Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa
File:                     22f37b24-db80-36de-a961-616bf07a5ed9.roa (raw, json)
Hash identifier:          01nixKGeoCI9ntKadSxFgbgoC7Zj9iLVkwocnrVv16o=
Subject key identifier:   9B:21:24:20:7E:E0:D9:C4:A2:48:5D:C6:F3:1E:53:07:70:45:23:69
Certificate issuer:       /CN=ef44742e-e289-4929-aa2c-7657c06d160d
Certificate serial:       010D0C9F43285845D5B702F58D239438C4409200
Authority key identifier: 89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa
Signing time:             Sat 11 May 2024 07:02:00 +0000
ROA not before:           Sat 11 May 2024 07:02:00 +0000
ROA not after:            Fri 09 Aug 2024 07:02:00 +0000
asID:                     400645
IP address blocks:        130.250.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:b7:02:f5:8d:23:94:38:c4:40:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef44742e-e289-4929-aa2c-7657c06d160d
        Validity
            Not Before: May 11 07:02:00 2024 GMT
            Not After : Aug  9 07:02:00 2024 GMT
        Subject: CN=8784813f-3a5e-449a-a8b7-7763fa409742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:26:d7:63:18:9b:66:06:89:7e:ec:a8:38:2f:
                    c1:cd:90:49:19:8d:66:37:a8:b7:22:71:c8:5d:36:
                    90:e9:d5:ab:cf:52:f7:94:3b:87:fb:ff:cc:fa:70:
                    07:4b:4c:96:73:86:ed:88:5c:23:88:5b:2e:fb:e5:
                    9a:84:02:13:76:2d:25:fd:7f:28:5c:64:ef:c6:03:
                    4d:57:23:9e:12:52:f2:94:fc:81:0d:40:27:36:a7:
                    eb:d8:02:65:f9:6d:c9:9f:34:37:01:96:13:fe:b0:
                    ba:c7:94:c8:f8:48:cd:08:c9:c7:34:2d:e7:d2:a0:
                    92:ed:63:b1:2a:73:88:89:b3:4f:6b:ca:fb:21:e4:
                    5b:f9:f3:34:9e:ce:a9:bb:46:01:96:88:b9:94:36:
                    a2:aa:7e:56:63:81:e1:c3:bc:1b:2e:1c:97:16:d8:
                    1a:10:0c:cd:e2:03:bd:7c:ae:f1:e3:cd:3b:20:76:
                    59:92:5c:f6:09:1d:13:4b:53:ff:09:21:f8:cb:cc:
                    d4:39:8c:8e:ec:88:78:b4:4b:26:fb:3c:c0:86:9a:
                    0c:9f:54:3d:e6:54:e7:a9:fc:c3:ad:14:55:dc:0d:
                    98:32:f6:85:4b:e4:3b:dc:85:b8:44:69:65:af:cc:
                    fe:54:a9:a0:ba:89:40:82:a6:13:3c:1e:4f:15:d4:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:24:20:7E:E0:D9:C4:A2:48:5D:C6:F3:1E:53:07:70:45:23:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.crl

            X509v3 Authority Key Identifier:
                keyid:89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:73:ed:ca:fb:97:c3:57:87:9a:88:a9:bd:66:8f:6c:ea:a0:
         60:4c:4a:92:57:36:1d:9f:6e:12:cb:49:b2:2c:c7:d0:f1:fb:
         b6:30:26:50:d5:e4:cb:f6:a0:c5:27:7e:8b:d3:fd:8a:58:30:
         f1:8e:76:21:bc:6d:61:f5:96:de:d9:1d:1f:53:f7:29:3d:66:
         52:e0:6a:12:b7:af:8f:44:50:c9:dc:13:cd:75:2c:a7:db:2d:
         a5:f3:90:83:61:af:c5:96:e7:72:2a:f8:c0:09:27:a4:1c:d0:
         4d:d9:68:8c:eb:08:20:e6:9c:05:79:fd:cb:c0:e4:6d:53:ff:
         02:d0:f8:b1:70:59:86:0a:cd:b6:ee:84:fc:cd:d3:99:f1:ec:
         01:7a:98:b7:c5:99:78:fa:3a:ec:72:95:33:1e:3e:79:2a:cd:
         c0:cf:eb:82:66:00:75:16:bf:05:a4:47:9d:9f:82:f8:68:3e:
         c0:7c:9f:0b:29:f2:7b:67:5a:c8:96:51:21:89:13:f7:96:03:
         79:30:2d:d7:bc:2b:00:a6:a4:2b:2b:4f:0d:7d:4e:2e:d2:77:
         c9:1e:85:39:4e:de:00:2f:ef:c1:4c:a8:06:79:fa:33:66:91:
         ba:8e:68:08:81:61:62:c9:85:13:72:91:91:86:29:76:8a:f1:
         5e:50:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 16:07:32 2024 by rpki-client on console-fra.rpki-client.org