Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
File:                     6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa (raw, json)
Hash identifier:          y3A78JqRd2Fr9VU1RcBmnqClED0Aznk5pZKhL7Z1ZIA=
Subject key identifier:   86:40:E6:33:E1:A1:F3:42:47:1D:C0:A2:3C:DA:83:6A:C1:1E:88:37
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F43285847C1DF575B37A592BDC9E4BF5B
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     6859
IP address blocks:        130.85.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:57:5b:37:a5:92:bd:c9:e4:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=504dc179-7535-40bc-b643-19dbd6a5b9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:0f:29:b2:0e:61:7a:06:2d:8d:aa:69:92:
                    06:a5:10:b1:d4:ab:e6:e3:8f:0e:6f:7e:5d:73:81:
                    72:32:28:43:bd:75:77:92:c8:65:63:43:5e:a1:55:
                    f4:ad:57:4c:20:bb:69:93:d7:b7:ee:67:2b:13:c8:
                    78:34:0e:7a:9f:c5:65:ea:5d:f2:ad:e0:d6:c4:cf:
                    17:f4:04:4a:bf:55:ea:e5:52:a8:cb:e5:27:2a:19:
                    18:cf:78:5c:93:95:2a:f7:3d:52:c7:35:fb:42:97:
                    9c:01:9c:70:9e:af:bf:4c:e8:9f:20:21:9c:88:11:
                    57:8b:e2:64:ee:b4:a0:0d:ad:73:92:7c:1b:9f:aa:
                    d9:84:19:ec:b9:57:be:19:fb:e1:7d:9f:2e:86:c6:
                    2b:3a:bd:8f:f7:8f:d2:04:b6:19:dc:e9:f5:03:ca:
                    da:c5:20:92:36:fb:57:4f:76:6f:6a:dd:08:e4:48:
                    8d:1e:fc:b6:12:d7:de:8c:27:f3:da:ac:9b:7f:07:
                    6f:a6:78:30:96:87:75:4f:71:51:3f:0b:8d:23:31:
                    bb:63:ad:72:ca:92:86:50:a6:9c:4f:33:c6:7f:2f:
                    1a:cb:e3:36:b6:f1:5c:0c:4d:29:0a:35:1f:53:3d:
                    c0:c9:ec:46:d3:13:09:68:96:2f:bc:38:4b:7d:f8:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:40:E6:33:E1:A1:F3:42:47:1D:C0:A2:3C:DA:83:6A:C1:1E:88:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/6199e1b0-8501-37ec-845d-ddb75ba6a0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:6b:98:d2:c2:52:06:b4:10:b9:4c:99:f4:45:0b:48:b3:
         06:a0:73:88:26:a0:ad:fc:ba:8f:0e:e0:80:46:20:06:a1:96:
         e4:76:a0:a2:43:69:4a:03:3d:e8:86:60:67:b9:21:e4:6e:bd:
         97:f3:12:cd:b2:91:6d:f6:2e:60:cb:75:88:fb:8b:61:49:fd:
         dc:ab:55:2c:56:ac:f7:e1:8e:0b:ad:00:16:fe:f6:fe:e0:f1:
         d2:b6:f3:35:49:70:f7:bd:7f:42:d8:ec:9e:3b:bd:8e:3d:b0:
         02:a8:77:13:44:b4:d8:5d:08:09:41:5f:dd:ef:ca:5f:9f:02:
         b9:7e:0f:75:68:a3:28:91:84:10:02:b0:ae:bc:3f:80:6e:14:
         db:b6:f9:f9:7e:49:5b:24:fe:04:4c:b0:a7:84:f7:f3:3b:95:
         77:00:0a:76:eb:84:c7:76:25:54:f4:61:3d:e4:94:f9:5c:8a:
         66:5a:94:49:fa:f5:c6:c2:1f:d3:af:96:7a:60:c1:d3:62:81:
         f8:4c:f5:97:9d:1d:9f:48:c2:3b:d9:03:fc:98:cd:da:eb:4d:
         44:67:c4:45:e3:92:66:e5:36:f3:08:9f:23:bf:8d:b2:dd:76:
         33:1e:83:c1:ac:50:94:a2:69:1f:72:54:e2:de:88:79:3a:b3:
         5a:69:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:28 2024 by rpki-client on console-fra.rpki-client.org