Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa
File:                     7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa (raw, json)
Hash identifier:          3LyYtZ7FOce6AeUiy3JstIehyEUlPF1/G1e+fTR0xPw=
Subject key identifier:   45:B0:69:A6:C0:54:38:CA:AB:E2:96:FA:9E:4E:0F:76:EE:14:CB:41
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584551CD6A0835145CA6F2266A80
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        130.248.215.0/24 maxlen: 24
                          130.248.139.0/24 maxlen: 24
                          130.248.234.0/24 maxlen: 24
                          130.248.137.0/24 maxlen: 24
                          130.248.214.0/24 maxlen: 24
                          130.248.209.0/24 maxlen: 24
                          130.248.211.0/24 maxlen: 24
                          130.248.188.0/24 maxlen: 24
                          130.248.136.0/24 maxlen: 24
                          130.248.236.0/24 maxlen: 24
                          130.248.182.0/24 maxlen: 24
                          130.248.238.0/24 maxlen: 24
                          130.248.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6a:08:35:14:5c:a6:f2:26:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=91e8e68a-03d3-4e74-ace8-fcb899f4ef45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:af:f3:4d:f9:0f:bc:7d:ff:c0:42:f1:f1:
                    91:76:f8:76:8a:bf:18:65:24:49:41:d6:84:e6:22:
                    de:2c:84:59:15:dc:5a:40:3c:d1:5e:12:be:f7:20:
                    9f:b6:f1:af:04:cc:76:64:70:7d:e8:41:8f:12:58:
                    9d:4d:a6:14:97:c5:24:5c:b0:88:e6:f3:6e:eb:97:
                    9f:17:30:e6:74:ae:25:10:0d:22:55:b1:5a:8d:43:
                    73:8b:ea:4c:51:89:15:c0:4c:97:e7:bd:81:fb:21:
                    a2:11:25:73:73:3e:7b:fb:db:65:5c:37:86:5e:f9:
                    18:2e:a0:8d:a9:c8:e0:a8:cc:13:f6:66:34:6d:2d:
                    44:4f:49:78:ed:02:56:2e:9a:05:eb:a1:43:76:5e:
                    db:1c:01:77:1d:d8:0f:a0:43:79:53:14:84:44:2e:
                    96:41:ce:73:00:73:86:2b:df:58:0b:60:c2:0f:2a:
                    8f:35:0a:4f:96:24:76:d6:75:34:08:3b:99:8e:fe:
                    99:0f:f0:11:12:07:d0:70:08:01:ce:59:c7:14:0b:
                    f8:98:8e:66:69:88:02:93:82:9b:10:a2:3d:06:9c:
                    0e:c4:eb:10:6a:03:80:3f:02:e7:01:97:82:18:1b:
                    83:5b:82:4f:85:70:54:ed:96:a2:31:23:70:de:12:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B0:69:A6:C0:54:38:CA:AB:E2:96:FA:9E:4E:0F:76:EE:14:CB:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.128.0/24
                  130.248.136.0/23
                  130.248.139.0/24
                  130.248.182.0/24
                  130.248.188.0/24
                  130.248.209.0/24
                  130.248.211.0/24
                  130.248.214.0/23
                  130.248.234.0/24
                  130.248.236.0/24
                  130.248.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:64:85:75:30:8c:04:f4:7a:c8:32:b1:1c:16:c7:17:49:
         82:ee:af:1b:56:ba:1c:46:33:7c:bb:93:3c:29:36:a3:9e:07:
         be:5d:6d:8b:e5:e7:b9:1d:39:1d:c2:31:75:ee:86:f4:60:f1:
         e2:9d:4f:15:14:54:21:30:5b:4d:6a:ce:97:23:6a:59:54:2a:
         90:8b:57:67:f7:a7:1b:5c:f2:31:a2:71:cd:0d:dc:24:bb:a5:
         34:4f:85:df:b5:59:87:fe:d3:ad:6f:26:cc:b3:fd:f5:2b:bd:
         4c:f8:c1:94:e7:b1:aa:75:03:60:27:c3:d4:14:45:be:a5:8e:
         54:9c:4f:ad:91:d4:81:a5:0a:c5:3d:05:31:3c:58:98:cc:dd:
         61:16:f7:fc:7c:78:8c:a4:04:84:08:04:7b:5e:3e:77:31:2c:
         27:fb:bd:f2:8f:1c:82:f4:72:c4:ff:13:68:f6:5e:32:dd:0e:
         a8:e3:2a:5d:68:78:96:fe:fd:fd:34:67:9f:9f:1f:c5:eb:84:
         ea:dc:6e:12:8a:56:29:08:6f:f7:0c:7a:4e:2b:3a:ca:76:ac:
         47:8f:fc:98:0f:44:f7:c8:ac:b9:37:00:b2:94:c0:32:07:af:
         d2:33:d1:63:31:88:6e:6a:5f:98:62:3e:08:66:4a:f3:e6:65:
         05:42:65:37
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEVRzWoINRRcpvImaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI0MDMyNTAxMDAyNVoXDTI0MDYyMzAxMDAyNVowLzEtMCsGA1UEAxMk
OTFlOGU2OGEtMDNkMy00ZTc0LWFjZTgtZmNiODk5ZjRlZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyqv8035D7x9/8BC8fGRdvh2ir8YZSRJQdaE
5iLeLIRZFdxaQDzRXhK+9yCftvGvBMx2ZHB96EGPElidTaYUl8UkXLCI5vNu65ef
FzDmdK4lEA0iVbFajUNzi+pMUYkVwEyX572B+yGiESVzcz57+9tlXDeGXvkYLqCN
qcjgqMwT9mY0bS1ET0l47QJWLpoF66FDdl7bHAF3HdgPoEN5UxSERC6WQc5zAHOG
K99YC2DCDyqPNQpPliR21nU0CDuZjv6ZD/AREgfQcAgBzlnHFAv4mI5maYgCk4Kb
EKI9BpwOxOsQagOAPwLnAZeCGBuDW4JPhXBU7ZaiMSNw3hLZNQIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFEWwaabAVDjKq+KW+p5OD3buFMtBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvNzQ1M2IzYjAtYWZlZi0z
YWY1LWE4ZGMtYThlNTU1ZTM0MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAgviAAwQB
gviIAwQAgviLAwQAgvi2AwQAgvi8AwQAgvjRAwQAgvjTAwQBgvjWAwQAgvjqAwQA
gvjsAwQAgvjuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADmeZIV1MIwE9HrIMrEcFscXSYLurxtWuhxGM3y7
kzwpNqOeB75dbYvl57kdOR3CMXXuhvRg8eKdTxUUVCEwW01qzpcjallUKpCLV2f3
pxtc8jGicc0N3CS7pTRPhd+1WYf+061vJsyz/fUrvUz4wZTnsap1A2Anw9QURb6l
jlScT62R1IGlCsU9BTE8WJjM3WEW9/x8eIykBIQIBHtePncxLCf7vfKPHIL0csT/
E2j2XjLdDqjjKl1oeJb+/f00Z5+fH8XrhOrcbhKKVikIb/cMek4rOsp2rEeP/JgP
RPfIrLk3ALKUwDIHr9Iz0WMxiG5qX5hiPghmSvPmZQVCZTc=
-----END CERTIFICATE-----
Generated at Thu May 2 14:59:32 2024 by rpki-client on console-ams.rpki-client.org