Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa
File:                     ca755e65-375b-3141-a78c-963d8a464836.roa (raw, json)
Hash identifier:          qz9vYRe/26bocrSqBTE+wvN6NNO/qq8Hfq6xWD21sDs=
Subject key identifier:   36:61:2A:46:11:69:49:39:C2:0A:1D:D2:02:C1:4C:D1:4F:54:2B:B0
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F43285845B21E1A20DCD536818F50A440
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        206.146.132.0/24 maxlen: 24
                          206.146.133.0/24 maxlen: 24
                          206.146.134.0/24 maxlen: 24
                          206.146.130.0/24 maxlen: 24
                          206.146.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:1a:20:dc:d5:36:81:8f:50:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=9aa7310c-4441-4c52-bc2e-b9f7e2f781d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:db:c7:49:8a:b2:05:e6:dc:48:55:97:d3:
                    00:44:e4:db:1c:50:93:58:01:5b:d7:cd:a7:22:39:
                    35:7a:16:23:08:e2:96:4e:f8:d8:0d:de:84:72:6e:
                    64:9f:50:35:9d:ec:da:f1:cd:29:73:7f:52:f6:62:
                    92:d3:f5:56:ab:f7:d5:62:33:ef:93:71:dc:86:77:
                    f2:d1:6e:ce:c4:88:0b:78:fb:b3:f8:51:98:3f:76:
                    d1:48:3a:d8:27:b6:05:35:72:b4:b4:2a:a0:02:bb:
                    72:3e:54:ae:dd:42:d9:c6:5f:d7:f3:ba:04:c6:3a:
                    7d:e1:4c:76:b0:7c:0e:f8:71:3c:9d:a9:a6:cf:2d:
                    bf:74:ec:2b:6c:93:26:76:16:41:57:d8:85:f0:af:
                    7a:0c:7d:4d:cb:54:bc:c7:9d:ed:5f:23:39:bc:42:
                    46:93:b1:bf:b5:af:a2:7a:0d:20:95:82:47:6a:8e:
                    35:7f:a1:c5:c6:e0:06:87:e9:67:bd:a8:2b:27:45:
                    ce:c7:5b:6c:05:86:69:2e:c3:6a:53:ef:b7:f6:18:
                    95:46:f8:c5:ab:3f:a4:2b:e7:a7:17:27:33:f6:46:
                    8a:ab:98:89:3f:ac:3a:4a:10:ee:d2:94:6f:b2:40:
                    7a:ae:11:2a:e6:be:d9:3f:12:2b:d7:f3:49:e1:df:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:61:2A:46:11:69:49:39:C2:0A:1D:D2:02:C1:4C:D1:4F:54:2B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.130.0-206.146.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7e:96:df:01:82:30:74:fb:0c:d5:3d:89:4c:92:39:61:39:
         40:c5:ac:90:bc:2e:8c:19:54:75:40:36:dd:d2:af:19:bf:5e:
         7f:80:29:31:20:d0:cf:eb:52:81:0d:3d:e0:f0:ed:14:e8:ea:
         65:a7:39:75:67:ea:ef:a0:15:b6:89:6a:26:92:f1:f3:bc:46:
         e2:dc:a4:b3:0f:68:24:7d:b5:d9:db:3f:8e:8b:52:c6:19:9f:
         37:bb:d0:ed:40:28:c0:9b:46:04:2f:2a:97:b8:24:2e:0f:1f:
         ad:b4:75:cb:bf:d0:65:61:6f:db:20:cf:f4:f1:86:f6:54:d5:
         b3:20:80:ff:5a:01:c8:63:63:be:55:14:88:80:ad:a7:26:af:
         c3:a6:bd:52:06:c7:03:45:d5:35:36:2f:03:35:77:a8:27:10:
         24:62:ba:cd:9a:fb:97:0f:50:83:20:44:29:53:3b:30:6d:14:
         2a:63:36:ae:0c:f2:ad:80:55:61:c8:d6:c6:aa:99:a9:d3:4d:
         47:fa:86:af:3d:67:3d:86:79:f8:1d:98:e9:79:c6:e9:cb:3b:
         2e:d2:7f:f5:7b:36:c4:06:fb:af:68:5c:76:13:d8:df:2e:45:
         ff:32:db:73:22:b0:e8:2c:0e:43:02:8d:d0:b0:e7:a2:a9:95:
         fe:41:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:54:29 2024 by rpki-client on console-fra.rpki-client.org