Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
File:                     f110b177-91f0-3d3e-8955-10231347c49e.roa (raw, json)
Hash identifier:          xESr/65mP5wq7ubCj5EtVORe75N2xg1Uq6naqiMu8Mo=
Subject key identifier:   C5:C9:60:95:E8:12:36:0B:D4:6B:F7:20:BF:6E:EF:3D:9D:14:07:3E
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584598FE090D788014A7A9415D00
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     21976
IP address blocks:        130.156.14.0/24 maxlen: 24
                          130.156.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:09:0d:78:80:14:a7:a9:41:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=b2bf1725-155a-48c2-9035-38747601fce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:7a:f3:1b:05:f7:1e:50:e1:37:99:6c:0f:
                    b5:9e:9e:09:84:95:ec:ce:c6:fb:75:74:78:5e:62:
                    a6:eb:80:92:5d:d5:2f:e6:36:63:f8:03:fb:99:88:
                    5c:e9:55:98:3c:05:73:bd:2c:51:d4:fc:70:ef:2f:
                    af:09:72:0a:2f:0c:1b:c0:60:85:2b:15:f0:65:25:
                    b5:34:dd:0d:e8:7e:1c:85:a1:96:11:e9:94:4b:a9:
                    b8:48:5e:9f:e7:55:8e:0a:2b:23:f0:fa:3a:40:b5:
                    69:7f:ea:55:00:0d:cf:db:73:99:ab:77:08:f6:e1:
                    6c:31:2b:72:29:00:87:85:fb:34:5e:11:e0:ba:be:
                    01:1f:d8:04:c2:6d:64:6a:08:cc:ec:34:0d:26:2b:
                    45:52:1e:9f:a0:db:27:fc:a7:4d:3e:93:90:a7:d2:
                    27:c9:9d:cc:c1:0d:93:31:5b:39:98:19:33:c3:7e:
                    d2:99:50:25:09:f6:65:8d:87:f1:73:7f:2a:d5:4f:
                    50:37:e6:df:8f:31:5a:3e:00:ed:b7:79:f5:d4:44:
                    2d:f4:86:c8:b7:b5:ef:d0:86:c0:77:d1:28:05:5e:
                    07:1b:92:7c:11:0a:d2:30:f3:cf:c2:c3:f5:dd:2f:
                    b9:e9:80:54:d7:90:66:49:a7:b3:72:b4:52:4f:85:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C9:60:95:E8:12:36:0B:D4:6B:F7:20:BF:6E:EF:3D:9D:14:07:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.4.0/24
                  130.156.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:0c:d7:75:f4:6b:9d:1b:a6:43:77:b0:fa:a1:86:13:29:70:
         f9:41:53:d8:af:c4:29:34:e7:07:83:96:ad:a8:13:c2:90:1c:
         93:17:ac:31:7e:5c:e4:e1:7f:dc:e0:31:5f:af:37:78:5a:6d:
         da:e8:27:7f:8f:5d:84:9a:25:65:dd:96:18:3f:02:bc:a7:73:
         01:bc:63:d2:bc:a7:97:09:ef:27:a1:ab:ce:7c:c6:be:54:88:
         a6:4e:87:4f:64:f4:e7:45:bb:06:49:81:71:8c:56:42:32:24:
         4c:d2:a2:5e:8c:f6:8e:90:a2:aa:c5:44:17:42:e4:89:13:24:
         c7:a8:6e:f7:13:df:56:12:46:62:aa:0b:bd:78:db:cf:b0:61:
         21:c6:56:26:35:41:d5:26:9a:3b:c3:94:c2:0f:c9:82:3c:7a:
         b9:6f:b1:b9:ba:a1:00:5b:b1:07:aa:99:d6:b9:5b:88:4d:4f:
         80:b0:23:3a:10:b5:b8:c3:f8:92:6f:15:f7:dc:36:52:42:59:
         58:2a:58:93:6d:6a:f7:d0:aa:90:ab:65:a3:84:df:93:f4:0b:
         ac:c5:03:e5:e4:66:08:e8:8a:14:2b:e7:69:82:6e:49:27:f4:
         70:9e:c3:c6:25:f1:55:9f:35:c1:7a:2e:83:ce:b5:1c:28:c3:
         ec:08:da:37
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWY/gkNeIAUp6lBXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1
NzE1MB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
YjJiZjE3MjUtMTU1YS00OGMyLTkwMzUtMzg3NDc2MDFmY2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTR68xsF9x5Q4TeZbA+1np4JhJXszsb7dXR4
XmKm64CSXdUv5jZj+AP7mYhc6VWYPAVzvSxR1Pxw7y+vCXIKLwwbwGCFKxXwZSW1
NN0N6H4chaGWEemUS6m4SF6f51WOCisj8Po6QLVpf+pVAA3P23OZq3cI9uFsMSty
KQCHhfs0XhHgur4BH9gEwm1kagjM7DQNJitFUh6foNsn/KdNPpOQp9InyZ3MwQ2T
MVs5mBkzw37SmVAlCfZljYfxc38q1U9QN+bfjzFaPgDtt3n11EQt9IbIt7Xv0IbA
d9EoBV4HG5J8EQrSMPPPwsP13S+56YBU15BmSaezcrRST4XZ8wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMXJYJXoEjYL1Gv3IL9u7z2dFAc+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2
NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvZjExMGIxNzctOTFmMC0z
ZDNlLTg5NTUtMTAyMzEzNDdjNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx
ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx
NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj
ZjVlMTU3MTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgpwEAwQA
gpwOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAMMM13X0a50bpkN3sPqhhhMpcPlBU9ivxCk05weDlq2oE8KQ
HJMXrDF+XOThf9zgMV+vN3habdroJ3+PXYSaJWXdlhg/AryncwG8Y9K8p5cJ7yeh
q858xr5UiKZOh09k9OdFuwZJgXGMVkIyJEzSol6M9o6QoqrFRBdC5IkTJMeobvcT
31YSRmKqC71428+wYSHGViY1QdUmmjvDlMIPyYI8erlvsbm6oQBbsQeqmda5W4hN
T4CwIzoQtbjD+JJvFffcNlJCWVgqWJNtavfQqpCrZaOE35P0C6zFA+XkZgjoihQr
52mCbkkn9HCew8Yl8VWfNcF6LoPOtRwow+wI2jc=
-----END CERTIFICATE-----
Generated at Fri May 10 20:14:28 2024 by rpki-client on console-fra.rpki-client.org