Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa
File:                     4338433f-a208-3589-9c69-6c3b1db06a76.roa (raw, json)
Hash identifier:          RV6NGx4gzig++/OqOz1cdG7PVTOTMwnwBv0jvQNNXAc=
Subject key identifier:   80:E9:FA:F7:9F:11:FD:A3:E6:48:AC:DF:55:42:6D:CC:01:0A:E1:1D
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584838854CA61C73BDF644F29840
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     21976
IP address blocks:        130.156.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4c:a6:1c:73:bd:f6:44:f2:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=d472fe00-2ea1-4742-a006-3a3b0b59f5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:e2:03:1a:09:b3:ee:b3:a3:bd:bf:32:12:
                    f2:9c:98:fd:89:86:ad:7a:a8:c8:f4:91:c7:57:40:
                    47:5b:23:dc:e9:eb:7a:dc:d7:8d:40:ad:a4:60:25:
                    0d:b4:44:66:31:17:e8:57:8e:e3:68:9f:b2:aa:3e:
                    8d:7b:f2:35:19:dd:ef:34:12:18:86:53:cf:8f:af:
                    fc:27:2a:80:ea:19:a4:c7:d6:b9:ef:1e:af:cd:f5:
                    ed:7f:eb:8f:09:4f:9d:2b:c3:e6:9b:33:da:e7:64:
                    89:03:26:92:c4:8f:65:ff:b1:22:ab:39:8f:c7:3c:
                    d6:b7:39:6c:23:d9:8c:d8:49:37:c7:28:c8:e3:dc:
                    81:59:8c:8f:89:b9:b8:0b:a4:42:8c:1f:82:01:30:
                    60:a5:cb:ed:18:51:f7:79:49:95:5c:0c:6b:1c:15:
                    7c:83:69:65:9a:f1:34:de:1f:a8:b3:f3:6b:cb:53:
                    64:de:de:ed:4a:a5:45:a2:99:19:01:a6:93:f8:ed:
                    77:b2:22:fd:b0:3e:3b:da:84:8c:ed:f3:13:6e:59:
                    37:06:9e:95:c1:5e:ec:29:56:67:a6:09:e5:37:5e:
                    63:19:df:bf:d9:6c:92:6e:e3:06:82:97:19:5c:10:
                    d8:e8:ae:9d:c6:49:ed:23:2e:d4:19:1d:e9:2c:ac:
                    ac:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:FA:F7:9F:11:FD:A3:E6:48:AC:DF:55:42:6D:CC:01:0A:E1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:e8:46:39:a2:2a:0a:a2:ee:da:90:ba:0d:99:86:90:d8:
         3b:a6:47:fa:64:9b:97:84:91:c8:f8:2e:4e:ef:73:b1:72:14:
         0f:90:ee:a3:df:07:ff:54:ef:ad:cf:a5:fc:a0:e7:eb:a3:a0:
         72:bd:6b:68:5d:3f:53:bc:a8:f5:08:2b:34:1f:5b:9f:2a:46:
         b7:a9:82:52:ce:ec:58:84:ee:24:de:02:cf:04:73:a1:d8:75:
         ff:f8:e1:88:7e:ce:e0:7e:d5:06:a9:86:3a:71:da:78:d3:74:
         81:59:9d:6d:08:0d:1a:e9:f6:60:e5:29:86:b8:82:40:54:c5:
         af:c6:ba:d7:1d:18:63:77:d1:2c:20:25:02:d1:5a:30:ae:f6:
         66:f1:e5:f6:c2:df:71:6a:f7:2d:64:80:29:fc:1a:61:1b:b6:
         39:d1:05:88:18:a5:fd:a6:7c:51:ba:d0:f2:93:25:65:76:66:
         e7:81:14:66:36:ee:27:ef:c4:a8:94:bd:98:ac:34:76:3a:23:
         78:fb:fe:18:27:87:bc:9d:c2:45:b9:1c:33:1a:54:d1:40:56:
         36:6e:01:55:2c:9f:c6:76:08:e9:51:51:07:3f:db:d6:41:8f:
         72:9a:32:b3:f2:7f:f1:0d:47:07:f8:0a:25:ed:30:93:9f:7f:
         c5:29:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:14 2025 by rpki-client