Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
File:                     70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa (raw, json)
Hash identifier:          JCojd+Rzu9rQnCL4xWM4n5ppcerAKNTrs2Dp7jQF5Kk=
Subject key identifier:   D2:AF:B2:5A:75:AE:1C:59:63:3F:7C:B0:32:A4:E6:38:97:0E:5D:8E
Certificate issuer:       /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial:       010D0C9F432858457D131AA195AD8F20CC5ABF90
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     47027
IP address blocks:        130.51.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1a:a1:95:ad:8f:20:cc:5a:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=e4cf49ef-db33-4d22-a896-f68bf8cdc496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:1d:07:e9:0d:b9:6d:e8:37:89:8f:b8:54:
                    b3:3c:35:4e:71:34:9f:67:a8:56:77:9d:4d:28:81:
                    33:6d:76:ac:d1:8d:c4:8a:dd:f2:b6:ee:49:17:f5:
                    d1:d7:6d:59:29:3a:4b:ae:ec:fd:9b:6a:98:5f:9c:
                    6a:de:4b:c4:46:c2:bb:92:49:1b:a6:62:e3:a5:a4:
                    5d:ae:c1:26:ba:f9:5f:ff:2d:f3:3b:b1:c6:5f:e8:
                    8a:80:c6:dd:14:c1:ec:cc:5a:79:c3:83:47:3c:7c:
                    11:ed:31:e0:08:73:bc:b6:6e:b4:68:73:63:85:7a:
                    5f:cb:81:21:92:7f:6c:c4:9c:a7:33:41:d6:75:b3:
                    b9:6b:7c:16:dd:3e:4c:51:73:c2:96:59:c1:73:87:
                    81:65:64:be:6b:4b:45:af:9a:37:26:ba:40:ad:dd:
                    94:8c:dd:06:ec:2d:7f:3a:5d:85:75:cf:6d:cd:a5:
                    95:de:fb:33:67:14:a7:7e:22:11:14:91:df:ef:6a:
                    0d:04:ee:50:ce:0e:cd:f5:c8:36:91:f2:d4:4c:7d:
                    57:6f:28:f9:d3:d7:46:b0:4b:e1:85:b4:cb:30:61:
                    d8:b5:28:c2:1a:4c:b9:6b:48:16:f1:f7:35:c9:8a:
                    f6:61:4e:29:93:39:16:3d:99:f9:65:57:3e:64:1c:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:B2:5A:75:AE:1C:59:63:3F:7C:B0:32:A4:E6:38:97:0E:5D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl

            X509v3 Authority Key Identifier:
                keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:bc:f8:ed:52:ff:56:44:96:ca:9f:ac:54:05:02:85:d3:
         2f:67:51:5d:f9:07:8e:7b:73:03:bd:1b:97:db:c4:aa:a0:4f:
         47:9b:49:05:aa:af:9b:dc:51:ea:ba:58:9e:75:d0:8a:ac:48:
         9a:aa:f5:80:d0:70:98:33:5d:8c:5e:21:bb:fa:0d:1c:60:0d:
         f8:e1:38:1d:9b:61:97:78:d3:62:77:ea:6b:12:34:82:ae:78:
         31:29:18:44:2e:b2:77:7a:b2:30:6b:e6:6b:6e:2d:96:8c:e5:
         82:3c:68:84:aa:71:b3:05:5c:07:92:2f:43:0f:85:53:9a:c6:
         ae:00:4e:ea:9e:4e:5b:13:07:b7:98:84:df:0b:91:78:6f:b6:
         61:07:4a:91:de:07:01:86:3d:87:d3:a7:59:15:5c:0e:5b:6a:
         2e:3e:ab:9e:97:b2:f2:aa:f3:1e:0b:ff:c3:85:64:ce:4d:f5:
         a3:4d:cd:fa:db:36:58:fc:14:0f:e9:71:ed:9c:68:ca:04:37:
         c1:4f:e0:f3:87:ed:81:e0:77:a7:52:53:fb:3e:34:c4:f2:60:
         04:59:5a:f9:46:66:c8:5a:c1:5e:e1:25:a1:6b:3c:05:d6:75:
         5a:e4:c1:e9:db:13:57:4d:73:a2:3c:71:85:77:ac:1e:2c:69:
         66:d6:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:57:18 2024 by rpki-client on console-ams.rpki-client.org