Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
File:                     45b4cca8-304a-3829-8684-121363defde7.roa (raw, json)
Hash identifier:          YGp2yLzRGOaWaeMLYbOiQGAK+gWEb7GHVKCjxGNigLQ=
Subject key identifier:   6E:CC:0D:3F:5B:B8:25:9D:D5:9A:D9:07:68:76:37:9E:D7:D3:C9:FC
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285845A15E04CE274C516E61DE6620
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:04:ce:27:4c:51:6e:61:de:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=b864d896-268a-46e1-b5a8-663f7a7b4b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:b5:28:0b:17:85:99:ba:6b:d4:63:1b:96:
                    21:87:8e:fb:0c:6e:5f:e8:fa:c4:23:82:d2:58:20:
                    7a:32:8b:a3:1b:23:e5:fc:0a:0d:94:dd:c1:31:71:
                    27:7d:c3:de:7f:dc:51:4e:30:bb:0d:76:4e:d1:46:
                    01:7e:41:5d:a2:b4:e0:e6:9b:c4:0d:9c:fe:21:f5:
                    89:a1:67:8d:84:9b:0c:58:87:7d:03:bb:d1:51:9b:
                    eb:c9:c6:db:1c:4b:83:69:af:22:3b:e3:fc:bc:ea:
                    93:4a:73:8f:7b:7e:24:5a:a1:e4:46:d6:96:88:51:
                    53:cf:25:cd:62:6d:51:8e:c6:2b:5e:ad:ea:89:61:
                    ff:ff:2e:f1:bf:ee:4e:69:a6:08:fa:31:1c:ff:93:
                    a0:e7:ec:47:f7:b1:73:2b:49:a9:b7:b1:a2:c3:bc:
                    1f:68:2f:b4:52:df:8f:63:e5:88:c5:36:f5:6e:bf:
                    72:34:bc:8f:ac:5a:94:28:7b:ca:c9:44:f3:f0:47:
                    83:f7:a2:56:19:4c:ac:e5:fe:3d:bb:a7:2c:56:33:
                    43:b0:25:a3:9b:68:4d:14:2d:da:aa:fd:27:7d:d4:
                    de:61:f0:89:34:59:ea:8d:64:a7:0d:c8:60:af:91:
                    cb:2d:9d:0c:f5:3c:3c:d0:2a:56:94:81:bd:97:ba:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CC:0D:3F:5B:B8:25:9D:D5:9A:D9:07:68:76:37:9E:D7:D3:C9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:12:6b:8d:5d:03:ce:b2:b9:e3:f4:1d:02:57:69:28:a0:dd:
         27:33:d9:d3:62:05:25:57:6c:a8:3f:4e:a1:10:49:c5:da:16:
         35:3d:30:31:fa:a0:40:5e:1c:4e:d6:2d:70:a3:e2:73:3a:36:
         09:52:45:ed:0c:89:50:e7:24:6b:03:39:32:99:64:9c:ff:c7:
         f2:25:a6:b2:d8:bd:77:d1:61:52:05:94:5b:95:86:aa:75:62:
         ed:3e:d6:5c:81:0f:c7:8b:9d:b0:ad:e6:f2:1d:d8:12:ef:90:
         87:a6:eb:69:3b:15:c8:b8:69:c3:6d:09:d9:90:87:ea:9e:61:
         4c:5f:f9:68:6d:82:36:26:f2:2c:23:20:13:18:28:e0:ab:36:
         f0:c0:7d:8e:83:5a:9e:5b:c5:f1:51:f3:73:e8:48:7c:68:68:
         e4:54:b8:eb:2f:56:8d:ce:5e:a9:af:b8:d3:75:03:de:08:85:
         60:df:a5:a1:7c:91:1a:03:e5:b1:3c:24:ac:21:0d:8f:b1:5d:
         64:cf:91:6c:fb:bb:e3:89:3a:d4:14:3f:26:75:a9:63:a4:f5:
         6a:ef:e2:fa:af:c7:45:11:84:dc:3a:2b:f2:19:84:c4:5d:8a:
         7e:09:0d:76:c3:72:75:04:c1:ce:10:45:b4:bd:88:9d:4c:b0:
         6b:f3:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:32 2024 by rpki-client on console-ams.rpki-client.org