Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ad3526db-4937-3761-af02-86ca3b102f05.roa
File:                     ad3526db-4937-3761-af02-86ca3b102f05.roa (raw, json)
Hash identifier:          LqOgNiTEmYfGSLAFMpplT2QoSGX9R94mvN3x2yR8/CY=
Subject key identifier:   BE:06:32:37:E5:8C:81:6F:56:13:95:D4:E7:C8:AD:9D:6B:AA:05:19
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285844FD63E3FCFD8A44E83EDBB200
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ad3526db-4937-3761-af02-86ca3b102f05.roa
Signing time:             Fri 23 Feb 2024 19:19:55 +0000
ROA not before:           Fri 23 Feb 2024 19:19:55 +0000
ROA not after:            Thu 23 May 2024 18:19:55 +0000
asID:                     2914
IP address blocks:        130.254.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fd:63:e3:fc:fd:8a:44:e8:3e:db:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Feb 23 19:19:55 2024 GMT
            Not After : May 23 18:19:55 2024 GMT
        Subject: CN=908c92d5-b953-48a6-b12a-78e594de330c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:8a:9d:ec:8d:0c:25:f9:29:cf:fa:62:3f:
                    a4:8b:67:34:b5:cc:53:55:f0:52:a7:3e:3d:7c:2e:
                    30:f6:7b:d7:af:ff:6b:dc:81:d0:bf:c7:c7:0e:16:
                    56:6d:b4:86:f8:2e:32:12:b7:e7:3f:f0:ea:f6:5c:
                    7f:94:7a:2c:3c:92:8f:05:68:83:eb:ec:6a:dc:8f:
                    a8:cb:93:0d:1a:36:f2:fa:f1:0d:8d:8d:0f:82:d5:
                    b0:b8:54:1b:53:cc:7e:4c:a0:3c:59:56:15:80:0c:
                    30:63:5c:c8:3f:4c:16:a2:68:bd:d5:7b:46:18:bb:
                    37:ee:2a:27:ba:1d:2c:7f:c4:69:22:6b:6c:ff:30:
                    69:d7:a3:ea:00:2c:4f:b4:17:35:dc:35:53:86:bf:
                    05:ef:56:48:8b:26:c9:02:4c:f4:54:67:66:20:45:
                    1a:88:7a:07:72:37:7c:80:3a:5b:da:86:a0:e8:56:
                    3a:b1:77:2c:0d:6e:3e:c9:ed:65:ba:fa:4e:99:ab:
                    a6:ad:e5:f5:e0:d4:fc:c4:5c:f9:82:bd:48:d4:c8:
                    83:6d:8a:85:fb:3b:94:ce:70:b6:6b:83:8c:81:96:
                    0d:c7:7a:61:03:bd:52:65:75:38:59:27:aa:1d:91:
                    7e:67:e3:ee:f8:e4:19:72:7a:e4:58:d0:6f:9f:09:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:32:37:E5:8C:81:6F:56:13:95:D4:E7:C8:AD:9D:6B:AA:05:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ad3526db-4937-3761-af02-86ca3b102f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:e3:d5:6b:fa:45:11:b2:70:d3:82:3b:a8:bc:da:56:f8:
         70:91:76:30:d8:d2:e9:67:d0:a0:7d:bd:b8:9b:bc:ae:af:b1:
         ae:7d:44:c9:c3:62:1d:27:b2:44:ac:5c:1c:d2:91:26:ec:cd:
         a2:85:f0:57:f9:b3:5c:22:0e:f9:4f:05:03:54:d5:16:33:e7:
         3f:69:d1:13:b9:4f:67:f1:af:c5:6e:09:0b:19:ea:8b:97:f0:
         6a:cb:c6:72:b1:fc:a5:83:3b:63:5f:dd:86:09:98:49:60:09:
         8b:6e:a6:bc:73:00:7f:84:dc:a7:e6:aa:09:c8:1b:16:fd:e2:
         df:ef:1b:40:5f:5c:c8:f7:b1:51:e5:cb:76:dd:1c:95:62:6b:
         a7:0a:50:df:6b:ee:8c:5f:10:79:97:aa:a6:78:10:43:30:05:
         d4:ac:03:93:1a:98:e6:9b:fb:0b:6a:ac:8f:20:fe:cb:ec:a3:
         81:84:cc:5f:6e:69:dd:f3:06:7d:5c:e9:30:66:04:15:0c:2d:
         18:34:56:8c:24:6a:2f:03:0a:00:e0:8a:c1:c9:75:de:9e:2d:
         08:cb:54:dc:36:1c:88:5d:fe:b6:f0:89:c2:21:0d:c5:c4:4e:
         0c:f1:38:4b:87:f6:5b:1b:9a:f8:79:57:23:e8:8f:de:2b:7d:
         88:90:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:35:22 2024 by rpki-client on console-fra.rpki-client.org