:11:91:0e:63:0a:e4:11:3d:ce:6e:2b:80:
                    12:a9:55:de:da:03:24:a3:59:57:98:2d:db:1e:4c:
                    50:4d:81:e5:b5:1b:ea:85:27:42:ca:9c:0f:93:16:
                    32:12:05:41:a6:6d:e8:f9:af:70:ed:09:03:8b:9b:
                    ca:95:f6:e8:8b:fd:ef:59:33:0b:79:96:cb:ef:12:
                    8d:4e:6e:8b:ea:88:45:f5:c0:c6:63:5b:95:cd:cd:
                    ba:01:e5:c3:67:cb:96:90:9d:7a:cc:d4:80:28:10:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:E2:D9:6D:E1:5F:AC:CB:2D:7A:05:A5:D1:CE:39:5C:F6:B7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:6d:da:ab:4c:45:cb:11:c4:be:4e:cf:c9:50:b2:f8:7c:
         82:b1:04:e1:b0:d3:8c:bc:44:70:de:90:df:e9:e0:f9:ca:d7:
         c6:25:23:49:01:30:99:83:99:a5:ed:da:dd:c8:a5:72:ae:57:
         0e:f3:c8:9b:69:28:4e:10:bf:d2:ca:06:79:67:c7:fb:87:10:
         c6:0e:5e:29:4d:9d:bb:da:c6:6a:c6:81:66:97:fe:fe:8b:14:
         8c:26:29:32:04:47:84:e5:fb:31:36:26:a5:71:7e:ef:71:05:
         f7:99:7b:08:01:9c:05:aa:6b:f7:70:b3:5d:ae:4e:dc:48:af:
         44:95:38:2d:d2:9d:b2:7f:20:a8:00:6c:48:fe:68:fc:eb:d4:
         8c:59:93:ed:64:e7:40:c5:6e:0d:ce:4e:d3:38:c2:fc:ff:e6:
         59:d9:35:36:89:30:e4:a1:cc:e8:56:27:b4:b1:f2:d7:70:12:
         03:0d:6f:d1:b1:77:2a:dc:86:0e:db:91:a8:ac:56:75:5f:02:
         31:93:c6:ef:2f:da:80:3d:29:bd:1d:a0:27:a3:50:9a:9c:b4:
         d0:46:06:d4:fc:0d:72:0d:5c:57:45:6e:82:46:f7:fb:54:5b:
         a6:84:33:6e:d4:49:3c:36:44:ee:d7:53:82:43:40:9c:8e:c8:
         30:61:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:16:18 2024 by rpki-client on console-ams.rpki-client.org