Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa
File:                     4efb0180-0036-3a86-b06e-97ab544504f2.roa (raw, json)
Hash identifier:          eM8Tf8y9RdMFLYpUNkRoOLfQnOYYtSonSPnTeznE3gQ=
Subject key identifier:   D9:91:72:98:6D:3E:9D:AC:9D:62:DA:BA:FC:72:7A:76:91:4C:E2:4D
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858477BF661A7AE28222664D95800
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     396982
IP address blocks:        130.41.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:61:a7:ae:28:22:26:64:d9:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=048bc9a2-a786-446e-8a07-1fb6722ec9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:24:cd:81:98:ba:63:c9:c1:35:d7:1d:c2:
                    21:2c:3c:c0:8c:00:97:01:77:f1:6d:64:75:2c:b5:
                    17:b2:fa:a6:6d:b3:b5:56:ac:a7:06:e8:a5:07:df:
                    7f:31:f8:da:81:48:02:70:d8:b4:a0:89:9f:fd:69:
                    e2:a1:1d:08:17:34:1d:db:c2:cc:ff:95:cc:cb:1d:
                    de:ff:18:0e:e0:dd:de:16:9a:75:21:5d:66:e0:b4:
                    3e:c4:a1:49:01:17:2a:28:53:28:55:3b:6e:a9:ee:
                    96:6c:24:0d:4d:af:c2:fa:dc:ba:53:5a:6a:48:29:
                    1a:30:df:e9:22:90:75:c4:0d:75:9f:9b:18:f2:cc:
                    e0:57:f7:d9:8d:ef:a9:45:b6:57:31:4e:b2:76:85:
                    70:11:11:72:89:a7:35:79:53:03:48:68:fe:37:b2:
                    d9:7b:9d:cf:d0:cb:ab:5d:17:0e:e6:48:9b:85:af:
                    be:75:97:0c:75:10:5a:39:37:4d:b3:de:c3:61:f9:
                    92:6e:72:b2:b0:a5:20:55:ff:86:c3:35:df:17:9b:
                    dc:f6:2e:25:1a:46:63:90:fc:bf:04:2d:a0:28:50:
                    3f:08:e4:32:a4:15:3d:c2:60:55:97:e7:46:51:00:
                    a7:f3:f1:18:cc:e2:54:b5:7c:86:cc:35:5c:19:1b:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:72:98:6D:3E:9D:AC:9D:62:DA:BA:FC:72:7A:76:91:4C:E2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4efb0180-0036-3a86-b06e-97ab544504f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f1:ef:74:19:1c:89:0e:17:89:cb:b2:05:5f:45:00:38:8b:
         77:cb:b6:6a:c4:85:7e:b1:e7:c7:14:f9:73:78:aa:2f:0a:48:
         cc:2a:0a:70:46:af:ad:19:3a:0c:a4:3e:1e:9f:23:a8:14:5f:
         ba:4d:61:d2:55:62:55:10:db:95:88:c4:a3:05:1f:6f:69:6f:
         2b:1b:ac:48:89:9c:e0:2b:fd:3c:cd:d5:4f:7d:6d:c7:63:55:
         74:3c:68:30:14:53:5a:d9:dd:90:1f:85:4a:4d:a4:71:38:bd:
         df:0e:50:47:4d:c3:3c:72:8d:1e:ea:73:65:85:38:19:5c:2b:
         48:34:b6:df:94:10:fe:b6:7b:00:4b:d1:74:45:54:d7:83:11:
         df:ce:99:ec:09:24:0b:24:72:bd:fc:3b:d4:ca:12:cd:34:f6:
         17:75:c4:90:71:d7:95:df:90:7f:b3:24:ed:64:5f:43:3b:16:
         30:a1:15:f8:f3:5d:27:e1:fd:cd:9c:fb:bc:79:e2:1f:03:65:
         51:24:e1:11:1d:9d:73:a6:2c:38:15:da:60:b4:4e:98:b5:12:
         f4:18:e8:0b:82:dd:23:b1:7b:53:d9:f1:2a:8e:bc:29:35:73:
         94:70:a7:e5:b1:ed:e9:81:82:2f:df:d3:9e:4f:ab:6a:4e:d3:
         86:a0:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:47 2024 by rpki-client on console-fra.rpki-client.org