Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa
File:                     1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa (raw, json)
Hash identifier:          sxWyVTMhVLWk9z4pOjTxNPwsg7/ZGYcMLKjXDnk8Gx8=
Subject key identifier:   AB:40:11:40:91:39:1F:4E:BC:6C:13:7C:1A:77:DC:1C:86:87:F5:3C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858456988591EC1F3469A74A505C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        130.137.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:59:1e:c1:f3:46:9a:74:a5:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=ec9522d1-16d6-43f0-b91a-b8b04628bcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:22:9d:db:05:73:7f:61:34:05:a4:e3:31:
                    2a:b4:a1:24:cc:96:2b:14:af:96:74:46:c2:32:86:
                    67:d5:ea:11:76:ea:12:ed:fd:62:c3:12:bf:09:00:
                    a3:60:82:31:a1:f5:5a:e5:a2:b7:cf:94:84:09:93:
                    a7:fd:9a:b3:fc:35:7e:36:cf:0e:dc:ca:b6:5c:87:
                    d8:21:6a:c9:cc:90:9e:0e:c8:7d:0b:93:bf:2a:be:
                    6a:2f:80:e7:6d:1c:23:d0:59:10:f9:10:0b:85:a9:
                    94:3f:7b:71:0f:ff:9f:30:e4:75:54:85:cf:67:e6:
                    a9:f4:c8:04:b1:83:b7:14:85:47:17:f7:e5:df:6a:
                    2a:cb:f7:14:71:8d:0d:55:f4:e8:b9:73:50:75:50:
                    10:a1:16:fb:8d:c4:47:2d:03:cc:1b:15:e0:12:a6:
                    83:3d:40:0f:aa:4c:18:aa:bc:71:df:47:8d:51:9c:
                    2c:cd:a9:7a:44:f7:95:72:0d:46:cd:6c:11:64:76:
                    9b:bc:75:72:99:f8:d3:23:a0:82:31:fe:05:d4:e9:
                    6d:c0:23:84:87:0d:85:e4:e9:f2:5e:4e:89:10:0a:
                    6f:60:74:fe:01:82:73:99:b1:8d:e9:cd:bb:18:a5:
                    58:32:30:d6:32:63:2a:b5:79:ce:40:0f:1a:8f:ea:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:40:11:40:91:39:1F:4E:BC:6C:13:7C:1A:77:DC:1C:86:87:F5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1674ebfa-6ae6-3335-9ffe-d0f63ed26abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:dd:93:1c:1d:6b:04:39:64:67:dc:53:c2:30:9f:76:6b:
         5c:8f:0e:78:ab:40:54:fd:36:11:a3:15:6e:0a:de:37:e0:c8:
         e4:18:c7:cd:39:a2:98:c8:3a:33:97:12:4f:0d:c9:bc:18:a3:
         f9:3d:2f:80:f2:24:a8:ac:e4:46:9d:be:cb:f2:4b:63:3c:ff:
         7d:ca:54:80:20:a9:53:19:5d:5e:71:44:08:90:6e:b6:f9:9d:
         b8:3b:12:c3:04:8d:ec:be:9d:8e:6e:05:17:bb:b1:9a:1c:e3:
         c1:e8:da:78:52:b4:aa:69:dd:21:f1:cf:92:67:5e:dc:00:20:
         22:e3:da:39:91:65:8f:33:f9:e1:1d:a7:aa:65:25:02:9f:b1:
         0d:76:ab:c7:b6:4b:1c:30:e8:6a:f1:9d:e2:85:63:b1:d5:2b:
         85:a7:cf:e8:12:7f:e6:16:b1:ad:db:76:46:37:50:9f:e5:e1:
         6f:e4:d3:83:24:07:54:b6:42:1a:e3:66:0f:37:13:15:09:1f:
         35:da:21:be:6a:34:fb:b2:6c:9c:d2:a9:f8:19:75:fa:73:54:
         98:37:50:ed:f8:70:dc:60:29:a1:61:ab:a1:a5:72:69:f3:33:
         d3:cf:38:1b:dd:88:17:66:47:c0:47:9e:9a:f3:fa:db:0c:4b:
         6a:c0:2d:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVpiFkewfNGmnSlBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQwMjEzMDAzN1oXDTI0MDcwMTEzMDAzN1owLzEtMCsGA1UEAxMk
ZWM5NTIyZDEtMTZkNi00M2YwLWI5MWEtYjhiMDQ2MjhiY2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBUindsFc39hNAWk4zEqtKEkzJYrFK+WdEbC
MoZn1eoRduoS7f1iwxK/CQCjYIIxofVa5aK3z5SECZOn/Zqz/DV+Ns8O3Mq2XIfY
IWrJzJCeDsh9C5O/Kr5qL4DnbRwj0FkQ+RALhamUP3txD/+fMOR1VIXPZ+ap9MgE
sYO3FIVHF/fl32oqy/cUcY0NVfTouXNQdVAQoRb7jcRHLQPMGxXgEqaDPUAPqkwY
qrxx30eNUZwszal6RPeVcg1GzWwRZHabvHVymfjTI6CCMf4F1OltwCOEhw2F5Ony
Xk6JEApvYHT+AYJzmbGN6c27GKVYMjDWMmMqtXnOQA8aj+rTpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtAEUCROR9OvGwTfBp33ByGh/U8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTY3NGViZmEtNmFlNi0z
MzM1LTlmZmUtZDBmNjNlZDI2YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7T3ZMcHWsEOWRn3FPCMJ92a1yPDnirQFT9NhGjFW4K3jfgyOQYx805
opjIOjOXEk8NybwYo/k9L4DyJKis5EadvsvyS2M8/33KVIAgqVMZXV5xRAiQbrb5
nbg7EsMEjey+nY5uBRe7sZoc48Ho2nhStKpp3SHxz5JnXtwAICLj2jmRZY8z+eEd
p6plJQKfsQ12q8e2Sxww6GrxneKFY7HVK4Wnz+gSf+YWsa3bdkY3UJ/l4W/k04Mk
B1S2QhrjZg83ExUJHzXaIb5qNPuybJzSqfgZdfpzVJg3UO34cNxgKaFhq6Glcmnz
M9PPOBvdiBdmR8BHnprz+tsMS2rALZM=
-----END CERTIFICATE-----
Generated at Wed May 1 23:05:59 2024 by rpki-client on console-ams.rpki-client.org