Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa
File:                     aee1a109-6c8a-3502-9111-b9b5953b35f9.roa (raw, json)
Hash identifier:          kW+ahQXXY3WOJje8CpKdG1tOg7rDLJ+QXhR5FbIG1Oc=
Subject key identifier:   96:C2:80:EF:7D:5B:7A:37:14:7F:9D:BC:BF:E8:45:71:9A:E3:25:89
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845D7CE41D81FD1BEB1F468A380
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa
Signing time:             Sun 12 May 2024 01:00:25 +0000
ROA not before:           Sun 12 May 2024 01:00:25 +0000
ROA not after:            Sat 10 Aug 2024 01:00:25 +0000
asID:                     395831
IP address blocks:        216.157.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d7:ce:41:d8:1f:d1:be:b1:f4:68:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: May 12 01:00:25 2024 GMT
            Not After : Aug 10 01:00:25 2024 GMT
        Subject: CN=0834e626-c9c3-4185-a7fc-1feef51d0170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:c6:08:a6:f8:92:bb:1b:d7:b5:8b:9a:6a:
                    2a:1f:85:45:84:67:c3:9b:7d:c9:70:37:60:80:a3:
                    7e:9d:14:b1:12:fb:39:fe:a3:ac:57:87:d2:2b:ad:
                    d2:bc:70:7b:0f:70:05:db:0c:3f:ac:9e:92:fb:07:
                    bf:23:b1:60:bc:d4:02:e4:b6:15:d1:80:ea:5f:14:
                    fc:5d:26:c5:8c:9f:0a:49:b0:82:b4:48:78:90:9b:
                    05:ac:d8:f6:7e:54:8a:16:dc:0f:87:90:99:10:c0:
                    6f:7d:eb:36:79:41:87:4f:41:6a:1e:10:cb:56:8a:
                    69:eb:e6:5a:e0:fe:17:9e:75:47:7d:66:7e:d9:d7:
                    52:7f:fb:2a:51:ad:7a:63:0b:bc:03:43:c5:cc:de:
                    0a:58:8a:c4:45:13:13:35:ce:11:df:2c:45:ce:8b:
                    3a:32:bf:43:6a:ef:ad:0c:f8:af:34:89:67:de:7a:
                    27:7b:30:77:44:d8:fb:87:a5:5a:a5:48:31:f4:21:
                    49:02:0c:41:c1:cf:b6:bb:80:00:47:b9:4f:a5:b3:
                    ec:be:02:b2:97:fc:66:1c:68:7b:57:cd:09:2c:58:
                    32:71:28:69:de:1c:10:ce:2d:0a:bd:69:97:ce:56:
                    dc:c9:88:52:3e:0a:04:19:65:2f:18:25:c4:e2:bc:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:80:EF:7D:5B:7A:37:14:7F:9D:BC:BF:E8:45:71:9A:E3:25:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:2b:b2:43:2a:c6:e9:3a:b1:69:67:cd:6e:ca:c9:8d:70:
         2e:96:74:c9:85:02:ca:aa:af:87:64:bd:1f:a4:46:a2:4c:16:
         67:f1:88:2c:09:df:e8:16:ae:4b:57:b5:3e:30:7f:3e:fd:0a:
         fe:52:99:cd:60:82:f2:06:c1:15:ff:64:80:52:8a:c9:ee:46:
         b3:80:2e:8c:b3:eb:fe:23:4b:71:12:b7:31:96:3e:6e:33:64:
         ee:cd:3b:39:35:a9:ea:db:14:50:ac:1a:d3:7b:f6:4e:83:8a:
         50:e0:8f:71:a6:24:5e:5d:10:49:6f:94:18:0e:f3:3f:19:f4:
         79:f5:3d:63:e0:2b:3e:05:fd:79:23:97:e1:1d:69:17:87:d7:
         73:40:9f:cf:e6:6b:5e:91:6a:01:08:bf:86:68:a4:68:45:92:
         db:04:8f:b4:76:b9:8b:4d:4c:ae:e9:26:b6:b5:8b:7c:ac:85:
         33:74:c4:fa:0e:25:7d:86:68:e4:4f:40:d8:9e:5e:d2:f9:2f:
         eb:88:9a:7a:14:99:c9:da:10:10:02:23:f2:a4:f6:fe:a6:1d:
         d5:71:bb:cd:15:b5:de:a5:3c:f3:dc:50:36:ec:e1:a2:ee:a6:
         a3:9a:1b:0c:5e:ed:a6:97:0c:f0:9b:a3:72:d1:f8:d1:8d:10:
         05:21:82:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:32:59 2024 by rpki-client on console-fra.rpki-client.org