Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa
File:                     40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa (raw, json)
Hash identifier:          2a6TcsdX9asnV2L+/Oolwwbh6n9V2/rgHb8m58C4+Rw=
Subject key identifier:   61:C0:3C:68:0B:55:08:67:5B:02:EF:FC:4A:D0:C3:83:40:B5:74:4C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584598FDFA42E6E8F08D6FCABF00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        130.137.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:fa:42:e6:e8:f0:8d:6f:ca:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=352aed3d-df6a-4839-86a3-1637aeb4a650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:dd:15:58:7d:a5:8b:7a:f2:03:be:32:10:
                    96:ae:2f:e8:81:e4:f5:01:05:31:ad:23:71:52:9f:
                    1e:48:d2:d7:98:15:c7:bb:10:65:60:c1:0b:6f:45:
                    32:5d:a0:9e:2c:9e:f0:aa:f8:80:01:6e:41:65:9c:
                    57:76:de:53:2c:f4:70:6c:ec:95:ac:89:aa:33:5b:
                    80:cf:48:d7:e6:3d:d3:83:61:80:bb:26:66:77:50:
                    55:78:70:d9:b2:46:5e:a8:5d:a3:5c:dc:30:7c:6a:
                    80:4e:b0:41:39:e7:6b:c2:7f:69:26:24:3e:7f:ff:
                    f6:01:43:27:d1:a4:2d:6e:53:52:62:34:a8:bf:d9:
                    38:42:cf:87:ea:c9:a9:af:18:e3:58:bb:43:58:5f:
                    1b:91:26:1a:dc:8c:24:19:2b:89:1f:0c:fd:f8:3a:
                    8a:76:47:50:a8:2e:09:d7:f3:1d:c2:25:d7:cf:bd:
                    b4:dc:04:32:80:a3:e6:bb:71:0f:2e:d7:46:ec:c6:
                    88:8a:1c:59:14:2f:d0:49:87:e8:46:b5:10:38:f0:
                    70:b4:53:18:0a:1b:fa:71:a4:33:ee:6b:c5:b5:58:
                    14:7e:6b:bc:b1:fb:e3:7d:a2:08:2d:f7:78:fc:58:
                    78:57:c2:c2:45:ea:8e:c5:30:54:e9:68:60:47:a1:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:3C:68:0B:55:08:67:5B:02:EF:FC:4A:D0:C3:83:40:B5:74:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:88:db:b6:93:5e:71:72:a9:ab:c1:e0:12:74:94:8e:4e:8e:
         82:62:75:ea:32:dd:74:d0:01:09:fe:d5:9e:3f:0b:28:29:c3:
         4a:a5:15:91:02:62:fb:84:c6:18:d2:1a:50:5a:c5:8c:93:80:
         67:c9:3e:fb:f4:e4:5d:3b:22:82:cd:4e:ab:90:09:bd:2b:a1:
         85:dd:a3:ad:c9:f6:b1:01:ee:a8:e1:41:fd:47:3c:6f:d1:a3:
         4a:ff:4c:9c:e0:85:bb:e3:17:5d:36:88:f0:21:7a:5a:e5:bd:
         65:b2:87:6d:1d:fc:1c:96:28:ff:f0:fb:d7:41:88:13:8c:89:
         fb:23:b0:67:c0:bc:4e:ef:f3:51:73:a5:52:be:c0:18:84:13:
         7a:b0:38:ca:d3:03:5a:62:e5:03:d1:02:6a:f9:c7:3e:77:12:
         a2:09:d5:86:74:7a:90:f5:b3:96:aa:17:13:a4:92:32:16:fb:
         8c:8f:9d:e4:73:6b:60:f4:f0:3e:0f:4c:8b:c0:2f:b1:ee:72:
         75:7e:c4:c0:4e:45:be:fb:42:ac:9d:73:b0:48:10:9c:b1:79:
         86:02:42:e9:b8:0f:55:bf:82:6c:cc:3b:bd:68:dd:fc:6a:ba:
         0b:02:fe:99:2a:f0:8a:25:9f:ed:24:a3:e1:81:7f:51:9f:99:
         8d:46:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:02:59 2024 by rpki-client on console-fra.rpki-client.org