Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/1cdd1620-baae-37e3-a52e-74047c58c79d.roa
File:                     1cdd1620-baae-37e3-a52e-74047c58c79d.roa (raw, json)
Hash identifier:          Fz3SGcFNG4L4YU2Sk6pPbCfehOAME4dBS2M/XvkW47Q=
Subject key identifier:   66:A9:B9:CB:73:8A:8B:D7:49:E2:F1:8E:3A:8A:06:04:B1:30:CB:9A
Certificate issuer:       /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
Certificate serial:       010D0C9F4328584596336291CB979E19343A2A00
Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/1cdd1620-baae-37e3-a52e-74047c58c79d.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        130.150.96.0/19 maxlen: 19
                          130.150.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:62:91:cb:97:9e:19:34:3a:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=134a8bd6-4019-4edb-8835-f6dfa9d17ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:2c:b5:b8:a5:95:ba:be:bf:ae:49:fb:0f:
                    c6:86:e8:c6:8c:13:8c:8f:16:12:c5:8d:4a:e1:cc:
                    05:f3:40:46:e8:9b:ac:72:fc:74:16:7a:96:50:d8:
                    50:47:3f:12:46:10:7b:ab:c2:de:7a:64:2a:c9:04:
                    4e:b7:4f:45:f1:0b:14:d7:44:76:8e:54:ec:c7:5f:
                    23:40:76:1b:d7:1a:9a:de:c5:7e:8b:23:85:f7:74:
                    48:ca:8e:a3:86:b0:60:5b:b5:ea:c5:e6:c6:e4:af:
                    0c:c7:0b:84:6f:72:9f:65:af:eb:a3:3c:50:d1:17:
                    69:4d:c4:ed:09:5a:e4:70:48:8c:4e:4e:31:bf:8c:
                    50:5d:8c:fe:f4:a7:d6:34:3d:a0:e7:90:91:42:3a:
                    69:92:76:a0:aa:ef:94:3e:6a:c1:fb:89:90:b6:4a:
                    0e:63:58:5b:a4:4e:29:14:bb:66:c7:b4:ff:0a:95:
                    a8:a5:bc:e3:6a:b0:4b:a8:75:62:82:c0:0c:80:50:
                    bb:1d:79:be:86:ed:77:4b:e5:1e:24:45:f9:09:b5:
                    63:48:09:53:f4:be:0e:54:52:05:b4:ef:ef:6f:e2:
                    53:58:a6:47:c2:6a:7f:5e:a3:fc:e1:8b:d3:bb:33:
                    4f:a1:c5:b9:0c:f2:87:b8:08:0f:14:42:5b:2b:14:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:B9:CB:73:8A:8B:D7:49:E2:F1:8E:3A:8A:06:04:B1:30:CB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/1cdd1620-baae-37e3-a52e-74047c58c79d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl

            X509v3 Authority Key Identifier:
                keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.150.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:80:9e:d6:19:b8:48:2c:2b:6a:c8:14:2d:a8:5f:2b:e7:4c:
         3b:17:85:30:6c:ce:a8:74:99:1f:3d:b7:22:04:e7:1f:4f:e6:
         53:e0:54:44:de:b0:4a:13:0f:60:9e:43:02:9c:5f:29:e4:02:
         ef:80:05:9a:21:1c:97:17:65:4a:36:1c:1f:10:24:88:40:eb:
         a4:73:63:8d:e0:f4:bc:48:a4:3f:d7:b0:f9:4d:24:4d:25:cb:
         e9:6c:65:85:c1:27:73:17:f7:2e:ac:5f:4b:d7:00:62:8b:2b:
         45:23:d1:a5:fe:b0:27:5e:b8:c0:a7:26:ca:7f:f2:85:63:a2:
         8a:0f:a1:d7:5d:e0:48:f0:ea:79:b3:c6:b0:5b:c5:53:9d:4b:
         fd:3e:88:0b:32:86:5e:1a:1b:4c:78:66:a9:f4:65:8f:15:ab:
         a0:1f:e5:ea:6b:55:4b:f2:f4:60:9b:e6:69:8e:c8:ac:88:74:
         96:34:d2:54:25:99:c2:a3:76:7e:59:f3:ab:ec:93:20:e6:e0:
         5b:0f:32:c7:02:8a:cb:22:6f:b6:c7:c0:94:64:16:ea:90:d6:
         3d:6c:09:4f:11:c2:1d:e7:ed:9f:eb:ce:22:9a:b0:f9:ff:77:
         55:c7:a6:10:bc:ee:c5:65:11:8b:20:70:d7:c0:e2:44:e7:90:
         e7:ad:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:22 2024 by rpki-client on console-fra.rpki-client.org