Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa
File:                     8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa (raw, json)
Hash identifier:          Ko6nn4SwTGRU3GFlI4i/J1Q8O4Ig8VHQIMA+OACpg0g=
Subject key identifier:   1D:35:48:4B:B4:C7:F5:56:FC:55:4C:2B:4F:A0:4C:2F:1B:4F:09:79
Certificate issuer:       /CN=0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5
Certificate serial:       010D0C9F43285845148030CB0B05BF2E4BBD1528
Authority key identifier: F4:84:DA:23:24:5E:15:9E:3F:4F:82:F2:37:8E:CB:F9:BB:3A:4D:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     14041
IP address blocks:        130.253.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:30:cb:0b:05:bf:2e:4b:bd:15:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=03cf050e-49e7-4c92-ac24-56e5fa92c90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:6c:a6:c0:ce:d6:4e:fc:24:15:de:f2:d6:
                    fc:b1:9f:8f:24:be:d4:af:2a:8f:09:42:9a:2e:49:
                    a9:93:e7:d1:47:9e:e6:47:17:ff:72:b9:a5:ff:fc:
                    8d:3d:a9:bb:07:b9:da:14:92:28:0d:a5:9d:7a:a5:
                    6b:0a:3a:fe:f6:1f:79:4a:75:a1:b7:32:3d:a5:be:
                    8d:d4:f8:ab:6e:47:6d:79:c3:0f:f0:06:77:cc:9f:
                    43:45:77:32:7b:a7:5c:0a:5b:9b:67:e7:aa:7c:41:
                    95:49:f0:0f:1d:83:25:9f:15:fa:28:e2:49:77:24:
                    d6:03:ae:dd:70:41:f3:73:b4:d4:27:1d:8e:9d:6d:
                    25:71:36:b6:39:32:42:a2:ff:59:35:9c:09:15:a8:
                    60:31:2b:cc:13:c5:69:e0:be:cc:7b:2a:2c:0f:ba:
                    57:e6:01:ea:7b:05:56:7b:ae:70:70:0b:6f:dd:46:
                    25:2a:79:11:24:91:11:87:00:75:e7:4a:22:a7:3a:
                    d7:74:f3:06:75:44:33:07:36:2b:ff:34:2e:a9:81:
                    d0:ea:08:e8:e9:4b:7a:da:4d:18:9d:15:2d:92:b2:
                    7b:4e:ca:1f:fb:92:56:bd:73:0f:dc:24:6b:f8:8b:
                    0e:bd:04:f3:d8:f5:d2:96:fa:91:fc:8e:e3:04:d8:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:35:48:4B:B4:C7:F5:56:FC:55:4C:2B:4F:A0:4C:2F:1B:4F:09:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.crl

            X509v3 Authority Key Identifier:
                keyid:F4:84:DA:23:24:5E:15:9E:3F:4F:82:F2:37:8E:CB:F9:BB:3A:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:29:23:68:75:cf:9c:7f:a1:78:8d:2c:0d:7b:5a:37:1d:5f:
         45:86:ed:3d:d3:57:75:9d:ba:0d:1d:a6:a1:7c:03:9f:03:23:
         f7:17:7e:99:51:3a:e5:3a:81:4a:34:29:69:90:2c:bc:c4:64:
         d4:fc:02:7d:49:5c:ba:1f:1d:75:6d:96:c7:e0:dd:16:b9:d0:
         1b:05:60:98:9b:fa:5c:56:8e:87:7a:29:cd:be:82:b5:db:aa:
         cd:2c:3f:0c:85:72:1b:c6:ea:de:a2:7e:d8:79:41:45:de:c8:
         80:40:40:3c:a2:e3:02:b2:ae:4d:96:8e:e3:34:8c:95:dc:de:
         b8:7e:ec:3f:6d:a1:b4:01:d8:d9:46:f8:fd:ba:22:04:39:c2:
         1a:e6:17:69:d2:a8:70:8b:27:ad:9e:60:e5:64:c8:f6:f6:01:
         9b:9a:7c:f3:1c:ee:89:5a:9d:06:e5:9e:be:1c:dd:21:1a:40:
         54:35:24:ae:7c:44:b5:ad:bf:42:29:f5:d2:e5:a7:a7:f0:6d:
         92:f7:b4:27:75:71:83:e3:13:89:cb:fb:2b:28:b4:2b:52:53:
         55:c4:d9:9c:a6:df:de:58:0d:2b:d9:54:ec:a4:69:39:b5:09:
         26:b9:f8:0e:6f:dc:56:0b:da:e3:94:e4:2f:cc:8c:0a:e7:ed:
         9f:d5:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:28 2024 by rpki-client on console-ams.rpki-client.org