Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
File:                     70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa (raw, json)
Hash identifier:          NE89jEDARUWCN2W1hsDhcCb6eZXgSBTfYiDuMxrUkNI=
Subject key identifier:   98:DC:B3:BA:BE:CB:3D:15:1D:F9:9B:3D:87:DF:E4:00:D0:80:E9:36
Certificate issuer:       /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial:       010D0C9F432858473D25E426603271353719A4D8
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     47027
IP address blocks:        130.51.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e4:26:60:32:71:35:37:19:a4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=d7ca04ee-eca0-4cbc-99e8-c43c315aeed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:2d:94:f0:f7:68:a1:c8:0c:1b:6d:24:2e:
                    c8:33:94:ad:0f:33:60:89:6e:20:d9:eb:01:60:f2:
                    13:9d:1a:27:fd:80:33:9a:54:5b:2f:3e:12:d4:b2:
                    6b:ac:0f:8d:a3:35:eb:61:d6:cf:d8:b8:5e:b5:14:
                    c2:6e:c9:3d:11:cf:b2:27:d4:1e:47:0f:4f:8e:2f:
                    bc:79:1d:e2:30:81:15:ed:0e:c8:2f:da:5e:db:e4:
                    35:02:18:6a:79:75:96:1a:a5:e0:84:a8:55:02:aa:
                    7c:7e:50:74:8d:e1:c7:f8:b4:9e:24:ba:ff:c0:70:
                    17:78:26:96:f4:e6:f5:6c:fa:fa:7a:7e:9e:9a:d2:
                    f7:19:f0:96:1e:9e:6f:b9:e4:b7:90:bb:fd:29:c7:
                    0d:be:ea:6f:06:91:06:8c:65:ab:0c:75:ef:a5:77:
                    b6:34:60:df:30:cd:6d:e0:ca:2d:60:ba:d6:b8:30:
                    9f:39:ae:3a:12:c7:ce:ba:bc:ff:9b:88:97:16:d3:
                    f7:31:6d:42:b8:43:43:fd:35:b1:51:18:da:b8:cc:
                    d0:96:e8:ad:00:8d:eb:06:9e:1a:64:95:9a:af:b5:
                    b7:94:da:b5:13:1f:e6:d9:00:3d:2b:6b:8f:b7:3e:
                    01:57:84:e1:f7:66:e2:0b:35:4a:d0:b1:29:aa:f2:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DC:B3:BA:BE:CB:3D:15:1D:F9:9B:3D:87:DF:E4:00:D0:80:E9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl

            X509v3 Authority Key Identifier:
                keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:90:00:02:03:8d:9b:bf:04:fe:a8:48:e3:d2:5f:f0:5d:
         11:17:e7:5d:47:f1:36:73:2e:30:e2:95:66:80:42:12:52:8d:
         d5:f5:84:65:90:ab:27:ff:37:78:30:44:94:7e:0b:f7:82:b2:
         64:2c:43:68:ba:b2:65:b4:bf:45:23:b3:04:11:bb:5c:89:03:
         c3:22:39:d0:c6:2d:07:62:dd:17:e5:2d:83:8e:4f:1f:fd:a5:
         8c:40:ed:97:d1:d6:b8:30:b1:80:ba:7b:32:c4:e3:24:d2:08:
         5c:00:be:f7:de:b9:b0:fd:7d:c2:5f:39:27:e5:46:e1:e9:57:
         38:bb:fc:78:0b:c8:6f:a0:f0:89:24:0a:8a:49:02:63:66:bc:
         6c:84:38:cc:a8:ee:ac:ae:ad:af:ad:df:46:99:9e:0b:a6:62:
         e4:55:99:99:39:dc:40:10:18:95:4e:4d:49:2f:09:a6:80:0c:
         94:e3:8e:7a:42:6f:80:63:0b:81:33:ac:a1:58:90:8f:85:94:
         1b:01:ea:b2:47:dd:0c:d9:9a:3f:3b:91:d9:be:88:c3:fc:87:
         6f:79:f1:47:f3:41:c4:d6:93:9c:06:20:6e:ab:2d:1a:b8:86:
         2b:0c:6f:ea:1c:8b:b4:b7:d0:4f:97:17:d9:ec:21:52:af:77:
         08:fc:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:05 2024 by rpki-client on console-ams.rpki-client.org