Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa
File:                     c8028626-644a-36ff-94f2-e2b51d0032be.roa (raw, json)
Hash identifier:          dMnmkZZVfY12TwzpQ8nAMJ2B9WzqSB4ipCYHOxTHfuE=
Subject key identifier:   C3:D0:87:D8:A9:B0:45:E4:41:20:D2:02:EE:98:02:F5:E6:B0:CC:88
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F432858454C380C2455471167BE3F2980
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     14618
IP address blocks:        130.248.204.0/24 maxlen: 24
                          130.248.205.0/24 maxlen: 24
                          130.248.140.0/24 maxlen: 24
                          130.248.155.0/24 maxlen: 24
                          130.248.206.0/24 maxlen: 24
                          130.248.207.0/24 maxlen: 24
                          130.248.230.0/24 maxlen: 24
                          130.248.181.0/24 maxlen: 24
                          130.248.183.0/24 maxlen: 24
                          130.248.190.0/24 maxlen: 24
                          130.248.192.0/24 maxlen: 24
                          130.248.129.0/24 maxlen: 24
                          130.248.165.0/24 maxlen: 24
                          130.248.176.0/24 maxlen: 24
                          130.248.180.0/24 maxlen: 24
                          130.248.196.0/24 maxlen: 24
                          130.248.189.0/24 maxlen: 24
                          130.248.179.0/24 maxlen: 24
                          130.248.154.0/24 maxlen: 24
                          130.248.208.0/24 maxlen: 24
                          130.248.153.0/24 maxlen: 24
                          130.248.152.0/24 maxlen: 24
                          130.248.195.0/24 maxlen: 24
                          130.248.193.0/24 maxlen: 24
                          130.248.194.0/24 maxlen: 24
                          130.248.226.0/24 maxlen: 24
                          130.248.197.0/24 maxlen: 24
                          130.248.198.0/24 maxlen: 24
                          130.248.210.0/24 maxlen: 24
                          130.248.222.0/24 maxlen: 24
                          130.248.229.0/24 maxlen: 24
                          130.248.220.0/24 maxlen: 24
                          130.248.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0c:24:55:47:11:67:be:3f:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=d813517d-49c4-4e03-aa2f-e8909350272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:4e:bb:2c:f2:61:1f:12:7c:7c:8c:4c:5d:
                    b1:91:5d:03:4c:b3:cd:ae:86:b9:c5:aa:1c:d0:02:
                    66:e1:91:fe:8d:3c:61:0c:e4:82:09:bd:c9:1b:74:
                    14:4c:38:49:ef:cf:d8:9a:18:10:48:9e:20:0f:02:
                    da:d3:86:df:dd:0c:aa:39:9b:e9:9e:6b:22:d1:08:
                    25:85:dc:63:13:76:e3:a1:93:7d:e2:f3:b3:e9:66:
                    29:c7:8b:a8:98:04:4b:5b:1f:08:6a:24:0f:6f:9c:
                    a1:61:b2:fb:de:ca:8b:69:78:6d:b1:a7:85:d2:90:
                    40:5a:3f:9e:82:63:df:c9:12:f6:27:16:af:24:23:
                    6b:1f:60:db:c3:8d:0c:26:6a:e8:60:5c:2c:5d:fc:
                    53:7d:af:e8:15:b8:62:8f:51:53:b8:b8:26:04:f2:
                    01:56:0a:a3:13:63:53:a0:69:e8:89:b5:92:15:e0:
                    1a:1f:57:fe:bd:87:b7:fd:22:e1:29:5f:b8:8c:95:
                    b1:4f:4f:ad:2b:12:5e:bd:3d:0c:67:6b:c1:34:90:
                    f2:cc:6e:a9:62:ac:bc:69:2a:a7:a6:0a:f3:05:17:
