Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/66c62ba3-0f6d-388c-80b2-ac7126f5276d.roa
File:                     66c62ba3-0f6d-388c-80b2-ac7126f5276d.roa (raw, json)
Hash identifier:          SWAnN6jF7DNaiIWWdXwT96Lac0CZ1Bdj36AVEVzDTog=
Subject key identifier:   E5:0F:09:BB:AA:FC:16:B3:9E:0B:A3:42:51:A1:AF:5F:EF:60:B0:B0
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F43285845B21E16D8A25028656708C980
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/66c62ba3-0f6d-388c-80b2-ac7126f5276d.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     21976
IP address blocks:        130.156.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:16:d8:a2:50:28:65:67:08:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=6555ab48-a963-45cc-8e01-0eafbc4dcde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:05:e9:8b:d0:84:57:3f:2a:9a:47:97:7f:
                    82:90:1a:98:53:01:d6:05:97:19:67:27:ee:9a:42:
                    0c:d4:08:a7:7a:d0:f3:7d:c9:d9:22:8e:b9:3d:3f:
                    31:85:22:0e:21:b8:55:8a:d3:f0:9a:c6:f8:b1:4c:
                    8a:c4:5f:f9:0b:9a:09:cb:4d:ba:05:4a:58:30:58:
                    14:7e:8c:07:26:3d:57:1e:cf:b6:d4:be:f3:34:a1:
                    25:0b:c1:ef:c8:d9:ba:8a:4f:d1:89:0f:1d:5d:fc:
                    25:fc:8f:6a:41:2c:2a:79:33:57:9e:43:1d:dc:be:
                    98:28:0b:91:cf:89:78:50:7a:aa:ea:a0:58:8a:45:
                    88:e3:21:9f:e3:89:3f:80:f3:1e:e2:6e:15:84:19:
                    10:c2:6a:ed:62:ff:0e:da:06:ed:86:d9:48:cf:02:
                    3d:25:e7:91:3a:13:15:4b:05:b6:17:1d:f0:b9:6c:
                    7e:65:9d:4f:6d:8b:6f:99:38:eb:24:be:b0:f7:5d:
                    0e:07:f9:9d:e7:c2:b8:2f:04:79:7b:7e:ac:fc:58:
                    a8:b0:b0:09:e7:4b:93:34:8d:b3:f8:17:3d:15:96:
                    6d:b2:9e:8a:91:c8:cb:1e:1f:fe:26:1c:27:31:9e:
                    40:61:19:3e:44:1c:e5:a3:e6:0d:dc:d2:0b:37:ed:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:09:BB:AA:FC:16:B3:9E:0B:A3:42:51:A1:AF:5F:EF:60:B0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/66c62ba3-0f6d-388c-80b2-ac7126f5276d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:bc:6a:af:21:20:e2:23:f3:e0:91:ca:dd:87:86:1a:36:e1:
         22:fa:3f:ad:05:ff:23:6b:f1:aa:be:fd:73:da:a1:6e:8d:ab:
         1e:74:68:e7:f6:08:71:05:e1:03:fa:ca:3d:b1:74:41:23:03:
         07:7f:36:e6:01:15:f2:b2:60:13:af:c5:44:29:9f:03:3e:ff:
         ac:b0:72:b1:9b:97:34:ca:a1:51:57:53:2b:c0:d8:de:cf:87:
         a8:2f:3c:44:82:8f:1c:4d:fc:c1:25:e5:e5:60:4d:bf:c6:f0:
         38:da:50:a5:ba:c9:8a:0d:3a:44:35:16:39:6f:c1:a7:46:1f:
         82:57:92:0f:53:45:41:15:3c:cc:f2:7f:88:2b:c1:90:2f:51:
         58:79:ad:fb:50:72:b2:db:d2:8c:13:e3:88:f6:60:cd:39:06:
         98:93:cd:47:96:23:61:54:7c:c7:07:ba:68:6a:a0:f8:25:8a:
         51:89:6b:46:57:2c:5d:a0:e5:f4:1b:96:00:e9:94:c0:70:a0:
         f8:d2:d4:ea:8d:53:43:f9:56:88:6e:ff:d5:e7:b3:67:a1:06:
         9f:ac:22:e1:d1:33:43:68:03:11:f9:e7:5e:2c:26:8e:44:5c:
         56:d2:16:35:65:59:c0:d8:ee:a4:ad:bd:c4:35:f2:d9:a6:ab:
         1d:f0:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:53:46 2024 by rpki-client on console-ams.rpki-client.org