Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/741716b3-4d1f-3a00-8378-77b7d80eff8e.roa
File:                     741716b3-4d1f-3a00-8378-77b7d80eff8e.roa (raw, json)
Hash identifier:          Df1a6PQGDkOlRG5agstGs+X6OWFF3fPf7/+uIad5Ml4=
Subject key identifier:   8D:03:20:4B:BD:A5:EE:8F:4D:C5:E2:73:93:80:45:E3:79:24:C0:24
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F93C8CD
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/741716b3-4d1f-3a00-8378-77b7d80eff8e.roa
Signing time:             Mon 30 Sep 2019 00:30:54 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     40704
IP address blocks:        165.254.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:93:c8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=cab38381-f754-4be7-b3ef-a4e0f3f7170e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:d5:92:1d:bf:0f:a5:ff:02:c9:d6:a8:78:
                    c4:88:f9:98:18:96:f0:32:5e:6c:cd:7b:f7:8c:4a:
                    1e:c6:e6:ed:23:e8:9e:21:d2:6a:da:4f:65:bc:aa:
                    98:80:12:eb:b1:30:26:04:eb:95:f4:e9:2f:01:3a:
                    02:dd:f2:35:61:03:c7:c3:50:e2:a0:37:aa:74:a9:
                    e0:b0:25:3b:24:c1:ad:ba:6d:f3:17:a3:d7:79:c1:
                    3e:38:e7:f7:9a:d1:b8:71:1f:a4:26:1f:6a:70:70:
                    b0:e0:39:ce:f7:94:69:00:65:0f:83:6a:16:61:d3:
                    a0:e2:47:30:74:3c:e9:73:fa:90:52:93:d8:b6:d5:
                    94:23:40:51:66:b6:9d:d6:7b:b6:11:06:5c:40:30:
                    a3:2a:ec:67:06:98:f5:ef:87:e9:ec:44:dd:96:47:
                    b4:26:62:f9:dc:a0:07:f9:78:67:7c:91:3a:4a:72:
                    8a:b7:e8:bb:a8:d2:8f:a3:c2:5e:50:05:af:8f:30:
                    9f:67:80:62:2c:e0:8d:a2:f4:d5:32:48:99:af:a0:
                    2b:13:91:01:4b:94:54:fe:11:74:79:dd:0d:23:06:
                    0e:51:2d:48:56:bc:cf:cd:71:5a:56:74:b3:f7:11:
                    f6:3d:eb:fb:51:5c:46:b3:c0:e0:d6:4d:8c:11:79:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:20:4B:BD:A5:EE:8F:4D:C5:E2:73:93:80:45:E3:79:24:C0:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/741716b3-4d1f-3a00-8378-77b7d80eff8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:a6:c3:d3:65:39:34:6c:19:87:a1:55:c3:03:75:f6:8b:af:
         4b:e5:a0:b4:e3:ab:fb:63:cc:8c:d3:5b:c3:5b:d3:1e:64:1d:
         b7:41:9f:7a:dc:14:b9:01:12:19:8b:c0:da:95:db:ec:5c:80:
         04:ae:09:30:7a:4c:80:d8:98:8b:1d:f5:0f:f6:83:0c:ba:5c:
         44:69:9e:61:33:12:91:2c:46:b9:6b:8d:40:00:e3:17:68:a0:
         54:5e:94:f4:2a:2d:c6:16:14:3d:2f:56:46:98:ab:da:78:00:
         a0:49:74:84:60:7f:f6:b6:a8:cf:fb:e6:9e:c5:19:50:8f:b7:
         bc:f3:88:3b:b4:a9:5a:c1:0d:a1:01:d1:5c:7c:70:40:e3:fd:
         d4:3a:8e:32:82:ec:c4:52:59:3b:c6:c1:11:4e:ee:b4:91:ab:
         f0:7c:11:10:43:6a:bf:0d:9d:8e:82:27:78:a2:0e:8a:2a:03:
         ce:ee:67:61:91:53:86:a1:8c:c4:1b:bf:d5:50:68:af:ca:d2:
         07:99:5d:32:35:24:42:b6:eb:d0:22:c9:81:51:23:d2:07:91:
         30:60:11:3c:99:09:fa:4d:6e:8c:97:8d:1a:f7:d8:d0:1a:83:
         8c:ad:82:49:6d:8c:05:ad:47:0b:59:eb:69:27:4c:8c:3e:39:
         ad:78:1f:07
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbX+TyM0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGNh
YjM4MzgxLWY3NTQtNGJlNy1iM2VmLWE0ZTBmM2Y3MTcwZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALhg1ZIdvw+l/wLJ1qh4xIj5mBiW8DJebM1794xK
Hsbm7SPoniHSatpPZbyqmIAS67EwJgTrlfTpLwE6At3yNWEDx8NQ4qA3qnSp4LAl
OyTBrbpt8xej13nBPjjn95rRuHEfpCYfanBwsOA5zveUaQBlD4NqFmHToOJHMHQ8
6XP6kFKT2LbVlCNAUWa2ndZ7thEGXEAwoyrsZwaY9e+H6exE3ZZHtCZi+dygB/l4
Z3yROkpyirfou6jSj6PCXlAFr48wn2eAYizgjaL01TJIma+gKxORAUuUVP4RdHnd
DSMGDlEtSFa8z81xWlZ0s/cR9j3r+1FcRrPA4NZNjBF55JcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSNAyBLvaXuj03F4nOTgEXjeSTAJDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzc0MTcxNmIzLTRkMWYtM2Ew
MC04Mzc4LTc3YjdkODBlZmY4ZS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKX+gjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAy6bD02U5NGwZh6FVwwN19ouvS+WgtOOr+2PMjNNbw1vTHmQdt0GfetwUuQES
GYvA2pXb7FyABK4JMHpMgNiYix31D/aDDLpcRGmeYTMSkSxGuWuNQADjF2igVF6U
9CotxhYUPS9WRpir2ngAoEl0hGB/9raoz/vmnsUZUI+3vPOIO7SpWsENoQHRXHxw
QOP91DqOMoLsxFJZO8bBEU7utJGr8HwREENqvw2djoIneKIOiioDzu5nYZFThqGM
xBu/1VBor8rSB5ldMjUkQrbr0CLJgVEj0geRMGARPJkJ+k1ujJeNGvfY0BqDjK2C
SW2MBa1HC1nraSdMjD45rXgfBw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:13 2024 by rpki-client on console-ams.rpki-client.org