Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a1552dad-7146-3f7b-b166-5796e1c8f068.roa
File:                     a1552dad-7146-3f7b-b166-5796e1c8f068.roa (raw, json)
Hash identifier:          PHux6i59mL8WhFYZy6+XGGQRZY+kZ44cdffxi4Fhvew=
Subject key identifier:   78:8D:1A:F7:ED:AF:02:CC:81:F7:F5:34:24:3B:A7:B2:24:6D:6A:0A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285846381EFEC083BF2C83D71C9500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a1552dad-7146-3f7b-b166-5796e1c8f068.roa
Signing time:             Sat 15 Jun 2024 13:00:35 +0000
ROA not before:           Sat 15 Jun 2024 13:00:35 +0000
ROA not after:            Fri 13 Sep 2024 13:00:35 +0000
asID:                     397630
IP address blocks:        130.254.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:38:1e:fe:c0:83:bf:2c:83:d7:1c:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 15 13:00:35 2024 GMT
            Not After : Sep 13 13:00:35 2024 GMT
        Subject: CN=f02e116a-d356-4e8c-bcf8-3c3220bdf6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:c5:04:e4:d7:4e:a9:d2:71:b0:9b:17:62:
                    20:de:70:3c:46:5d:79:31:0f:c5:8c:56:54:3f:eb:
                    e0:9b:56:22:a6:05:3a:6f:ad:28:0d:80:02:d1:59:
                    68:f2:f7:0c:5b:99:6f:49:b3:64:a9:b9:9c:dc:37:
                    6f:d8:50:ea:8b:94:a0:10:6a:d2:f9:a8:f7:b5:97:
                    24:a9:13:1c:99:1d:cd:0b:19:68:aa:92:88:d4:10:
                    90:d8:b4:2e:de:2a:09:5e:6d:b6:87:7a:7e:64:90:
                    5f:05:73:a6:e3:49:cb:e7:60:74:11:4d:ac:19:e3:
                    24:28:fd:2f:63:6f:e5:9d:6e:97:61:dc:54:b5:65:
                    10:0f:e3:a7:cd:ea:bf:a9:d1:3e:7e:f0:39:9d:3c:
                    fd:b7:65:9a:bb:e3:2b:94:42:40:c8:5c:01:c1:53:
                    56:45:2d:74:c9:c2:31:60:4a:24:8e:0e:e6:fd:b6:
                    b0:6e:d5:83:81:8c:69:75:e1:99:6f:40:4b:ef:88:
                    b0:2e:62:19:f2:b9:db:88:19:05:df:2e:48:70:37:
                    d4:14:22:b0:31:fc:5a:26:a6:01:c2:b4:c9:19:67:
                    2c:51:a0:2a:15:5f:de:2f:72:88:bd:a9:70:2c:d5:
                    42:1c:4d:65:07:fc:1d:52:73:ec:51:ad:00:ea:b9:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8D:1A:F7:ED:AF:02:CC:81:F7:F5:34:24:3B:A7:B2:24:6D:6A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a1552dad-7146-3f7b-b166-5796e1c8f068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:60:5c:5f:ab:3f:19:54:3e:9b:81:b1:10:c2:0f:bb:4b:
         73:30:1f:2c:bc:57:9e:93:4d:1b:2f:3b:41:0f:0e:4e:2e:0b:
         41:7e:b9:c3:af:0e:07:16:86:6b:c9:51:fe:11:95:97:ee:63:
         67:da:d9:44:1f:b0:9a:00:2b:55:05:db:92:d4:4c:7b:16:76:
         1f:55:83:3f:16:66:b7:91:c7:75:24:b0:2b:e3:b1:e8:ee:01:
         89:97:f6:da:9e:29:b4:27:80:5e:fc:b2:76:bd:f2:b0:9e:d5:
         1a:cc:68:68:8e:63:93:e8:e0:3e:fc:2b:7f:da:82:cb:bb:2d:
         e5:29:92:a4:18:94:fe:98:a5:ff:92:8c:4a:3e:68:eb:57:7c:
         6f:ac:e3:b2:64:b4:93:4f:68:bd:42:ef:c1:0c:9b:ec:ae:f4:
         cb:59:34:cf:4e:1e:9b:01:2c:6e:f8:c1:de:1e:2c:91:17:ea:
         5e:f7:69:5e:bb:fe:50:72:1c:7c:2a:73:f4:0d:16:a6:29:71:
         9e:72:56:9b:fe:9a:8b:bc:b9:d8:3f:ba:e5:0e:5e:89:e5:45:
         e5:5d:7d:c2:27:92:c2:29:93:b9:98:f7:15:4f:90:09:4f:61:
         fd:03:ce:58:c2:f3:f5:78:65:73:b6:79:60:9b:93:b8:94:fa:
         51:d4:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org