Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
File:                     8357b082-17dc-3d36-87f1-8e0746d54610.roa (raw, json)
Hash identifier:          XV6mmdqyNUX8q7rTOZD2rk7HjePzjiRrUDeb7+8ejh4=
Subject key identifier:   ED:B3:21:48:AE:4C:B9:1A:7F:BA:77:4F:99:AE:C1:8F:D3:4A:C8:EA
Certificate issuer:       /CN=d9e22f6d-5551-4712-9f95-3008c51223ec
Certificate serial:       010D0C9F4328584566BDBCAE3E51076594CC9880
Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16430
IP address blocks:        131.95.128.0/17 maxlen: 17
                          131.95.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:bc:ae:3e:51:07:65:94:cc:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=5e0083df-bea4-4b8c-92a4-581aabaf2524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:33:c2:fe:e6:cd:ec:9b:ad:d4:02:9f:4b:
                    15:99:b0:b3:c5:d8:ad:7b:fd:9c:b1:e2:10:28:ff:
                    f9:ec:33:4d:2e:e7:77:6c:3c:f8:13:5b:47:54:51:
                    35:be:49:15:dc:3c:00:57:b8:a6:eb:03:63:50:99:
                    e7:c8:0e:55:30:04:af:05:f5:d8:a6:d7:a3:4a:7e:
                    7b:6f:9f:36:b8:1c:20:d1:32:f9:c2:38:67:a5:35:
                    36:9b:ff:0c:d9:ac:ef:08:d3:6f:63:c0:3b:9b:15:
                    12:a8:26:e8:46:c1:d7:a4:de:bb:51:84:31:17:52:
                    5a:ce:74:c9:01:1d:9b:3a:d8:0b:aa:8b:0d:d0:ed:
                    c7:54:10:9e:f3:b4:63:e3:fa:c9:28:ba:18:cd:21:
                    a5:97:d8:4e:43:97:00:48:ee:49:6b:0d:59:d4:4e:
                    45:42:95:fe:51:53:46:58:71:73:ae:f1:54:13:d7:
                    fd:d8:f4:0b:f7:8d:53:01:47:8d:cc:c7:96:4c:68:
                    b6:6c:5f:9a:8c:a8:5c:58:a6:73:ee:97:81:92:17:
                    fd:59:89:e6:61:40:98:37:ac:db:ac:2f:dc:ac:a9:
                    20:51:b4:e2:de:47:9a:bc:be:db:25:02:65:76:df:
                    d3:99:d1:ba:77:84:cd:c8:5b:9e:d2:35:0e:6f:c1:
                    7c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B3:21:48:AE:4C:B9:1A:7F:BA:77:4F:99:AE:C1:8F:D3:4A:C8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl

            X509v3 Authority Key Identifier:
                keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:ba:6e:98:76:56:6d:cb:2e:3e:eb:13:08:c2:6e:c0:59:
         48:ca:4c:20:df:db:27:13:5b:39:8b:5c:0d:77:aa:15:a6:ef:
         e1:ae:3a:53:5c:08:4d:83:6c:25:98:8f:59:7f:28:1e:e7:48:
         4a:4e:05:82:ae:10:d6:fe:6e:8c:12:16:a8:3a:b5:e2:8c:8a:
         d7:82:7d:4d:62:1a:35:0b:b4:96:3d:fc:0e:c9:78:be:e6:13:
         4d:6b:a2:17:9c:d2:39:eb:8f:88:81:e6:b4:7e:35:0e:af:76:
         08:6f:71:dc:3a:70:50:cf:44:5c:16:51:af:ef:c7:91:5c:76:
         27:6d:68:c2:5d:cc:91:d2:85:8c:5b:e5:ad:2a:68:e2:d5:90:
         81:5e:d3:09:c1:48:62:90:4f:f0:69:b7:e5:0b:20:54:92:12:
         69:bd:fa:e0:a4:37:5b:55:19:4e:78:78:4f:91:d1:1e:5d:78:
         3a:06:7c:f8:13:84:95:9e:53:24:35:f1:02:7f:8a:bd:df:81:
         01:84:3e:8a:5e:91:42:78:44:86:ea:71:2d:04:1f:0e:49:b5:
         83:52:6c:d2:70:52:da:82:05:50:01:da:44:7d:b6:6e:2b:5c:
         f3:7b:d8:9e:f2:48:07:8d:e2:f6:ea:cc:8e:9e:8b:c8:8d:0d:
         7f:cf:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:14:09 2024 by rpki-client on console-fra.rpki-client.org