Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa
File:                     4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa (raw, json)
Hash identifier:          6G1kWlL8zaksQB9CcZ7v18dapqiL/tSmuoBA26RMijs=
Subject key identifier:   13:A1:B8:D1:9D:AF:E2:CB:6C:2A:4C:77:E4:D6:0D:39:58:90:CB:5A
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F43285848EF614767725D240DC79A49C0
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7324
IP address blocks:        130.51.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:47:67:72:5d:24:0d:c7:9a:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=acf56363-82fe-4665-883e-12d73340586f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:9c:d6:4d:98:91:d1:2b:c2:2e:e0:19:73:
                    0d:45:5e:a4:04:a4:db:a5:3b:27:0c:2f:a3:b1:7b:
                    b9:25:03:88:f3:da:c7:46:88:22:46:3a:30:ac:23:
                    c4:a8:45:41:0c:44:a9:54:ad:c8:21:be:7d:39:79:
                    77:6f:f3:93:f7:24:44:f8:02:9d:44:33:a4:5b:c5:
                    93:36:99:4a:e4:56:89:19:01:95:23:ba:63:22:15:
                    3a:3c:9e:b9:25:f6:b5:ee:45:0d:b7:00:39:91:e3:
                    03:8c:b5:a8:03:2b:5b:d2:dc:75:3d:0b:4d:26:dc:
                    c2:56:ac:8c:dc:1a:98:f0:bd:31:b3:ef:c3:a9:5f:
                    47:dd:9c:5e:5c:5d:80:5e:cd:12:27:2a:d6:02:80:
                    2d:86:3f:cf:3a:12:cd:68:fa:42:5d:57:8d:59:6b:
                    59:de:08:2b:d0:cd:21:d4:57:37:f9:26:61:da:0c:
                    1c:ea:b6:f7:f0:32:a6:46:04:e5:a6:2b:f8:2b:d0:
                    f9:12:bc:77:77:38:ff:6d:18:f0:45:9f:eb:ff:f2:
                    3f:c0:70:e3:09:f0:bb:e2:fa:39:4c:05:8e:f4:f2:
                    51:3f:95:35:10:0d:bc:ef:68:65:2c:78:fe:9e:ad:
                    18:4c:72:95:76:03:61:fd:b0:c0:15:55:05:e9:06:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A1:B8:D1:9D:AF:E2:CB:6C:2A:4C:77:E4:D6:0D:39:58:90:CB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/4d8bd863-f50e-38d3-8d86-0539bdbcc796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:44:ac:12:eb:0d:ea:b8:f8:ae:98:fb:30:3b:a8:3b:fb:ba:
         87:a5:d7:cb:24:3a:ae:9f:c7:b5:e6:e2:86:40:48:8d:99:5d:
         20:09:78:26:de:07:98:c0:19:5a:e8:da:9e:dc:d6:88:c5:0a:
         6f:11:bc:1c:4a:25:c4:aa:c4:8c:a2:dd:99:2d:4a:4d:21:12:
         70:f1:56:86:c7:42:f4:96:f6:4e:01:5f:f9:9f:a1:09:ef:97:
         b0:1f:b3:45:88:21:43:d4:a7:aa:84:69:c7:eb:d3:42:c0:3b:
         47:0b:85:6c:ca:cc:51:f8:ad:bb:5a:6c:00:ef:8b:d4:01:14:
         eb:7b:2d:8b:99:2b:23:c8:73:6c:0e:15:4e:ca:0e:33:68:39:
         57:09:ae:6b:5b:bb:81:71:e8:69:87:74:79:08:bd:3c:51:7e:
         24:81:07:6a:5f:97:92:a7:85:2a:74:d1:6f:26:48:70:2f:84:
         29:e6:65:cf:f5:7e:88:7a:b9:e9:a3:2a:a4:15:0c:12:8e:5c:
         0b:f8:7c:27:4a:22:89:8a:f3:14:bb:1a:79:e6:48:9d:65:8f:
         c8:a9:06:bc:cb:4e:12:16:a6:30:a0:98:91:85:7c:d6:f3:2c:
         69:61:ef:5e:f2:77:91:d1:f9:ca:b9:ea:41:3a:0b:a1:5b:97:
         75:e9:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:31 2025 by rpki-client