Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/53c74ccf-79e9-3507-850e-1d43a66ac7a1.roa
File:                     53c74ccf-79e9-3507-850e-1d43a66ac7a1.roa (raw, json)
Hash identifier:          i1rRgSQ1uG8teMw0TEONgq7vbew2Kuk+FOz6xQkjvDc=
Subject key identifier:   A0:AE:BF:4F:FE:91:B1:7B:87:B7:86:8F:A5:9B:61:B3:B8:B9:EE:F2
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F43285845AF5369CBDB877A8920F9E700
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/53c74ccf-79e9-3507-850e-1d43a66ac7a1.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     40267
IP address blocks:        130.156.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:69:cb:db:87:7a:89:20:f9:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=917efd6c-e22f-4dbf-b0e3-22bbaba92938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:4f:a5:ec:97:53:38:91:07:3e:73:79:a5:
                    d8:c5:4f:e0:9c:f2:b6:98:af:56:41:5a:8a:27:a8:
                    52:51:68:b9:3b:5b:af:4d:92:4f:5c:b9:14:ba:17:
                    96:f4:75:a0:ff:96:f2:a7:35:9d:ec:cf:d0:7b:b1:
                    87:f5:93:04:4b:aa:ee:e7:fd:f8:ab:06:b1:2c:87:
                    07:da:9a:a8:09:54:23:97:37:96:db:d7:68:cc:8d:
                    c8:5d:7c:52:f2:fd:ff:2c:d0:a9:c3:be:91:22:2b:
                    9d:a0:ba:6f:33:71:16:4c:bf:0b:eb:81:45:31:49:
                    06:33:ba:4c:a8:1f:f8:fa:ca:da:b3:cb:20:77:db:
                    d9:c5:8a:42:2c:5d:47:86:09:0e:58:83:95:4b:ab:
                    e0:0d:d0:fc:ab:2b:6f:df:12:5d:fe:a3:77:c3:b3:
                    1d:15:eb:51:ab:5a:9c:f7:2f:b9:a3:91:f3:4d:ba:
                    fb:59:1c:d8:83:fc:c0:63:d7:86:e5:37:23:b3:d9:
                    25:6c:3e:f6:2e:51:dc:9f:21:d7:42:06:a6:c9:78:
                    22:d3:e1:5e:76:e5:bc:4f:ab:ed:ff:0c:17:fb:de:
                    92:bf:46:e4:71:2c:e8:50:ff:0e:36:ca:14:20:15:
                    6d:dd:1e:7a:bb:1b:03:d7:fe:ec:dc:9d:93:90:52:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AE:BF:4F:FE:91:B1:7B:87:B7:86:8F:A5:9B:61:B3:B8:B9:EE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/53c74ccf-79e9-3507-850e-1d43a66ac7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:15:b9:60:69:00:ce:32:d1:ab:cb:ad:2d:02:74:8e:59:d7:
         f2:d2:09:23:b4:3f:e7:6a:0a:de:45:65:6e:9c:47:66:a5:4e:
         cc:22:1b:f8:d2:a1:6d:3d:12:dc:73:cf:5a:5f:c2:ed:19:fc:
         65:28:1a:2f:93:ac:40:3a:d7:13:f5:41:25:6d:87:35:ce:3f:
         21:6a:9c:16:1a:3d:60:bb:4d:83:4f:41:e4:3d:33:7a:65:0a:
         f9:17:6f:72:8d:af:b9:ac:98:37:92:88:c9:d5:2f:93:a2:2a:
         4b:a2:76:dc:ad:f6:c6:4a:f9:a9:2f:16:d4:41:5c:2e:f1:38:
         07:02:53:1c:c6:2a:00:25:db:1b:39:41:a0:17:01:9a:bc:dc:
         e1:f4:60:c7:23:dc:ea:f7:de:9c:a6:99:bf:62:05:9c:c4:6c:
         9c:7c:fa:45:2e:7f:bd:a2:94:be:1e:13:16:54:68:4e:c5:19:
         9a:99:b0:2e:9a:51:0f:d5:2b:f6:2d:a3:a5:23:c0:5f:8a:81:
         5d:25:9c:a0:d8:d6:80:2f:16:f9:15:a9:9c:43:e7:cc:e4:89:
         4a:25:e0:6a:c9:23:76:fc:96:54:6d:fb:d4:46:25:ee:83:5a:
         1f:5a:95:2f:76:6d:92:8b:35:e2:c4:a6:51:f7:f0:9e:03:5e:
         0f:83:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:05:42 2024 by rpki-client on console-fra.rpki-client.org