Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa
File:                     003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa (raw, json)
Hash identifier:          VGJajcMAfu1x5AsH365rnUCuH3xmWeQpjTUZKdLuwCA=
Subject key identifier:   F8:07:DB:AB:8E:3B:B2:D0:EA:80:88:A1:53:8A:9E:2A:DE:24:25:BE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845698867D4B8D6091B6E514B40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        130.137.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:67:d4:b8:d6:09:1b:6e:51:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=93120134-67b1-4d09-9fd2-3ceb3f56d971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:e6:07:4d:dc:52:31:2f:2b:3b:df:96:12:
                    83:dd:fd:dc:4d:83:28:b0:bd:c3:ee:46:83:6c:4a:
                    d6:d8:cb:f2:5f:9d:ce:e3:c0:38:f6:6a:5e:e9:8f:
                    6e:5e:11:5b:33:08:69:d6:97:03:9f:e5:79:e8:4f:
                    5e:4e:3e:6d:5a:cb:cf:d4:c1:e9:c4:7b:40:c5:9c:
                    81:7c:ce:54:7b:0e:9f:21:cd:8f:e7:84:8e:46:39:
                    cd:a1:6d:ea:d3:7e:31:9f:63:23:41:bb:9f:ae:5e:
                    15:cb:ac:70:50:f2:ee:c4:93:93:ed:e4:dd:bb:fa:
                    35:a4:a5:02:3e:e1:d1:ec:fb:94:80:ac:3f:f4:4d:
                    96:7a:41:bd:7f:82:bd:42:39:f3:cb:03:b2:66:26:
                    8f:00:cc:7a:18:90:a2:d3:79:de:f4:6f:e5:18:40:
                    56:de:f4:0d:07:1e:29:a1:fe:58:d6:2c:93:b6:db:
                    c3:f3:6b:86:93:bf:06:92:b1:92:ea:47:e0:a7:bf:
                    2c:af:c0:36:b1:2b:b1:f4:f4:80:03:6f:21:c0:64:
                    f6:5c:01:3d:8e:e2:a9:8a:24:74:72:ab:bd:e1:89:
                    c3:66:f9:1a:60:83:3b:7c:fc:ff:04:65:a9:6b:fc:
                    65:c0:c0:b2:6f:94:75:80:e6:28:70:aa:75:11:eb:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:07:DB:AB:8E:3B:B2:D0:EA:80:88:A1:53:8A:9E:2A:DE:24:25:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/003e1f7c-b17e-3677-ae3f-bd43fdcc7822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:9d:b3:90:44:12:d1:84:a4:e2:a8:e3:8d:a4:98:63:6c:14:
         93:bb:19:bc:46:33:b1:a8:f8:63:aa:32:13:02:3f:8d:25:a9:
         f5:b1:8f:51:55:70:8e:59:e6:6d:20:2f:39:5c:7b:17:60:95:
         2c:2c:e0:df:d9:d1:30:64:7f:29:57:8b:4a:13:88:d1:4c:f3:
         cc:f1:d8:67:7a:6c:d9:e3:66:4d:90:a4:19:02:c1:4c:63:f0:
         77:f1:33:45:cc:d8:2a:14:a5:b6:6a:22:ae:b5:0d:08:ac:c3:
         e9:66:27:bb:fa:dc:b3:ad:bd:f1:63:31:02:6e:aa:49:06:5e:
         12:2a:52:98:f0:8b:5a:2a:07:8a:e9:a5:2b:07:eb:00:25:06:
         cb:5b:3e:d0:2f:ce:70:bf:76:1a:c9:3f:b7:9f:69:ac:19:29:
         14:bd:e1:8f:36:5c:98:62:46:d2:79:6e:b0:f6:b4:23:21:c3:
         9f:c3:5c:11:48:35:c7:78:b0:ff:94:f9:e2:59:9b:17:e7:31:
         fb:63:b0:12:ab:aa:8b:5e:41:bb:f3:f1:83:b8:ef:9a:d1:12:
         c1:3b:c3:02:66:38:9f:d7:fa:6d:aa:42:31:74:76:c9:d0:c7:
         d8:1e:32:96:ca:fe:a1:60:a2:2d:9c:50:a7:70:2c:12:73:04:
         60:c7:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:46:56 2024 by rpki-client on console-fra.rpki-client.org