                    2f:f7:65:51:5d:ac:be:81:c7:a1:35:13:57:19:76:
                    0b:9f:fd:6c:62:b7:59:62:d6:21:8d:23:61:50:5b:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D0:87:D8:A9:B0:45:E4:41:20:D2:02:EE:98:02:F5:E6:B0:CC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/c8028626-644a-36ff-94f2-e2b51d0032be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.129.0/24
                  130.248.140.0/24
                  130.248.152.0/22
                  130.248.165.0/24
                  130.248.176.0/24
                  130.248.179.0-130.248.181.255
                  130.248.183.0/24
                  130.248.189.0-130.248.190.255
                  130.248.192.0-130.248.198.255
                  130.248.204.0-130.248.208.255
                  130.248.210.0/24
                  130.248.220.0-130.248.222.255
                  130.248.226.0/24
                  130.248.229.0-130.248.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:23:f6:66:1b:a7:aa:92:bc:b1:ca:77:4e:48:01:2d:a6:47:
         7b:22:bd:c8:a8:a4:85:2d:68:12:8e:4c:4c:a8:db:e6:80:8d:
         76:2d:f3:c6:0b:3a:af:cf:ba:b3:dd:6d:4d:cc:b4:d8:bb:09:
         74:37:20:b9:96:17:4d:f9:cd:fb:bc:3c:1f:c6:c6:3a:a0:11:
         50:2f:70:c8:0d:8d:9f:88:ab:1c:2c:8b:94:84:3a:3f:14:75:
         3b:54:42:35:76:77:71:eb:27:84:9f:3b:b6:2b:a1:b9:ab:d7:
         0a:46:19:2f:bf:b5:17:fa:b5:a5:30:a4:4c:ed:6d:f9:61:7e:
         ff:cc:94:1d:e2:4f:07:62:f9:fe:b3:75:53:72:e7:4d:00:28:
         1e:70:b4:16:40:91:df:ca:21:1e:ae:7f:db:40:69:af:3e:69:
         c2:2b:8b:8a:73:af:36:4c:b3:af:e6:8f:a6:11:0e:2d:f9:4a:
         57:33:76:71:90:00:b1:12:e4:bf:c2:d4:6d:8d:a9:bd:17:63:
         92:ef:87:8b:dc:21:f8:ae:fc:cf:9d:0e:33:31:49:07:4c:9b:
         27:87:fd:b4:41:d9:ae:81:25:6e:c2:77:ef:d5:81:0f:53:49:
         82:63:c6:6b:62:9f:f9:d6:be:41:08:34:09:5f:61:26:d9:84:
         49:ba:71:f1
-----BEGIN CERTIFICATE-----
MIIGxjCCBa6gAwIBAgIUAQ0Mn0MoWEVMOAwkVUcRZ74/KYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZDgxMzUxN2QtNDljNC00ZTAzLWFhMmYtZTg5MDkzNTAyNzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSVOuyzyYR8SfHyMTF2xkV0DTLPNroa5xaoc
0AJm4ZH+jTxhDOSCCb3JG3QUTDhJ78/YmhgQSJ4gDwLa04bf3QyqOZvpnmsi0Qgl
hdxjE3bjoZN94vOz6WYpx4uomARLWx8IaiQPb5yhYbL73sqLaXhtsaeF0pBAWj+e
gmPfyRL2JxavJCNrH2Dbw40MJmroYFwsXfxTfa/oFbhij1FTuLgmBPIBVgqjE2NT
oGnoibWSFeAaH1f+vYe3/SLhKV+4jJWxT0+tKxJevT0MZ2vBNJDyzG6pYqy8aSqn
pgrzBRcv92VRXay+gcehNRNXGXYLn/1sYrdZYtYhjSNhUFuy9QIDAQABo4ID2DCC
A9QwHQYDVR0OBBYEFMPQh9ipsEXkQSDSAu6YAvXmsMyIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvYzgwMjg2MjYtNjQ0YS0z
NmZmLTk0ZjItZTJiNTFkMDAzMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBACC
+IEDBACC+IwDBAKC+JgDBACC+KUDBACC+LAwDAMEAIL4swMEAYL4tAMEAIL4tzAM
AwQAgvi9AwQAgvi+MAwDBAaC+MADBACC+MYwDAMEAoL4zAMEAIL40AMEAIL40jAM
AwQCgvjcAwQAgvjeAwQAgvjiMAwDBACC+OUDBACC+OYwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJSP2Zhun
qpK8scp3TkgBLaZHeyK9yKikhS1oEo5MTKjb5oCNdi3zxgs6r8+6s91tTcy02LsJ
dDcguZYXTfnN+7w8H8bGOqARUC9wyA2Nn4irHCyLlIQ6PxR1O1RCNXZ3cesnhJ87
tiuhuavXCkYZL7+1F/q1pTCkTO1t+WF+/8yUHeJPB2L5/rN1U3LnTQAoHnC0FkCR
38ohHq5/20Bprz5pwiuLinOvNkyzr+aPphEOLflKVzN2cZAAsRLkv8LUbY2pvRdj
ku+Hi9wh+K78z50OMzFJB0ybJ4f9tEHZroElbsJ379WBD1NJgmPGa2Kf+da+QQg0
CV9hJtmESbpx8Q==
-----END CERTIFICATE-----
Generated at Wed May 1 15:59:02 2024 by rpki-client on console-ams.rpki-client.org