Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa
File:                     0ef970e6-d4e8-3790-901d-8464307c9a2e.roa (raw, json)
Hash identifier:          UKc7cDyxx04TQB2nsbeX1niTTZejEEDVVt8GSnRG3xA=
Subject key identifier:   97:CF:5D:97:8B:A2:36:D8:27:C7:90:BD:84:15:78:FB:73:3A:11:D5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475BDB68F23A7BF62CD6359F80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     8987
IP address blocks:        130.137.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:68:f2:3a:7b:f6:2c:d6:35:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=a1cefcc4-bac1-41e4-9ea9-6b533837be3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:53:3f:bb:59:01:d1:bf:d7:de:1a:13:0f:
                    49:a4:bb:a4:97:16:37:1c:e8:bc:4e:a7:d6:6e:95:
                    0e:39:10:4c:91:45:48:93:67:28:0a:27:09:6f:5a:
                    30:7c:e4:ce:83:14:9a:68:72:c0:d5:7e:8c:d8:84:
                    b7:69:2b:d3:60:c7:94:17:b0:85:42:8e:63:58:80:
                    52:d6:75:45:da:25:f0:60:ca:3e:08:54:0d:20:78:
                    cc:30:43:14:52:63:12:1f:ba:a5:5b:30:2b:de:22:
                    84:a3:d1:ef:82:ea:4b:0d:12:10:4b:2c:43:f7:b3:
                    6a:9a:06:7a:1b:a7:76:a6:61:84:a3:02:e0:6e:35:
                    a0:58:78:aa:c7:63:c9:76:3d:30:9a:b4:39:61:a7:
                    06:2b:1e:f7:b0:36:0a:c0:b5:b3:17:84:e0:b3:7b:
                    5d:65:49:66:be:ab:72:ab:25:ed:65:b8:1b:f3:37:
                    08:4a:91:b3:20:bd:9a:b6:8c:61:97:10:06:41:f9:
                    09:ae:b6:73:27:43:8f:50:5b:fa:14:ba:87:f7:d6:
                    c9:4e:86:eb:09:55:ff:46:82:9d:8e:ca:2a:d4:28:
                    0a:7c:b1:07:69:be:74:f5:91:e4:fe:e3:4b:8b:83:
                    08:4b:f1:9b:0c:dc:58:17:d7:4d:a3:5e:1d:de:b2:
                    5d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CF:5D:97:8B:A2:36:D8:27:C7:90:BD:84:15:78:FB:73:3A:11:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:e0:61:f7:17:78:a1:3c:e3:f2:f4:c2:40:6c:fb:32:8d:
         19:8f:cf:d1:6c:23:5c:a3:a9:2e:18:57:a3:c3:72:4c:81:fe:
         18:13:9b:a6:6a:93:67:e9:3a:11:85:27:ab:4f:0c:fb:cd:7b:
         8b:0a:66:ab:ba:5e:e1:6b:7f:a2:9b:82:b8:f5:68:bb:b7:17:
         11:7b:c1:db:81:70:2d:c0:4f:04:9a:67:aa:64:b3:54:71:de:
         e0:b8:f4:df:94:51:cf:2e:ec:92:aa:6b:7b:0b:e6:93:eb:d1:
         45:1f:33:7d:68:80:0e:dd:68:c9:93:85:c0:ee:e1:7e:dd:2c:
         cd:c1:aa:db:29:5c:c8:8a:6c:bf:87:75:6b:09:aa:bd:b2:74:
         72:8f:3a:32:c4:b1:e4:2c:48:e6:53:ce:30:86:a2:ff:82:81:
         96:4c:d1:20:02:85:48:3a:ed:c1:6b:09:16:66:04:2d:09:4c:
         00:9f:d7:0a:31:a5:3a:4c:73:e9:92:cc:81:12:42:3e:c1:55:
         5b:25:34:ed:32:6a:c9:0c:26:58:a9:28:38:bf:33:86:7d:93:
         67:89:53:2b:22:c0:15:df:c3:8b:b1:ab:34:8f:3c:49:48:14:
         00:d9:6e:4b:7e:da:c2:94:51:45:5b:43:a3:40:92:49:18:90:
         90:06:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:21 2024 by rpki-client on console-ams.rpki-client.org