Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6db880a3-1df6-3a63-af4c-c4bf59cce255.roa
File:                     6db880a3-1df6-3a63-af4c-c4bf59cce255.roa (raw, json)
Hash identifier:          ZJhMlDRAlcS4qXrUU4yKJq7p1WTjn+FdXVEsAZ+J+jo=
Subject key identifier:   A0:FD:92:10:48:6A:0F:CD:6F:78:A8:E2:EA:3F:E3:ED:10:DC:07:4B
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F43285847A3B605E102E3E45DF68E2480
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6db880a3-1df6-3a63-af4c-c4bf59cce255.roa
Signing time:             Wed 23 Oct 2024 18:43:28 +0000
ROA not before:           Wed 23 Oct 2024 18:43:28 +0000
ROA not after:            Tue 21 Jan 2025 19:43:28 +0000
asID:                     63334
IP address blocks:        130.51.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:b6:05:e1:02:e3:e4:5d:f6:8e:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: Oct 23 18:43:28 2024 GMT
            Not After : Jan 21 19:43:28 2025 GMT
        Subject: CN=94fa6ef9-1bc5-4ba0-b9ff-bdf4db59a69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:35:bb:38:15:43:0d:61:10:01:e9:14:52:
                    7a:30:1d:23:ab:cc:b1:3b:71:95:fd:a1:dd:e3:75:
                    89:79:e3:71:8e:18:a6:4c:16:b1:ce:d6:6c:e8:4a:
                    41:db:2e:b3:80:e0:24:75:e8:61:85:9a:26:67:e6:
                    fd:d7:2a:ac:b9:a4:a3:fe:44:6e:f1:75:af:d6:4e:
                    ce:39:c0:32:fb:fd:ec:8a:88:79:4c:d5:6b:e3:6a:
                    d0:a2:50:7a:c6:cb:e6:4f:3f:f2:3d:7a:17:2a:ce:
                    45:b7:4c:60:29:1b:87:8f:03:b5:99:fa:6e:ea:28:
                    42:d7:d0:90:3c:3e:d3:77:98:e5:1d:60:c1:47:7d:
                    7e:70:02:51:6c:6e:d1:f3:f2:53:78:66:2d:51:1e:
                    a7:7d:fa:46:89:c6:94:8e:62:f8:d2:0c:57:49:a7:
                    10:c1:d8:9c:9a:db:f5:7c:02:d5:ff:8e:41:1e:aa:
                    f1:87:b3:f8:7f:35:ce:57:ce:6e:ce:3d:e7:75:f7:
                    b2:1d:6b:08:69:90:5e:09:92:19:99:99:91:29:61:
                    34:a7:45:6b:36:8b:3f:9b:3d:cb:ef:6c:c6:2f:e2:
                    f4:47:0d:6f:7b:ef:dc:29:88:99:bf:cc:35:da:98:
                    f4:06:41:bc:f6:66:2e:8b:36:43:c0:1b:7d:80:89:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:92:10:48:6A:0F:CD:6F:78:A8:E2:EA:3F:E3:ED:10:DC:07:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/6db880a3-1df6-3a63-af4c-c4bf59cce255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:52:6d:1d:0e:12:05:08:9f:9d:28:c5:68:dc:3b:4f:fe:02:
         a8:af:e5:ae:48:b9:26:bb:d0:3e:b0:01:99:9b:87:dd:d5:72:
         23:ab:9b:9d:03:96:36:2a:75:41:cf:7e:d8:9a:b4:ee:ab:fd:
         6b:e6:f6:f0:82:9b:19:8b:c8:09:82:40:f3:4f:9d:a2:87:22:
         90:9e:4a:b5:c3:c2:30:4d:d6:67:f8:ad:eb:78:b3:a2:bd:df:
         04:64:d6:e6:37:3f:92:24:ae:ed:61:ae:4d:15:c1:20:25:3f:
         04:a9:da:7a:33:18:4e:d8:30:44:e6:5d:9f:27:21:d4:bd:9f:
         6f:20:d0:ec:c1:32:c4:a2:e6:24:a2:a4:27:a9:83:0c:c5:b1:
         8e:d5:40:96:76:fd:91:28:29:62:7b:f1:e1:4e:f7:3f:5f:e5:
         60:fd:5a:c6:8e:6a:c7:fe:f5:aa:9b:d5:44:42:79:8e:ee:cf:
         f4:03:9c:49:ed:ff:10:ef:3d:ed:5a:56:fc:08:95:63:33:3c:
         29:99:10:c4:7a:b2:9c:c8:7b:c4:43:49:8f:e4:cc:b3:03:90:
         36:f8:9a:83:97:35:06:bd:4f:65:14:50:f3:5c:70:2a:c3:a8:
         f9:bf:3e:0a:e5:b3:5e:4b:ca:2c:0e:6f:0a:86:17:c4:54:0f:
         99:7a:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:40 2024 by rpki-client on console-ams.rpki-client.org