Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/58bcdd05-1049-3b5c-9b36-d37c364a9af3.roa
File:                     58bcdd05-1049-3b5c-9b36-d37c364a9af3.roa (raw, json)
Hash identifier:          kxnUq+fK96Z4FsmNv1jDCoC9Efg5Zcqf9JaDwlXbXjw=
Subject key identifier:   CB:1B:E3:B4:B5:C9:18:7F:74:05:DC:50:82:C6:50:13:35:CF:45:5F
Certificate issuer:       /CN=22ce2863-e26f-47ca-8b36-16048be7f337
Certificate serial:       010D0C9F432858459E59636418423A3EECD4C320
Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/58bcdd05-1049-3b5c-9b36-d37c364a9af3.roa
Signing time:             Sun 21 Apr 2024 11:03:54 +0000
ROA not before:           Sun 21 Apr 2024 11:03:54 +0000
ROA not after:            Sat 20 Jul 2024 11:03:54 +0000
asID:                     398931
IP address blocks:        130.51.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:59:63:64:18:42:3a:3e:ec:d4:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337
        Validity
            Not Before: Apr 21 11:03:54 2024 GMT
            Not After : Jul 20 11:03:54 2024 GMT
        Subject: CN=1b2cc7dd-5ca7-4d0e-98c4-5c03a3734bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:46:65:6f:6e:dd:c7:56:d9:00:6a:d1:b4:
                    fe:1a:07:01:e3:95:15:8f:4d:c9:64:d3:dc:86:c8:
                    bc:70:19:44:a0:7c:67:74:c0:4d:2f:c5:0d:be:00:
                    02:5a:58:59:c8:4e:4e:88:9e:69:e7:6c:88:f6:7b:
                    1b:79:16:9b:87:69:31:3d:69:cd:ce:93:e4:b8:4a:
                    12:c4:93:aa:22:27:17:bc:e0:f9:5f:80:bb:ef:fe:
                    5a:2b:c8:aa:6d:e3:d4:f7:e4:b3:2f:36:3e:45:fc:
                    05:57:19:f2:7a:f1:54:dc:5f:13:52:89:b9:09:85:
                    20:5e:6b:8a:28:8e:d6:d7:37:53:6b:05:26:e8:c6:
                    7b:9e:cb:02:fd:8e:25:f4:cd:5b:fb:07:71:78:27:
                    a1:5f:f3:2e:61:e3:be:3c:78:58:3b:77:68:cc:fa:
                    88:65:85:62:21:a0:71:a0:98:a3:2e:e4:73:11:a4:
                    8e:83:5b:ed:d7:9a:0e:e0:56:cc:34:70:8c:31:9c:
                    9a:9b:ff:9b:f4:c8:70:c0:b9:93:1c:b3:94:72:df:
                    2a:f8:78:97:6e:51:84:18:1e:85:f4:c5:4f:90:75:
                    c1:6e:27:0e:e1:b6:a3:7a:d8:0f:2d:c5:0f:13:d0:
                    de:aa:35:34:ac:41:b7:50:2d:78:3e:1f:cf:c7:7d:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:E3:B4:B5:C9:18:7F:74:05:DC:50:82:C6:50:13:35:CF:45:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/58bcdd05-1049-3b5c-9b36-d37c364a9af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl

            X509v3 Authority Key Identifier:
                keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:60:98:e7:be:62:da:54:15:d9:1e:29:25:58:40:3e:db:7d:
