Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa
File:                     323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa (raw, json)
Hash identifier:          tOrJY+uNrriVlrqcyL86LgIaWM8E0w2XF1oItDYuuKE=
Subject key identifier:   46:AC:55:CF:9A:7F:BB:88:9F:11:24:B8:AF:74:10:DB:71:6E:95:BC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBAA7AA30E5489D9194DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        130.211.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:aa:7a:a3:0e:54:89:d9:19:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=abbe6190-7be5-4255-a6bc-ba66f4d76c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:18:44:f9:04:d9:1a:f9:af:a1:4e:b3:8e:
                    53:78:9c:03:6e:c3:8e:f3:5c:91:57:7d:ec:bb:39:
                    83:6c:5f:48:ae:d5:a9:77:25:d7:38:e8:7a:3d:fd:
                    7b:67:8c:9a:e0:50:61:e7:45:94:f5:e4:74:a4:53:
                    c1:21:b2:f8:d5:40:51:5f:66:a0:ca:54:5a:e4:54:
                    23:03:49:e7:0f:c6:e4:ff:14:22:08:6d:31:e4:d5:
                    c8:be:11:a2:df:c5:c3:b1:27:13:82:87:4d:0e:2f:
                    60:fe:cb:a5:d3:a7:66:3b:b8:8f:82:b3:70:17:7b:
                    a7:3a:2c:91:f6:ea:12:23:a9:29:a3:87:45:41:eb:
                    ff:52:48:af:37:f3:9b:de:1f:fd:d8:9e:a0:a8:bc:
                    2a:4c:c3:f5:e6:8a:38:ad:5a:0b:4e:af:96:eb:63:
                    62:5e:f2:7c:da:0e:a6:5c:b3:53:ca:ff:7b:33:c9:
                    c7:11:1e:e6:ba:26:a7:9c:3f:5f:68:5c:44:d3:44:
                    f0:d6:04:98:8e:31:78:d5:92:c3:7e:41:3d:4f:52:
                    c6:25:66:0e:e0:5d:93:c1:d0:60:d3:a7:fc:ca:48:
                    62:ee:3a:64:3e:99:e5:ce:8a:3b:2e:d6:18:1e:08:
                    5c:88:45:11:66:71:d6:fe:95:5b:1f:29:b1:3c:83:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AC:55:CF:9A:7F:BB:88:9F:11:24:B8:AF:74:10:DB:71:6E:95:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323d3cfb-b9ce-34c9-bce4-119a300e8a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.211.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:0c:76:a0:fe:a4:81:7e:d9:67:e5:ad:f2:3f:cf:af:6a:
         f5:4a:63:58:97:38:f9:5a:d8:d2:91:0f:ca:15:71:99:65:52:
         dd:a3:6d:7d:f4:92:26:70:22:cb:69:9a:80:05:0d:2f:cf:99:
         1e:c2:74:8e:f7:79:d3:86:ba:ca:df:bc:b3:6f:46:22:53:ad:
         0b:58:c6:94:11:8a:64:6e:be:bf:f7:e2:d9:1e:bf:c5:c7:cc:
         87:cd:09:95:13:69:ca:1a:6a:5a:4f:a4:f7:7e:4e:50:e2:95:
         61:a8:de:8b:b9:a5:5d:f0:ad:a1:11:9d:22:0e:10:fe:1e:b2:
         7d:75:10:00:94:1e:dd:0f:db:13:a5:5b:fb:97:e1:59:82:1b:
         58:cc:52:ab:65:f6:28:fc:be:c6:0c:45:9c:1d:e0:07:62:8d:
         c8:24:c6:54:70:bd:a0:96:e1:54:79:32:a7:5c:e6:d7:89:42:
         ee:cd:89:0a:c4:26:f9:bb:63:4e:19:23:23:74:20:9a:53:7e:
         fa:e4:17:2a:0f:05:25:eb:5d:61:f9:52:1f:a7:39:5a:ca:75:
         5b:39:f2:33:ed:5f:1b:26:62:18:8a:19:b3:be:75:26:9e:60:
         cc:d8:dc:39:5f:43:4c:4b:2a:8e:9b:e9:d0:7a:cb:22:0e:dd:
         7e:ff:28:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:42 2025 by rpki-client