Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/0b349776-fc1d-3bae-81fe-e98160e958c9.roa
File:                     0b349776-fc1d-3bae-81fe-e98160e958c9.roa (raw, json)
Hash identifier:          zFm3NCXtR1x1mrv19hWFmmLqsBi7RmCLXxO1KEYRpMI=
Subject key identifier:   45:83:1E:44:7F:7C:9B:1A:55:CB:65:D7:C1:AE:7D:33:29:3A:CF:71
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F43285848388553583DC5846B3C715600
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/0b349776-fc1d-3bae-81fe-e98160e958c9.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     21976
IP address blocks:        130.156.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:53:58:3d:c5:84:6b:3c:71:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=412b728c-c6c3-4156-acdf-3f870dcf235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:d5:e8:ab:22:ed:ce:18:a0:e2:d0:c6:20:
                    7a:0a:02:46:91:86:19:74:cb:1a:45:e8:91:7f:19:
                    a3:3f:eb:17:88:aa:8d:26:d5:f2:4d:3f:c2:ff:33:
                    5b:2b:79:1a:49:e7:c6:55:70:c7:f0:2c:d4:ff:9f:
                    89:a9:b4:45:2c:70:ea:40:4c:c6:cc:91:a0:07:c9:
                    c0:f3:8c:8d:38:22:6c:3e:e6:e3:6b:7c:10:b5:35:
                    77:cf:f9:90:52:7e:0b:ba:f9:0d:be:14:c8:ea:61:
                    3a:af:af:5a:b8:00:dc:da:cf:47:75:35:ac:0a:68:
                    12:db:f0:06:cf:08:17:e8:cb:6f:06:6c:5d:9a:19:
                    c4:5c:64:4e:76:28:45:27:9e:55:55:93:93:54:48:
                    11:f9:53:77:a7:59:fa:f7:24:54:95:c4:d6:5a:83:
                    e7:ef:3f:cf:dc:d7:8f:a9:30:36:b0:23:03:ce:bf:
                    a6:96:94:e3:6e:d6:d8:ab:00:c1:bd:19:47:3d:20:
                    6a:ef:1e:d6:bf:c1:87:25:2e:09:46:d2:62:81:13:
                    8c:00:1c:96:83:4e:f8:de:5f:b4:e3:65:91:59:ad:
                    94:db:7f:f1:5a:de:dc:cf:29:1c:0a:b6:c0:21:d7:
                    7e:4c:c2:bb:ff:e1:f4:db:2a:8f:9a:e2:db:37:97:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:1E:44:7F:7C:9B:1A:55:CB:65:D7:C1:AE:7D:33:29:3A:CF:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/0b349776-fc1d-3bae-81fe-e98160e958c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:0d:f1:41:ab:35:c5:5c:9f:3c:a8:94:99:13:76:f5:be:
         df:f3:d1:51:a0:a8:c7:16:b8:39:98:cc:24:c6:f0:97:f3:96:
         37:54:cb:21:82:7a:61:c2:d7:55:a8:32:d3:d0:d2:57:7b:71:
         37:06:3e:1c:b1:40:65:58:91:a2:f2:a4:37:cd:37:41:6c:ca:
         bb:6d:25:dc:6e:86:78:b0:cd:09:f7:0c:71:9e:53:47:1a:68:
         f8:d2:e4:bc:c2:10:aa:72:7d:43:eb:f7:cf:06:5f:87:c6:65:
         31:8e:03:9f:f7:ec:f0:27:49:10:4c:5d:e2:a2:39:5d:88:2b:
         31:ce:c8:c9:67:ed:06:30:64:ac:41:cc:1c:d2:ac:11:95:2f:
         55:de:87:3f:77:3a:c7:d0:3a:6b:d9:5b:de:70:f3:76:e4:ce:
         0d:30:e1:24:78:d8:84:2f:17:86:53:3d:88:48:58:f9:10:95:
         7a:82:b9:67:b6:7b:74:03:d2:6a:c5:2a:eb:7a:c6:08:a5:19:
         29:99:98:5e:83:4a:ca:09:b5:08:63:4b:18:15:49:74:eb:ea:
         f1:69:ae:69:2e:ca:9e:38:63:e1:a2:75:44:ea:61:fb:fb:e6:
         6e:1c:af:95:65:5a:66:a2:7b:2a:51:d5:31:bc:73:12:fc:c4:
         de:0f:88:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVNYPcWEazxxVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1
NzE1MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDEyYjcyOGMtYzZjMy00MTU2LWFjZGYtM2Y4NzBkY2YyMzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl3V6Ksi7c4YoOLQxiB6CgJGkYYZdMsaReiR
fxmjP+sXiKqNJtXyTT/C/zNbK3kaSefGVXDH8CzU/5+JqbRFLHDqQEzGzJGgB8nA
84yNOCJsPubja3wQtTV3z/mQUn4LuvkNvhTI6mE6r69auADc2s9HdTWsCmgS2/AG
zwgX6MtvBmxdmhnEXGROdihFJ55VVZOTVEgR+VN3p1n69yRUlcTWWoPn7z/P3NeP
qTA2sCMDzr+mlpTjbtbYqwDBvRlHPSBq7x7Wv8GHJS4JRtJigROMAByWg0743l+0
42WRWa2U23/xWt7czykcCrbAIdd+TMK7/+H02yqPmuLbN5cwRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWDHkR/fJsaVctl18GufTMpOs9xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2
NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvMGIzNDk3NzYtZmMxZC0z
YmFlLTgxZmUtZTk4MTYwZTk1OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx
ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx
NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj
ZjVlMTU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgpzUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHoDfFBqzXFXJ88qJSZE3b1vt/z0VGgqMcWuDmYzCTG8JfzljdUyyGC
emHC11WoMtPQ0ld7cTcGPhyxQGVYkaLypDfNN0FsyrttJdxuhniwzQn3DHGeU0ca
aPjS5LzCEKpyfUPr988GX4fGZTGOA5/37PAnSRBMXeKiOV2IKzHOyMln7QYwZKxB
zBzSrBGVL1Xehz93OsfQOmvZW95w83bkzg0w4SR42IQvF4ZTPYhIWPkQlXqCuWe2
e3QD0mrFKut6xgilGSmZmF6DSsoJtQhjSxgVSXTr6vFprmkuyp44Y+GidUTqYfv7
5m4cr5VlWmaieypR1TG8cxL8xN4PiCk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:01 2025 by rpki-client