Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/104fa61e-cbf7-3c7e-b1fd-4f6f78834e15.roa
File:                     104fa61e-cbf7-3c7e-b1fd-4f6f78834e15.roa (raw, json)
Hash identifier:          48WOCeopxVI1Z70E3D2OaMWciCVl+aBCsGaLprF4iD4=
Subject key identifier:   8D:9B:56:2E:2B:6C:E3:05:60:66:DC:D2:8E:DE:B5:FF:26:DA:3E:E3
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E357B66
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/104fa61e-cbf7-3c7e-b1fd-4f6f78834e15.roa
Signing time:             Tue 14 Jul 2020 16:43:14 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Fri 31 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        198.200.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:35:7b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May 31 04:00:00 2030 GMT
        Subject: CN=22304e05-9586-471f-8813-6f525191f2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:ab:82:6a:d8:b0:b8:a5:b9:d7:bc:be:f2:
                    c5:69:1d:f5:5e:b1:62:ec:90:2f:80:8e:d7:d9:9d:
                    60:94:ef:fa:b8:c1:17:07:41:b5:69:0f:08:a0:56:
                    5a:98:e3:2e:11:ee:97:be:60:d8:67:94:dd:cc:20:
                    93:c5:ef:f4:6a:1a:d4:5c:9c:7e:57:0d:cc:66:e0:
                    7f:74:e6:bf:84:c8:46:8a:b6:ca:93:15:33:b6:43:
                    3f:1c:73:d1:4c:5c:1d:91:04:75:07:0c:cf:88:d5:
                    89:9e:e0:85:d0:82:a4:50:a1:62:07:78:c0:9d:07:
                    7d:80:df:a9:a8:f2:30:18:60:49:bb:6b:ae:a7:ee:
                    16:20:ee:ae:ea:66:22:b1:af:19:d7:2d:2e:9d:64:
                    a3:3f:6e:2b:c5:18:d3:c3:90:00:00:1c:a2:fa:5d:
                    08:f6:97:e4:70:77:07:fb:32:88:06:7a:14:36:34:
                    48:ed:dd:96:84:12:63:1a:c1:02:b0:1e:c7:f9:14:
                    a8:5f:55:99:d6:34:93:d0:da:6d:d9:b3:f1:49:8d:
                    43:25:ef:b3:2b:53:2b:56:12:c2:53:70:d1:47:a2:
                    e6:18:5e:3b:4d:82:75:19:30:87:24:1d:27:bf:58:
                    1f:aa:3d:00:3e:7f:19:cb:2b:20:fc:95:42:40:73:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:56:2E:2B:6C:E3:05:60:66:DC:D2:8E:DE:B5:FF:26:DA:3E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/104fa61e-cbf7-3c7e-b1fd-4f6f78834e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:4d:cd:04:1c:0d:1c:36:08:ca:d3:ed:75:d8:8a:c7:6d:
         5d:81:85:ce:a8:fd:63:b3:a5:67:b9:ac:0e:d3:d2:9f:e1:f2:
         a8:64:a1:55:d6:e3:da:58:f2:96:3c:30:98:a8:42:d2:b5:d7:
         4a:14:b2:6e:4f:52:ab:5e:07:f2:3f:9a:59:6e:0f:50:cf:9b:
         ea:73:e1:06:2d:ff:11:6c:e8:8f:1f:d1:31:bc:89:f0:b0:70:
         c1:c7:37:29:ef:45:8d:16:e7:ad:d7:36:76:7b:9d:8a:d7:20:
         89:99:46:cb:3e:b8:4b:73:fe:d7:fc:04:b8:a2:f2:c1:dd:da:
         e5:7c:ec:10:34:9e:59:19:5c:29:c7:c6:ba:94:ac:e6:81:36:
         43:16:dd:4c:94:9a:d0:ca:70:95:b4:fe:08:7b:8d:fd:ef:56:
         50:ac:98:35:93:65:99:8d:a4:ea:58:aa:3f:b6:06:bd:7c:07:
         67:3b:90:f6:d2:7b:d5:8d:7a:13:34:48:ee:b0:e4:6c:b1:68:
         41:a3:3f:d1:14:c5:33:70:48:15:33:07:8a:2e:c7:fd:5b:5b:
         e8:cd:65:ba:b8:25:89:7f:e6:24:b3:cc:26:6b:6b:3f:84:03:
         ab:92:de:e7:47:26:bd:ca:f7:dc:60:71:a8:46:60:6e:ef:90:
         87:c5:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:37:30 2024 by rpki-client on console-ams.rpki-client.org