Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa
File:                     6d14574e-b5d2-3a05-b121-6afafcc71131.roa (raw, json)
Hash identifier:          2BRAlKBv7ifdQ3OQxqL0BMV/2VVhAcSKgMTXcq8oZFw=
Subject key identifier:   BD:1D:82:FF:58:9A:12:D2:2F:A1:55:EF:3A:DC:34:D7:92:F7:1C:66
Certificate issuer:       /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial:       010D0C9F43285845777DE30E7B36ACD3D55624E0
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        130.50.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e3:0e:7b:36:ac:d3:d5:56:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=142fff1e-4d11-4473-a761-02d31ebc85af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:3e:71:76:5a:41:15:3e:87:7a:19:97:a5:
                    ce:4e:ac:5c:9e:0d:07:87:46:98:e6:ed:37:dc:c9:
                    a8:01:c6:e6:8d:f5:ba:e7:e1:0e:a0:7a:08:65:63:
                    aa:d7:42:fa:9a:23:2e:21:48:00:de:5c:82:fb:4f:
                    37:2e:15:77:db:84:ce:a7:bb:48:5c:44:1c:98:93:
                    c9:d6:84:58:33:0c:f6:fe:d6:a3:b1:60:cd:35:56:
                    29:62:5c:d1:82:3f:06:59:0c:1f:ea:91:d1:41:1b:
                    08:d2:37:69:4d:cf:08:4c:51:cc:7e:ea:53:4b:dd:
                    25:7d:0b:4c:e2:72:c0:45:0a:c4:04:19:ab:ba:f3:
                    f1:a7:76:36:22:6c:eb:d1:c8:6f:9d:0d:29:52:ba:
                    26:ad:40:8f:83:72:13:91:bc:66:09:f0:0b:97:20:
                    b1:7a:26:32:45:3a:4a:77:ce:8c:34:7b:3c:f3:e2:
                    91:46:50:31:55:f1:54:bc:c8:19:06:a8:4d:51:bd:
                    59:a4:91:a5:89:6c:80:75:e6:75:58:44:d4:65:38:
                    41:34:07:50:4d:8f:0f:88:06:2f:e4:6a:26:e7:0b:
                    98:bd:88:6e:f7:20:16:cf:b6:ee:c5:92:c0:7f:78:
                    8d:c3:92:c5:eb:e2:1e:57:1a:bc:2f:d8:01:45:e4:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:82:FF:58:9A:12:D2:2F:A1:55:EF:3A:DC:34:D7:92:F7:1C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/6d14574e-b5d2-3a05-b121-6afafcc71131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl

            X509v3 Authority Key Identifier:
                keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.50.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:db:b8:21:fc:34:bc:af:04:d7:b4:c0:b1:b4:70:de:a4:e1:
         01:b2:49:31:6c:91:b0:d8:5d:83:a9:1a:b9:5d:90:55:25:be:
         5d:1e:b6:08:92:f1:8b:13:aa:50:8b:26:7e:32:c8:cb:f4:9b:
         b5:bf:e1:cc:69:72:57:1b:d0:bb:6d:f5:03:bc:e3:30:02:18:
         4c:e5:f0:b7:c5:49:a1:ca:6c:33:a7:64:4c:3a:80:1a:ba:33:
         92:a5:9c:e7:ce:89:e7:83:28:f0:c2:32:c3:11:49:7a:50:7e:
         03:6d:f4:e6:7d:8b:ce:10:1d:44:6f:b0:e5:44:c2:18:d6:dc:
         ce:67:3d:aa:53:fa:dd:6d:b7:34:4d:f0:bc:22:f0:08:92:60:
         5d:c8:1e:d5:66:26:2d:bb:34:44:e6:2f:71:a4:32:18:07:df:
         b1:2d:5a:90:e1:ae:ff:75:1d:7d:e6:02:05:a0:9c:f4:43:7f:
         57:aa:7b:82:c5:a7:7b:38:bd:c0:b0:7b:4e:3b:47:5e:57:da:
         53:e5:fe:d8:5c:08:3f:93:a5:c6:22:b5:18:2e:d5:7d:47:93:
         b9:8a:4c:de:64:8a:39:3b:be:a3:de:74:52:35:28:61:15:47:
         7b:bd:e2:6f:21:2d:8f:0e:39:91:85:68:cc:39:e9:ed:70:3c:
         8d:03:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:47 2024 by rpki-client on console-ams.rpki-client.org