Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
File:                     56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (raw, json)
Hash identifier:          fiJez9H3WlJ8Qcyv/8rMCmj2/lJYRM+U1sE+MEL1MqI=
Subject key identifier:   E4:DB:56:EE:70:81:C7:6F:93:6D:2E:54:43:C9:A5:BF:EA:EA:FD:A4
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F432858454C380C38F27C761EFEC6AB80
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        130.248.195.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.129.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.204.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0c:38:f2:7c:76:1e:fe:c6:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=d64d4dd5-a71f-4743-8800-fc918c670074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:66:b9:17:16:bd:7a:d5:aa:32:38:c6:b8:
                    99:51:e1:62:b5:98:19:27:36:70:9f:86:ea:58:84:
                    98:e1:cd:ab:cd:03:ef:3b:df:64:11:9c:35:3d:cc:
                    7e:3f:b1:32:86:6c:4c:91:be:de:7e:89:e9:d0:76:
                    b1:83:f0:51:2c:a5:4b:22:0c:dc:1e:8a:ec:88:10:
                    a6:63:e1:d7:2b:fe:1b:ca:9d:a9:df:b1:f2:74:33:
                    f8:14:87:f8:8c:b8:5e:bf:c8:07:97:34:e1:77:ec:
                    1d:1c:0b:71:5f:72:22:13:ff:5f:ee:09:b0:b7:10:
                    98:91:5e:1b:2d:95:71:40:b3:74:72:51:38:c7:d5:
                    1d:cc:72:ef:9e:4f:e9:6c:31:33:73:61:8c:02:4c:
                    89:b9:14:aa:c5:26:49:97:70:f0:fa:47:68:ab:42:
                    e4:f9:7f:56:73:a3:eb:7a:e3:8c:08:0c:8a:27:cb:
                    a0:40:c6:2f:75:ae:63:6d:af:3b:79:83:45:12:96:
                    e2:18:ec:f0:08:9d:69:b4:16:b5:0f:8f:b4:c3:6b:
                    41:f5:ea:57:ab:a1:d0:ff:41:ae:5b:1c:30:1d:90:
                    b5:88:47:00:4f:d3:31:0d:1d:84:63:31:44:48:2c:
                    38:16:91:40:9e:a2:69:ca:3c:88:33:1e:9a:50:cf:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DB:56:EE:70:81:C7:6F:93:6D:2E:54:43:C9:A5:BF:EA:EA:FD:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:89:d3:10:3a:89:3e:9b:b9:e2:4f:39:60:32:03:1a:e6:c0:
         f1:aa:e2:a2:7d:50:34:9a:e6:1d:6d:e6:b6:08:1e:1a:50:5d:
         83:bc:e2:28:0b:a3:a8:41:b1:2d:2c:19:3a:21:8d:ba:16:db:
         10:1a:3f:e3:fc:d5:1a:82:c3:a4:aa:cb:e9:da:fd:f5:48:2b:
         f1:77:de:97:a4:6b:08:f1:d1:96:16:a5:03:fc:d8:47:06:af:
         92:aa:0f:b3:ce:88:18:6a:fe:a6:e5:4f:2f:7f:af:fd:d7:52:
         9c:20:ee:d3:a9:7c:93:01:a6:0e:77:e6:3c:c4:74:c5:b1:1a:
         6c:5b:11:97:f8:b8:b2:f4:1c:65:ab:06:08:c0:ba:26:ec:7a:
         6a:25:04:23:a0:3a:47:9a:49:b4:1f:e5:3d:de:a6:97:84:3a:
         92:83:6b:a6:78:a2:3b:46:77:8d:75:5a:41:b2:71:f3:32:01:
         d1:82:f9:e9:84:56:b5:92:de:c6:35:2a:1c:eb:bb:10:44:78:
         e3:c2:21:0e:f2:da:16:a3:32:d0:bb:b1:16:77:d8:2e:c3:24:
         8b:af:c7:a0:a7:74:9c:85:dd:b0:0a:07:e3:4f:c6:60:f3:f8:
         4d:8e:7d:3e:3d:44:0c:0a:8a:7f:a3:dd:6b:7e:13:2a:7c:a2:
         f7:14:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:21 2024 by rpki-client on console-fra.rpki-client.org