Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa
File:                     f0d32edb-710e-3329-b151-c1b86d956c94.roa (raw, json)
Hash identifier:          nx1j3mbHkHD+t96rUx80X/AG21cuVUvlDTn+ebfibZY=
Subject key identifier:   CE:44:85:BD:86:61:31:DD:86:46:01:6B:03:C7:80:FB:7B:09:F1:2C
Certificate issuer:       /CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605
Certificate serial:       010D0C9F43285845E45E7D99DD19A0C232357360
Authority key identifier: AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     54048
IP address blocks:        130.250.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7d:99:dd:19:a0:c2:32:35:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d501fd6-2f1a-4d00-89c7-7dabc9364605
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=25185a02-ece0-4d64-8db3-c925e176d1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:5d:17:14:29:59:80:1a:40:23:52:17:db:
                    1c:90:59:30:b9:d7:3a:08:14:46:7d:40:22:79:5f:
                    03:06:1b:c7:1b:a6:49:af:1c:21:44:ad:9c:a7:d8:
                    16:4b:c1:d3:8d:f4:43:27:80:dc:13:a2:fb:77:d3:
                    00:96:43:1c:c5:94:83:d4:aa:ab:6a:4c:bb:20:f1:
                    bc:a3:3d:18:21:a1:24:48:bb:fc:5c:ee:53:8a:94:
                    a8:5b:2f:fc:03:2b:fa:58:1f:0f:c7:d8:64:7c:66:
                    44:d5:4d:d9:3c:34:ae:39:69:77:08:46:ed:57:90:
                    f6:1f:62:3d:34:1c:e4:1a:62:2b:a3:df:0a:ea:40:
                    dd:95:88:c0:85:4a:3a:11:40:56:a1:92:46:20:6e:
                    ff:06:cd:4d:9a:4a:2a:f9:18:f3:dc:fa:16:e7:91:
                    ba:47:2a:06:a5:c4:87:af:ad:cf:27:02:76:2d:e1:
                    6e:6d:f2:ab:b5:eb:4b:f5:db:c7:77:da:c1:9b:fb:
                    b2:aa:08:0e:6e:1a:f0:b8:b7:ef:5f:2e:e1:60:68:
                    be:0d:c1:72:81:c2:fb:2c:28:ad:3b:01:0c:7c:85:
                    d0:e3:2f:51:96:74:5c:34:a2:1a:1e:90:30:df:ee:
                    dc:50:ad:af:82:92:0e:ab:17:1e:c0:da:65:a8:9b:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:44:85:BD:86:61:31:DD:86:46:01:6B:03:C7:80:FB:7B:09:F1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/f0d32edb-710e-3329-b151-c1b86d956c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605/1d501fd6-2f1a-4d00-89c7-7dabc9364605.crl

            X509v3 Authority Key Identifier:
                keyid:AE:99:FA:16:91:FD:C5:EA:4A:41:68:9F:07:16:B7:84:BA:08:07:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1d501fd6-2f1a-4d00-89c7-7dabc9364605.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:d6:9d:60:da:d7:4f:81:09:20:92:c7:e4:b0:fa:38:ab:
         70:25:8a:f8:61:73:ef:96:7b:f2:3f:7e:93:c0:8c:e6:c2:4d:
         6a:cb:55:42:4d:e4:57:63:63:55:bf:f0:45:5b:0d:82:6e:1d:
         fa:e0:ad:15:62:be:2e:b8:34:b7:ee:d2:7a:2c:fa:4e:fc:81:
         76:96:10:40:ff:2e:1d:93:f5:4c:0d:04:25:5f:4a:f4:c1:d0:
         d4:f8:1e:b7:b1:d6:b7:35:38:7d:8e:cc:63:10:fc:47:4e:c1:
         27:07:ce:c7:2a:f4:c3:73:29:06:e5:71:88:99:30:25:fe:38:
         3d:98:70:e7:8a:c3:93:ce:55:37:fc:0e:d9:4d:86:e9:de:49:
         e3:70:5a:0a:2a:6c:d8:1b:02:d9:eb:c4:e4:6b:19:33:a7:f0:
         dc:62:ed:d8:44:c0:e5:a3:40:61:17:2a:27:a3:90:ca:af:d8:
         07:07:07:9b:cc:c6:07:ad:04:1e:bb:d7:98:da:fb:d7:83:f5:
         87:a1:a7:17:37:79:c3:39:5d:3c:70:7e:82:9e:68:6c:b2:8f:
         7c:99:c2:93:aa:af:2a:33:4f:93:72:3a:2e:dd:3d:2b:55:fe:
         d3:dd:2b:d1:68:9d:6c:af:de:1a:4e:ac:6c:91:15:91:4b:0c:
         bb:d6:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:50:07 2024 by rpki-client on console-fra.rpki-client.org