         d7:ee:1b:a4:f0:ff:2a:63:e3:97:aa:d1:45:f0:0e:9a:c9:e7:
         d0:a7:1a:66:31:25:57:23:07:3b:14:b2:7e:d4:d3:f0:16:08:
         b1:e0:9d:61:7a:dc:1d:97:c1:18:9e:2b:3e:af:49:87:94:49:
         b7:3b:a9:ac:38:d9:e9:dd:02:da:eb:79:dd:79:36:99:e5:3b:
         78:a3:46:d9:ea:83:84:48:eb:5d:e1:44:1d:50:17:5d:93:8a:
         6e:32:8f:d1:97:6b:e6:88:80:7f:09:b6:da:eb:45:ed:80:35:
         36:3d:13:e3:ec:bb:02:01:d5:03:ca:27:7b:b3:f7:73:8d:62:
         c6:1c:36:46:51:88:27:70:05:6f:d7:02:da:b2:6b:72:7c:4f:
         f7:fd:95:cf:f9:94:76:6d:8e:66:55:b9:2b:aa:1f:8b:41:1d:
         6b:13:b8:81:75:53:2a:71:08:5e:1f:c9:63:9d:7f:8c:f9:1d:
         30:e2:dc:46:8e:68:de:64:f1:e2:8d:b9:66:5f:83:a1:36:99:
         eb:4d:f4:9b:28:c8:bf:5b:91:63:92:37:d0:6e:94:7d:ee:87:
         32:a9:fb:84:73:cc:38:23:0e:fc:e3:1b:f4:68:7e:7f:b3:7f:
         0d:bf:b2:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWeWWNkGEI6PuzUwyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJjZTI4NjMtZTI2Zi00N2NhLThiMzYtMTYwNDhiZTdm
MzM3MB4XDTI0MDQyMTExMDM1NFoXDTI0MDcyMDExMDM1NFowLzEtMCsGA1UEAxMk
MWIyY2M3ZGQtNWNhNy00ZDBlLTk4YzQtNWMwM2EzNzM0YmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4shGZW9u3cdW2QBq0bT+GgcB45UVj03JZNPc
hsi8cBlEoHxndMBNL8UNvgACWlhZyE5OiJ5p52yI9nsbeRabh2kxPWnNzpPkuEoS
xJOqIicXvOD5X4C77/5aK8iqbePU9+SzLzY+RfwFVxnyevFU3F8TUom5CYUgXmuK
KI7W1zdTawUm6MZ7nssC/Y4l9M1b+wdxeCehX/MuYeO+PHhYO3dozPqIZYViIaBx
oJijLuRzEaSOg1vt15oO4FbMNHCMMZyam/+b9MhwwLmTHLOUct8q+HiXblGEGB6F
9MVPkHXBbicO4bajetgPLcUPE9DeqjU0rEG3UC14Ph/Px32QYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsb47S1yRh/dAXcUILGUBM1z0VfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmNl
Mjg2My1lMjZmLTQ3Y2EtOGIzNi0xNjA0OGJlN2YzMzcvNThiY2RkMDUtMTA0OS0z
YjVjLTliMzYtZDM3YzM2NGE5YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJjZTI4NjMtZTI2Zi00N2NhLThi
MzYtMTYwNDhiZTdmMzM3LzIyY2UyODYzLWUyNmYtNDdjYS04YjM2LTE2MDQ4YmU3
ZjMzNy5jcmwwHwYDVR0jBBgwFoAUJiYcU7FxDek62AspsJ2LM7lHYPYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmNlMjg2My1lMjZmLTQ3Y2EtOGIzNi0xNjA0
OGJlN2YzMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjNfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRgmOe+YtpUFdkeKSVYQD7bfdfuG6Tw/ypj45eq0UXwDprJ59CnGmYx
JVcjBzsUsn7U0/AWCLHgnWF63B2XwRieKz6vSYeUSbc7qaw42endAtrred15Npnl
O3ijRtnqg4RI613hRB1QF12Tim4yj9GXa+aIgH8JttrrRe2ANTY9E+PsuwIB1QPK
J3uz93ONYsYcNkZRiCdwBW/XAtqya3J8T/f9lc/5lHZtjmZVuSuqH4tBHWsTuIF1
UypxCF4fyWOdf4z5HTDi3EaOaN5k8eKNuWZfg6E2metN9JsoyL9bkWOSN9BulH3u
hzKp+4RzzDgjDvzjG/Rofn+zfw2/srE=
-----END CERTIFICATE-----
Generated at Sat May 11 15:23:10 2024 by rpki-client on console-fra.rpki-client.org