Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5c89f199-899f-3321-a466-c4daba7ff090.roa
File:                     5c89f199-899f-3321-a466-c4daba7ff090.roa (raw, json)
Hash identifier:          b1lIK+8xJLK/WO/uoZ/oE6ryLm7Ny3yGBMGzyiBv6vc=
Subject key identifier:   82:FC:55:95:DB:AD:BF:48:97:35:E9:FD:03:B8:FE:68:46:1C:C2:40
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285847888654912F12914305BA1F80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5c89f199-899f-3321-a466-c4daba7ff090.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     53356
IP address blocks:        130.254.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:54:91:2f:12:91:43:05:ba:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=303502a2-46b3-40b6-96eb-57025cff71ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:c9:6c:27:56:14:8a:36:b4:bf:ae:68:f1:
                    18:dd:4b:1f:31:a2:11:0e:82:90:80:6b:67:8b:a3:
                    03:67:4c:e8:b5:8a:a0:36:90:15:9c:d7:4d:5a:2b:
                    68:95:a2:01:79:ae:8e:a4:40:04:bd:2e:99:38:09:
                    e3:44:34:2e:38:a8:3b:84:e5:d7:d2:d3:72:38:15:
                    b1:19:a0:e2:a6:54:1e:62:35:ce:db:1b:93:06:35:
                    a5:09:76:c7:72:d6:c8:a7:9f:9a:b6:1b:11:48:7e:
                    52:46:3f:b6:2a:b1:88:d0:c3:25:c5:14:3f:62:04:
                    ec:24:ed:ac:a2:4a:53:96:79:d0:f9:8f:9e:3f:92:
                    77:fd:25:2c:8c:09:16:d2:f0:3b:a8:69:ad:f4:b1:
                    9d:30:55:06:83:eb:43:e9:c5:48:0c:5b:34:89:14:
                    c8:51:f4:cd:12:52:a6:e9:a3:d2:26:bd:38:d0:c9:
                    57:cc:04:b8:29:e6:4e:59:eb:81:a8:11:05:f2:10:
                    3b:d9:3b:3a:61:41:7e:bc:91:55:91:6b:b7:cc:67:
                    0f:b5:8b:19:05:06:80:c7:9a:fb:f4:8f:c1:fe:64:
                    6e:6d:64:03:09:f5:30:db:8e:e5:c1:a9:32:5d:4b:
                    d4:21:6d:8f:01:4b:03:77:55:07:45:48:5a:95:38:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:55:95:DB:AD:BF:48:97:35:E9:FD:03:B8:FE:68:46:1C:C2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5c89f199-899f-3321-a466-c4daba7ff090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:43:35:00:91:f9:5e:bd:1b:8b:c7:f5:3e:d7:f4:0c:0f:a9:
         5e:f8:b5:aa:74:27:a8:e8:2d:1d:ea:3e:bd:ad:98:cc:ab:f1:
         ff:90:6e:30:93:9d:ef:2d:f3:ec:af:e7:84:37:35:31:2e:10:
         be:07:d7:0f:00:00:02:db:63:a2:2e:4e:6c:97:48:70:64:98:
         2a:f0:4c:2c:0c:3b:6b:5e:01:09:89:fb:a3:c3:d0:c4:72:5a:
         b2:e0:09:d5:13:49:83:9e:2c:dd:16:6a:37:11:3c:09:5d:46:
         1b:5c:09:48:32:e9:cd:c7:0c:f9:bf:fb:73:a0:bc:af:58:a1:
         22:70:31:09:9c:ce:c5:18:41:f5:69:eb:2a:b5:eb:55:77:5e:
         31:c5:6f:a5:cc:3e:10:85:69:a2:b2:62:b8:ee:d6:9b:3e:d7:
         b9:f3:43:20:5f:a2:ae:ab:af:b4:cd:24:9e:0b:a1:66:77:e4:
         dc:b8:43:17:96:1a:2c:87:6c:85:48:15:bd:22:bc:bb:c7:6f:
         3d:4e:c6:98:48:ac:69:6a:3f:53:0e:21:53:79:86:6c:1b:0a:
         0a:cb:7c:c8:6a:28:1c:f6:b0:34:53:2e:49:d1:da:e8:c6:12:
         25:0c:0e:f9:38:4d:04:91:2e:7b:a7:00:bc:62:d4:45:30:b4:
         45:cc:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org