Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
File:                     6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa (raw, json)
Hash identifier:          JIhY68LP5k2vCsuV7lNL/4pXPiteHteuc3KM6vx2YNc=
Subject key identifier:   48:BC:BA:78:86:D2:C5:15:39:60:6D:18:96:A9:18:49:5A:82:B8:4D
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584522759CB799BB54D1E5052500
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     6859
IP address blocks:        130.85.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:9c:b7:99:bb:54:d1:e5:05:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=b84a0bd7-eee6-445c-bf89-cec1509e2d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:21:46:b1:a2:c3:07:b0:11:d3:20:7d:11:
                    c3:3d:3b:4a:dc:f4:81:d4:77:ee:cf:02:9a:0d:a1:
                    4b:d5:7c:2f:ab:ab:5b:51:e3:5d:37:84:5a:62:75:
                    bc:2e:b7:63:eb:ee:98:93:f7:b8:c4:d5:99:25:8e:
                    c2:dd:33:3c:60:8d:87:10:52:6f:de:39:71:cc:12:
                    f0:82:eb:da:71:d9:5e:a7:a2:3f:06:93:ad:31:e8:
                    ca:06:25:89:04:14:29:20:41:ce:ae:8b:79:2e:59:
                    00:06:e6:6b:9d:da:5d:3f:56:18:88:db:02:76:5b:
                    50:b8:79:e4:79:0f:2d:12:17:a0:83:99:e6:dc:d4:
                    a9:a8:3d:e8:06:4f:a2:83:03:78:79:bb:a3:55:32:
                    f2:e8:8d:3e:33:ad:d8:c5:9f:cd:e7:ff:51:76:46:
                    cf:b5:51:bc:b7:ba:b0:d5:06:66:4e:6e:eb:83:23:
                    33:73:8e:0a:f9:95:dc:e2:96:91:44:20:55:5f:8d:
                    09:e1:67:26:1c:13:dc:f5:56:16:7b:74:f0:a0:7a:
                    f3:e1:1b:1b:2d:36:b1:bd:27:f2:ec:2a:52:34:2e:
                    db:6e:f2:55:56:dd:6f:f5:e4:a1:5a:64:db:05:09:
                    7d:41:88:dc:6a:54:19:70:7f:5e:59:cb:59:20:a3:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BC:BA:78:86:D2:C5:15:39:60:6D:18:96:A9:18:49:5A:82:B8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:e8:32:ee:b0:79:32:f4:5f:0c:c8:ee:2d:27:10:ff:5a:
         de:12:e1:2e:4a:b6:22:da:42:3f:50:97:47:67:19:ac:46:20:
         ad:62:96:09:54:7a:0f:76:1f:f7:6b:2f:c2:95:5d:fd:8a:d7:
         b8:b8:1a:97:69:02:63:22:5e:f8:78:d6:6b:84:19:55:8e:fe:
         6b:04:61:b2:a9:a4:78:08:eb:e0:f8:d3:6d:99:f4:46:f5:2b:
         df:cb:9f:1c:fd:d2:10:67:39:53:f3:4c:09:73:4a:04:d0:84:
         b8:c2:16:ab:31:a5:ef:0d:e3:e1:50:45:52:ba:49:2d:1a:54:
         3f:e1:e2:a7:a8:bd:b4:61:b6:86:0a:d4:8f:6d:ba:23:da:36:
         70:2a:48:34:c8:c1:14:e3:60:b7:49:7b:d7:38:88:cb:8f:e4:
         d9:a6:98:14:ba:9c:dc:0c:dc:03:52:fc:78:c2:c5:2e:47:53:
         70:81:d6:4e:9b:9a:8d:c3:a7:cf:8b:73:e8:59:45:16:c9:e8:
         94:26:da:90:0a:2d:0b:79:ad:0a:43:fc:04:de:1f:d9:eb:47:
         97:ac:be:25:59:08:d7:95:3e:54:e2:df:e4:86:cc:ab:db:c0:
         f6:38:26:0c:c4:4d:81:91:fd:ce:52:10:e8:ed:d9:65:50:50:
         e2:f7:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org