Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa
File:                     bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa (raw, json)
Hash identifier:          wlG8AEw+tBIQCks9QvxcaYc0k+8lhWi6ieIXbq50CQc=
Subject key identifier:   F9:32:C1:B2:AF:67:DF:6F:04:77:0A:8B:A2:AA:F4:36:2C:0E:34:AB
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F43285845B21E159EB9CEFEB55C371250
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     21976
IP address blocks:        130.156.9.0/24 maxlen: 24
                          130.156.8.0/24 maxlen: 24
                          130.156.11.0/24 maxlen: 24
                          130.156.10.0/24 maxlen: 24
                          130.156.12.0/24 maxlen: 24
                          130.156.5.0/24 maxlen: 24
                          130.156.7.0/24 maxlen: 24
                          130.156.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:15:9e:b9:ce:fe:b5:5c:37:12:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=e11b3ccd-87d8-4ddd-b0f9-42c4a7af2eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:93:96:f9:72:d8:5d:74:a8:46:98:05:0d:
                    be:58:76:19:80:cd:da:fb:ed:4f:6a:87:b6:4c:a5:
                    ef:8d:80:9b:10:66:05:08:3e:5f:9d:21:22:46:58:
                    e7:60:4a:31:33:b8:29:cf:df:19:a9:fa:b1:74:7a:
                    8a:a0:91:3f:06:71:49:cb:20:a4:ec:52:79:3b:56:
                    76:52:14:8b:73:f0:a9:4e:12:15:35:99:a2:09:cd:
                    ce:38:71:84:1a:06:65:27:60:88:39:f5:b9:33:7d:
                    ea:22:6d:1b:ba:95:ff:b7:26:19:93:bd:b9:7d:cd:
                    f9:2c:fd:cd:37:08:4d:cc:ad:f3:0f:93:0a:a7:00:
                    ee:e7:53:a5:40:68:07:3b:c8:64:6b:87:8e:ac:19:
                    a0:a1:7b:89:3b:4e:58:40:a5:78:23:e1:9e:04:45:
                    2e:06:8a:46:53:4f:ed:ac:05:0c:53:80:df:c7:b5:
                    8d:51:62:9b:3a:95:de:b6:1c:a7:36:3f:b7:88:56:
                    09:0d:c9:d7:ff:6a:ba:7e:4f:3b:8a:0d:0d:ab:e2:
                    65:96:cb:b9:5b:f2:8b:a0:17:2b:83:54:ab:17:2f:
                    c6:53:be:79:07:58:68:b4:5b:6e:2c:db:51:17:65:
                    7b:18:fb:6b:26:ec:ab:4d:91:f0:a4:9c:4c:12:1c:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:32:C1:B2:AF:67:DF:6F:04:77:0A:8B:A2:AA:F4:36:2C:0E:34:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.5.0-130.156.12.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:05:90:95:bc:59:15:cf:13:b3:d5:10:fe:35:68:8b:2c:
         44:87:af:58:3b:c6:ca:39:c1:ac:7b:00:18:09:c1:14:d0:da:
         db:8b:d5:8f:f9:1d:43:e0:cc:44:2f:d7:df:61:de:18:17:0a:
         d4:e6:23:14:cc:ac:fc:b4:0f:b5:40:c3:ec:a3:7d:6b:5f:a8:
         e2:59:ad:c7:05:e1:7e:cb:73:69:f5:62:da:9f:b0:04:75:a9:
         2e:1b:58:94:70:2e:d6:f1:ad:91:7f:e1:25:3b:ec:4f:ed:4b:
         5a:b3:13:49:7c:73:53:47:fd:42:39:1d:c1:44:3d:bd:96:91:
         0c:4c:d6:42:6b:35:bb:aa:23:0b:ab:b8:c1:8c:e5:5d:e1:0c:
         2a:8f:25:6c:d9:5f:23:b7:be:28:c7:08:d0:e2:dd:ab:21:c9:
         2a:d7:c7:ad:fe:a1:cb:5b:39:1f:dc:9d:18:6c:32:fe:f5:d7:
         8a:4e:38:52:91:0f:8c:8c:f9:de:96:4c:71:74:02:60:49:e1:
         8b:cc:f3:25:f4:91:0d:b2:89:3c:d9:65:78:dd:99:ab:fe:a3:
         b6:f4:e6:4d:e7:57:63:c7:00:d4:0f:c2:52:8c:45:4f:d5:75:
         19:85:d8:f8:a9:40:42:46:fc:f2:21:b0:92:5f:38:b7:78:c8:
         8c:28:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:40:21 2024 by rpki-client on console-ams.rpki-client.org