Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6e37036-d997-37c0-b197-399b3fa08b3a.roa
File:                     b6e37036-d997-37c0-b197-399b3fa08b3a.roa (raw, json)
Hash identifier:          tA+Xe421oIeSrgs3uq2HKAAY2aDxUxo7DFMz8MkSIvY=
Subject key identifier:   B9:B5:85:52:B8:83:61:C4:68:BD:2C:FA:7D:4B:CD:69:AC:66:A5:1C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584540BBF50379DD27CE184D2680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6e37036-d997-37c0-b197-399b3fa08b3a.roa
Signing time:             Mon 18 Mar 2024 22:16:31 +0000
ROA not before:           Mon 18 Mar 2024 22:16:31 +0000
ROA not after:            Sun 16 Jun 2024 22:16:31 +0000
asID:                     15169
IP address blocks:        130.211.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:f5:03:79:dd:27:ce:18:4d:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 18 22:16:31 2024 GMT
            Not After : Jun 16 22:16:31 2024 GMT
        Subject: CN=004bba44-75c0-4a52-9904-1ce24938cd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:68:c2:82:94:e8:e0:7e:3e:46:3f:2b:1f:
                    5b:08:ac:4e:32:b2:2c:59:50:80:6f:dc:b5:c5:4b:
                    c2:96:0b:c2:4a:7c:38:a3:a5:ea:be:c0:d0:1f:51:
                    81:c3:ab:03:8b:18:1d:5f:6f:70:8a:4b:75:6b:75:
                    ce:46:97:93:4f:c7:5d:e2:42:7e:d7:7a:50:ff:ad:
                    63:53:43:48:6d:1e:fc:28:c4:07:58:a3:f0:ef:d5:
                    e4:60:04:77:a3:d6:8f:20:0a:8d:4c:17:89:91:58:
                    9b:4b:ab:a6:cf:06:5c:d1:52:0f:24:06:39:52:be:
                    b0:d7:59:7d:26:89:e0:84:f9:d5:ee:56:38:49:8a:
                    b8:57:d5:fa:93:0e:b3:42:7f:0c:ce:f1:0a:88:7d:
                    34:f9:fe:9a:2f:8d:a5:90:c1:c3:8c:99:3c:a4:01:
                    1c:19:92:8a:38:86:01:c9:16:9f:60:c2:ac:22:4b:
                    fb:b3:75:9d:6a:d9:b2:4c:f6:25:b8:0e:31:0e:22:
                    11:4b:c2:55:12:88:d0:d6:38:28:6d:cb:da:13:d9:
                    6a:6b:01:59:e6:a3:61:8a:7c:fa:95:5a:c2:c6:b2:
                    3b:9e:17:61:7f:58:c3:e3:58:43:c8:f8:62:80:1c:
                    f0:a1:d9:4a:90:1a:25:2f:4b:4b:24:ab:74:78:1b:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:85:52:B8:83:61:C4:68:BD:2C:FA:7D:4B:CD:69:AC:66:A5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6e37036-d997-37c0-b197-399b3fa08b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.211.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:d1:60:6a:35:8c:3f:11:98:d1:01:21:bc:02:40:41:8a:
         46:ce:52:47:39:fd:23:bc:a8:bd:7e:6d:a6:3e:39:c9:99:27:
         ed:6c:22:76:c3:32:07:83:d2:41:93:bc:6a:0f:a7:5d:af:a8:
         99:8e:62:3c:ee:f7:4d:a5:82:43:55:f9:0b:d5:51:52:8a:bb:
         8e:6e:24:58:74:e0:ea:61:59:54:fc:c4:fa:e2:33:8c:4e:b8:
         2e:6e:31:61:c6:94:c1:0a:be:14:bb:14:14:a6:aa:57:08:21:
         fa:52:1f:ab:b7:ce:b6:4b:51:c4:7a:39:de:67:1d:c2:c1:0e:
         24:55:d7:2a:ac:97:42:f8:21:99:67:f7:48:4a:8b:8d:08:3c:
         e1:ea:b2:32:1d:da:72:e4:d3:71:de:a2:e8:b0:7f:fa:0a:8c:
         de:93:82:3c:2f:71:bc:3a:29:f4:f8:15:a4:0f:b2:cd:94:90:
         5b:8f:8e:b4:4d:01:d7:4e:25:f0:0b:a5:de:47:31:11:6a:c7:
         69:cd:6e:c2:bc:fa:60:4e:c8:3b:0d:ad:11:68:4c:a8:9e:bb:
         56:fd:63:38:6e:76:75:92:0f:9e:c3:6b:94:61:71:7d:cd:88:
         b2:3a:ec:48:b1:0d:4a:ce:27:8a:45:9c:bf:fb:df:c6:07:ba:
         a4:b7:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:33:39 2024 by rpki-client on console-fra.rpki-client.org