Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
File:                     12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa (raw, json)
Hash identifier:          jguQKw5Thfdc27uCvu4ZOvw/Qzg3ErdBUxmldwNyRHI=
Subject key identifier:   38:8C:51:78:1B:85:77:07:A2:0D:21:97:8C:4D:C0:4B:ED:05:CF:83
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858456C0F0D9647ECBE7451AF4900
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
Signing time:             Wed 03 Apr 2024 10:43:42 +0000
ROA not before:           Wed 03 Apr 2024 10:43:42 +0000
ROA not after:            Tue 02 Jul 2024 10:43:42 +0000
asID:                     54600
IP address blocks:        130.51.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:0f:0d:96:47:ec:be:74:51:af:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Apr  3 10:43:42 2024 GMT
            Not After : Jul  2 10:43:42 2024 GMT
        Subject: CN=3ff53c25-690e-4638-9b7d-b7686004899e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:e3:2b:0f:9c:ab:39:a8:be:e2:3a:2b:08:
                    18:d4:db:2b:b9:0b:47:b1:5f:3a:de:68:24:7b:9c:
                    c0:54:07:f6:e5:52:bf:d6:b2:e8:e4:a6:e4:67:fa:
                    09:a8:04:59:2d:7b:5c:9a:82:f7:3e:3c:c8:3c:20:
                    6f:c6:ad:6b:b9:99:65:37:9a:86:2c:f0:ae:0b:e5:
                    d8:a5:12:fb:3d:32:31:13:ca:bb:ac:de:02:80:65:
                    aa:eb:05:cb:0a:9a:0e:c7:c9:83:eb:88:93:b9:8f:
                    c6:1e:a0:6b:c6:02:b2:5f:71:f8:b5:0a:a2:39:09:
                    96:2a:76:73:ef:69:47:8f:b6:e3:29:14:7b:9c:9b:
                    2f:34:9a:96:85:1a:44:ea:89:59:41:17:11:30:78:
                    cb:29:f1:94:7a:47:13:a7:e0:3e:e1:42:da:76:82:
                    19:15:17:1d:ba:f6:7a:56:13:ea:80:af:22:10:6a:
                    dc:b4:23:58:d8:7a:07:69:72:8d:0e:fb:92:ea:43:
                    cc:46:96:fc:5d:41:86:1f:82:35:e2:d5:2b:a9:13:
                    79:98:fc:e6:82:4a:b5:f0:86:bd:1c:2e:ff:d9:6d:
                    9c:68:1f:f8:74:fc:81:a7:62:4d:a2:03:3c:99:67:
                    17:52:19:2f:b8:b2:d3:3d:9c:0b:3a:a0:16:b7:77:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8C:51:78:1B:85:77:07:A2:0D:21:97:8C:4D:C0:4B:ED:05:CF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:a6:b7:8e:bf:0f:fb:97:e0:35:d6:0d:6d:b1:0e:e4:d5:
         1d:bd:02:36:ab:dd:23:75:26:da:15:4e:61:37:0a:d7:25:5e:
         aa:df:09:0c:56:fb:2f:40:91:88:f5:56:1e:8c:bd:b4:72:45:
         08:2e:b0:55:03:ad:83:79:a3:b9:d1:5c:22:0f:7e:25:4a:69:
         3a:c0:0b:13:bf:df:98:02:c6:91:11:04:99:b0:ea:0d:8b:82:
         a6:0e:00:f8:af:da:ce:56:41:a2:74:d3:52:95:98:ae:13:b0:
         ae:af:9c:b4:7b:09:21:88:cf:47:62:07:13:81:ac:fa:97:f6:
         d8:b6:fd:f2:ce:2f:a0:e6:e8:3c:34:a5:f4:ab:38:4b:b4:9e:
         ab:13:65:ca:f8:6d:5e:e6:ad:c3:e8:4b:b4:b5:48:fa:00:d0:
         55:4c:8b:39:03:6e:cb:36:42:e6:8b:a7:d8:4b:22:6c:58:33:
         40:58:70:e0:3d:75:71:7c:5a:f5:20:1d:4d:b6:08:26:f3:ce:
         73:cb:0c:86:ba:c4:0f:e4:2e:b3:b0:75:aa:56:1c:a8:2e:1d:
         f5:00:7d:66:56:b5:a8:b4:1a:75:54:bd:5d:ee:73:e1:de:ff:
         1c:1a:01:64:b6:ea:c0:63:86:76:bc:e2:29:12:4f:e7:f0:04:
         9e:0d:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:17 2024 by rpki-client on console-fra.rpki-client.org