Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/22b13675-5dfc-3192-8852-60da5e0f357b.roa
File:                     22b13675-5dfc-3192-8852-60da5e0f357b.roa (raw, json)
Hash identifier:          Ox0KFw5C1v/EEeKeA1AqO6ffVFm61ZnGnVba8MyOI/k=
Subject key identifier:   EC:25:62:DA:B9:6E:A7:D8:FA:2E:A5:AC:2B:94:7C:11:CD:90:2F:CC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858450ABAD188EBA760387518B380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/22b13675-5dfc-3192-8852-60da5e0f357b.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        130.41.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d1:88:eb:a7:60:38:75:18:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=806f4836-5e63-4f21-9dd3-fa3988947dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:61:1b:a3:89:43:7a:8d:ab:a8:ba:ea:3d:
                    74:4e:20:d9:58:56:a9:84:68:ee:c6:5e:11:47:d8:
                    4b:92:57:b6:0a:63:24:ac:73:a8:d7:43:10:7e:25:
                    f2:d0:36:38:0e:b5:8b:79:f1:a3:ec:c5:b0:3c:f8:
                    be:4c:2f:05:7e:d6:24:d4:05:1c:56:16:63:c0:6d:
                    85:e0:82:14:6d:ee:49:2b:52:6a:0b:60:c6:87:00:
                    5b:16:cd:b5:35:d9:66:33:4b:0a:99:92:72:44:06:
                    7e:01:0c:93:15:d8:be:9b:f7:08:89:c6:2a:9a:58:
                    99:32:32:9d:66:6f:01:f8:58:21:7f:6b:e2:9b:cc:
                    ae:5c:8d:dd:a2:22:fe:a0:a9:f5:e7:e1:2a:57:34:
                    80:9d:ea:cd:1f:a2:2d:60:98:c6:b4:80:60:34:39:
                    5b:39:9b:f9:d1:f5:5b:81:3c:9c:f6:fa:1a:5e:b8:
                    19:f1:f5:58:a9:3d:1c:e8:d4:d5:0c:d3:a0:bd:07:
                    9c:f6:02:55:84:6e:f3:f9:b8:1f:01:a3:5a:e0:17:
                    e9:c8:a4:16:88:b8:86:84:98:14:21:79:e9:98:a6:
                    e2:0f:82:49:ba:9e:f0:bc:f0:98:da:ff:ff:41:ed:
                    fc:86:e6:3f:43:ff:a7:85:6c:a2:83:08:1b:54:85:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:25:62:DA:B9:6E:A7:D8:FA:2E:A5:AC:2B:94:7C:11:CD:90:2F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/22b13675-5dfc-3192-8852-60da5e0f357b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:4f:56:c1:40:27:27:10:d5:7b:dd:fa:5b:a3:18:f2:1b:
         5d:87:36:a9:38:95:40:84:64:8a:52:98:fa:f2:67:87:42:c0:
         6f:0a:84:68:4e:5b:4c:ed:a8:16:f4:ff:1d:fe:5f:b9:88:43:
         da:91:17:4f:ec:82:12:95:f9:7a:06:3f:ee:78:03:86:ae:96:
         89:3f:a3:fb:06:e3:6d:76:7e:07:ac:4f:1f:a1:32:15:67:3d:
         ae:4f:a7:43:df:fa:eb:97:b4:0c:15:f2:be:4f:54:aa:6f:7c:
         fa:c9:d6:1e:a4:b8:f3:b8:92:16:0c:40:23:59:03:f6:ce:e4:
         6c:f6:7c:5e:a1:70:fc:44:ed:59:49:29:bc:08:5b:45:bd:f6:
         0f:3c:8a:d3:85:5f:43:8a:ba:de:32:48:01:e3:0e:15:f0:e7:
         3f:c4:64:63:a5:cd:58:78:7b:65:4d:42:6a:6b:93:b2:f0:2a:
         e3:3a:f8:d9:80:1e:ec:90:ea:31:c5:da:07:7f:a9:a6:5a:5b:
         68:f1:35:a1:58:5d:39:15:df:af:21:87:94:98:39:97:8b:08:
         99:25:fe:6b:ec:3c:e6:a1:aa:71:53:00:74:f4:b6:77:1e:49:
         7a:1b:28:3c:45:cb:9c:11:f6:3c:68:79:c5:29:4d:09:35:80:
         5b:94:09:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUKutGI66dgOHUYs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MDIyODE0MDAzMVoXDTI0MDUyODEzMDAzMVowLzEtMCsGA1UEAxMk
ODA2ZjQ4MzYtNWU2My00ZjIxLTlkZDMtZmEzOTg4OTQ3ZGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XVhG6OJQ3qNq6i66j10TiDZWFaphGjuxl4R
R9hLkle2CmMkrHOo10MQfiXy0DY4DrWLefGj7MWwPPi+TC8FftYk1AUcVhZjwG2F
4IIUbe5JK1JqC2DGhwBbFs21NdlmM0sKmZJyRAZ+AQyTFdi+m/cIicYqmliZMjKd
Zm8B+Fghf2vim8yuXI3doiL+oKn15+EqVzSAnerNH6ItYJjGtIBgNDlbOZv50fVb
gTyc9voaXrgZ8fVYqT0c6NTVDNOgvQec9gJVhG7z+bgfAaNa4BfpyKQWiLiGhJgU
IXnpmKbiD4JJup7wvPCY2v//Qe38huY/Q/+nhWyigwgbVIVZ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwlYtq5bqfY+i6lrCuUfBHNkC/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMjJiMTM2NzUtNWRmYy0z
MTkyLTg4NTItNjBkYTVlMGYzNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgimIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1cT1bBQCcnENV73fpboxjyG12HNqk4lUCEZIpSmPryZ4dCwG8KhGhO
W0ztqBb0/x3+X7mIQ9qRF0/sghKV+XoGP+54A4aulok/o/sG4212fgesTx+hMhVn
Pa5Pp0Pf+uuXtAwV8r5PVKpvfPrJ1h6kuPO4khYMQCNZA/bO5Gz2fF6hcPxE7VlJ
KbwIW0W99g88itOFX0OKut4ySAHjDhXw5z/EZGOlzVh4e2VNQmprk7LwKuM6+NmA
HuyQ6jHF2gd/qaZaW2jxNaFYXTkV368hh5SYOZeLCJkl/mvsPOahqnFTAHT0tnce
SXobKDxFy5wR9jxoecUpTQk1gFuUCeE=
-----END CERTIFICATE-----
Generated at Thu Mar 28 22:56:58 2024 by rpki-client on console-ams.rpki-client.org