Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
File:                     b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa (raw, json)
Hash identifier:          0VRQaD9W5xv4Z6mE3h7amhhv66UUYx2+IUwi73SFAk8=
Subject key identifier:   93:44:18:ED:4C:C0:2B:C6:CE:6B:F3:0D:1F:0C:FC:6A:8B:DC:6F:67
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584949FE84DBE473BCE1268C5900
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     18794
IP address blocks:        130.156.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:84:db:e4:73:bc:e1:26:8c:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=a1280237-c75a-455f-bef3-780262485317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:f7:1f:81:5e:51:eb:1a:1f:7e:1d:f9:7d:
                    01:b9:2c:84:33:68:dc:d6:77:d0:55:80:69:fa:17:
                    a4:e5:55:90:a1:61:5c:0b:36:56:21:a0:12:88:17:
                    78:d2:a1:b6:5b:72:28:90:3a:fa:98:f3:aa:5c:b4:
                    8c:59:9f:35:b6:4c:f5:3c:61:8e:46:0b:df:bd:00:
                    17:43:e8:83:df:8d:b2:98:4b:c8:cc:1b:c5:8c:31:
                    04:41:5f:12:88:00:33:32:40:5c:8e:07:c4:e4:c5:
                    b0:0a:3b:1d:58:3a:22:f6:6d:47:85:b8:4f:62:f4:
                    e2:5e:79:f8:76:55:fb:09:75:aa:df:16:44:f7:34:
                    e8:c5:c8:26:19:cc:2b:34:4f:91:00:60:95:be:97:
                    55:54:ce:e1:ec:47:c1:cb:9e:80:98:8d:60:83:b5:
                    90:bd:3b:55:b1:bc:d9:57:32:98:d1:0b:75:f8:7a:
                    49:99:30:e4:28:2d:b1:fd:39:b3:06:89:89:08:c8:
                    63:32:85:be:cf:1a:13:2c:4e:3f:bd:2a:81:d7:8e:
                    34:4e:af:75:9e:95:f8:ae:ae:d1:03:2a:0c:33:d5:
                    7e:d1:00:73:97:88:e9:42:61:eb:b3:7d:c5:ee:df:
                    1d:9e:e3:06:a3:c3:a7:b2:58:0f:66:5d:1c:45:49:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:44:18:ED:4C:C0:2B:C6:CE:6B:F3:0D:1F:0C:FC:6A:8B:DC:6F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:86:36:88:44:11:92:66:fc:3a:89:bd:65:ac:44:f2:3a:55:
         5c:45:6a:a9:29:27:db:7f:31:4b:a0:41:f9:0a:a9:b4:6b:62:
         da:51:70:0d:b2:e1:56:0a:1f:50:e8:50:9a:b1:6c:a2:e5:95:
         0f:ea:03:ca:ee:b0:39:a6:56:8a:27:e4:37:97:e1:b2:71:f8:
         13:2f:10:c6:0f:3d:3f:42:ca:c9:d8:1b:21:f2:d9:bd:b6:3b:
         67:ab:bc:30:43:1f:bc:27:d9:b1:24:5e:c4:c1:a8:e4:25:72:
         28:07:7a:38:25:2e:92:dd:08:d8:f5:90:90:41:14:5f:6a:29:
         2b:62:39:28:9c:f6:05:51:2c:5a:fa:76:b5:89:7b:d2:0e:1e:
         ad:b8:24:a6:25:b9:46:01:99:98:70:a9:0a:30:05:55:77:be:
         94:0d:7a:5e:90:e3:7e:49:59:c2:7b:ca:ec:a2:40:c2:a5:22:
         20:3b:d7:cc:f4:b6:6c:bf:55:e0:61:72:c1:f9:c9:b0:ae:f5:
         de:52:c7:30:f6:b3:74:80:a4:88:e9:ca:86:92:24:4b:e8:ab:
         66:59:d0:35:96:fd:89:99:b6:01:61:61:92:7d:de:7d:e1:77:
         2c:0d:75:6f:28:e2:c6:23:fc:9c:35:ed:42:a7:a4:e5:ff:71:
         1f:56:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:16 2025 by rpki-client