Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa
File:                     cf435177-d899-3b98-b125-e7e093fe112a.roa (raw, json)
Hash identifier:          13h3KEphpH3sNbVJS7pyPl60ZdWUYwc9Jiv1krI8RIM=
Subject key identifier:   2B:FD:A7:18:61:AF:84:60:89:C1:FF:9A:CA:C0:D0:15:6C:C8:95:4B
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584851A57560CC255DEB9F135000
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     21976
IP address blocks:        130.156.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:75:60:cc:25:5d:eb:9f:13:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=0863264d-4bd9-405c-9b9a-3de3f84ec564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:73:b3:87:49:17:6b:91:26:73:b3:82:e8:
                    ed:a1:12:8a:d5:6c:25:7d:fe:ce:39:6b:38:bc:8c:
                    31:8b:e2:72:11:9a:c6:90:0f:30:49:e8:99:1d:9f:
                    b7:bd:94:4b:a3:ab:31:06:bc:ba:cb:fb:ca:61:18:
                    e5:b7:67:d2:41:71:29:cc:ff:73:46:5d:8d:f7:a0:
                    25:1f:22:c0:17:19:6c:33:4f:49:cc:6e:9b:65:dd:
                    6a:a7:9d:30:e1:4b:29:fe:99:05:8e:7f:5d:9a:78:
                    9e:97:fa:d6:9f:b8:85:5d:a4:7c:38:16:70:5a:05:
                    51:be:02:03:cf:4f:0c:33:b7:c2:8a:bc:eb:7c:89:
                    5c:5f:34:34:84:47:06:c2:34:0d:82:01:04:a9:bb:
                    f6:a1:54:de:1f:7e:14:9b:d7:b7:92:16:6f:aa:6f:
                    13:ec:f1:77:92:18:c4:ec:20:1c:c3:62:d7:9f:4a:
                    40:f2:8a:73:0c:94:c2:83:ab:af:57:a1:a9:84:7f:
                    a5:6a:07:89:e8:79:c6:61:5a:db:eb:a5:b2:f8:b9:
                    7d:c7:f0:af:00:03:18:c7:64:8c:87:f7:cc:6a:35:
                    1d:33:35:a8:9a:4a:a0:7c:dc:02:60:63:a6:e8:b7:
                    a3:ab:12:87:0e:5d:57:d0:a0:90:c7:4d:a7:36:1a:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:A7:18:61:AF:84:60:89:C1:FF:9A:CA:C0:D0:15:6C:C8:95:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:a1:95:32:d9:87:ae:15:14:7a:9c:30:d1:c9:2a:cd:de:
         f3:53:e2:f9:5d:aa:5c:d5:cb:8d:21:be:f4:48:81:47:c2:8b:
         57:0d:f5:64:c9:64:8e:50:81:af:82:e2:41:05:1c:6b:23:53:
         d9:28:54:27:a8:eb:3e:a6:ca:3b:d0:5a:e2:2c:3b:99:4b:32:
         d8:e4:95:04:7f:e8:af:65:48:f6:a6:80:99:2d:a2:47:8d:01:
         1c:d8:6a:7a:29:db:09:a8:a8:3f:c7:b5:72:3c:19:9d:64:65:
         c3:4a:cb:d0:41:fa:70:c2:ea:d9:8e:e7:8d:df:2c:f0:57:95:
         0e:99:dc:fd:0d:1e:6d:86:68:ed:40:f8:82:78:7a:46:55:b2:
         ea:ac:37:d8:4c:39:91:d0:44:42:93:1b:04:27:bf:c3:61:53:
         12:f2:65:0f:56:83:2a:df:83:39:d0:4c:31:46:f1:2e:16:f9:
         8b:1c:3f:55:95:2e:f6:13:b6:0f:d7:d9:31:2c:91:9a:e9:7a:
         29:ce:f4:2e:e6:98:d1:20:1f:39:7a:07:c8:e7:50:bc:00:98:
         a7:07:80:dd:86:22:70:a0:00:42:d0:9b:f4:4f:bf:5f:48:1f:
         41:84:dc:46:2b:8b:ff:03:dd:ee:7c:17:e7:a9:ed:f5:88:78:
         8e:82:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:24 2025 by rpki-client