Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dc8bb658-94e4-3f78-b046-4d3a102c52eb.roa
File:                     dc8bb658-94e4-3f78-b046-4d3a102c52eb.roa (raw, json)
Hash identifier:          s/YQsSbAGEsP01t208lJqxCTFSZFaM4aez/q312YBj4=
Subject key identifier:   96:3B:5D:5A:BD:E1:D1:A1:DB:AF:54:6A:54:DF:07:81:42:7C:AF:F2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285844F03543D514BCD6227F5773D0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dc8bb658-94e4-3f78-b046-4d3a102c52eb.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        130.41.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:43:d5:14:bc:d6:22:7f:57:73:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=1af797cb-1e8d-4cdf-90e0-34da117f1e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:a9:b0:0d:03:e0:0f:f1:6b:47:03:62:31:
                    9b:00:9b:ac:50:96:0f:96:5d:e1:cb:2a:27:46:7a:
                    84:41:a5:70:a1:3f:3d:ec:83:2b:23:c5:74:47:d1:
                    5a:53:1c:63:50:02:ff:6a:12:f3:80:26:41:fa:45:
                    51:7e:44:5e:91:71:10:af:4d:93:3b:fd:5a:03:d8:
                    da:68:7e:0a:ca:90:57:9c:4a:ca:c6:cf:94:19:82:
                    3a:c3:83:fd:06:be:d3:d9:96:d0:ed:5b:58:a5:8b:
                    03:92:8e:19:ae:28:0b:9d:b6:ce:41:ba:0f:e0:7d:
                    5c:84:cf:ca:52:eb:06:3e:a3:f5:ae:83:81:bb:39:
                    ae:aa:4d:18:d0:fd:e6:03:47:52:f5:61:de:67:34:
                    6d:a3:fc:fb:04:eb:86:45:63:a3:65:99:08:29:d0:
                    59:db:bd:bd:23:ce:a1:8b:f8:33:19:b6:fc:96:82:
                    42:cb:be:2d:ae:b9:67:37:ae:4b:3b:22:8e:21:92:
                    ee:c3:5b:d5:ce:0d:b8:50:ed:1b:07:85:0e:e2:da:
                    df:6b:ae:f2:23:86:76:6c:db:4a:ef:02:31:bc:42:
                    95:81:68:3e:96:33:36:ad:14:c4:7f:b7:14:a5:62:
                    b2:e4:b8:df:f6:77:ce:bf:bc:05:a5:52:ad:e0:cc:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3B:5D:5A:BD:E1:D1:A1:DB:AF:54:6A:54:DF:07:81:42:7C:AF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dc8bb658-94e4-3f78-b046-4d3a102c52eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:2a:2c:79:c5:ff:74:51:52:55:77:09:c3:25:fb:60:4f:
         04:9c:ad:88:1d:9d:c3:d2:de:5a:da:00:d1:4f:58:69:d1:8f:
         48:65:1c:d3:83:32:24:c3:b3:02:e0:c7:7b:53:4c:af:62:a5:
         5b:f7:ba:2b:c4:70:03:c7:d3:ec:25:97:49:ca:79:15:ce:3f:
         87:0e:4d:60:b2:eb:cb:fd:02:ff:51:c3:e7:c7:73:7e:05:61:
         a1:4a:a2:76:c2:12:37:bf:c0:5a:15:bc:ed:c4:de:b5:97:af:
         c8:d6:99:ac:d9:33:94:e6:6f:0d:08:fa:35:75:b7:71:2f:b9:
         47:9c:34:89:56:3f:55:6c:2c:2e:34:3c:70:ca:a1:1d:dd:ba:
         5d:58:a8:15:02:51:bb:ac:1c:c7:ca:c2:7d:a5:7a:ee:e0:75:
         fc:06:31:b5:2e:42:4e:23:2f:8b:43:a6:df:6a:a3:72:12:83:
         a4:19:b1:bc:72:e8:94:8c:d7:72:5c:69:1a:20:a3:01:a6:53:
         3f:08:1a:75:c2:17:d9:4b:29:1e:8d:55:a1:c8:ce:50:cb:6b:
         0a:37:58:0d:f7:23:34:b6:d0:dd:17:55:98:eb:d2:fd:61:3d:
         6c:61:1e:05:2d:65:af:3b:91:9e:2f:26:1b:7a:c7:8a:3f:f5:
         6c:65:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:10:39 2024 by rpki-client on console-ams.rpki-client.org