Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/17e0fa72-751f-33d8-82cf-6633da701fb0.roa
File:                     17e0fa72-751f-33d8-82cf-6633da701fb0.roa (raw, json)
Hash identifier:          H2F9Agx04NbqHtaGA8sumK7i9XDJDuRXNCaT8q20PIk=
Subject key identifier:   14:47:B9:69:B1:E7:64:66:A0:05:C9:C2:9C:39:11:00:A1:54:80:57
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584548081E37A48C02272CB4CF00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/17e0fa72-751f-33d8-82cf-6633da701fb0.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        130.137.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1e:37:a4:8c:02:27:2c:b4:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=c38e0c9b-7988-4747-bf15-c5258208762b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:a2:b1:a3:22:0f:b3:0e:9a:3d:0e:db:5e:
                    22:b0:86:a1:6d:e3:6f:c3:ea:f5:f8:ac:a4:f0:6a:
                    69:28:cc:63:50:98:52:a4:42:4d:d2:60:e5:34:38:
                    b4:5b:5d:4e:b3:93:ec:9e:0b:d5:01:ec:6b:bd:7c:
                    a0:5d:d9:d6:40:ec:45:6d:ca:38:b1:73:e8:22:67:
                    14:1c:7f:10:98:ef:7a:7c:ef:1c:d2:ad:0b:24:50:
                    57:a0:5b:6a:a7:e5:27:c2:86:53:4a:73:6c:9c:6f:
                    6e:15:37:17:93:24:8e:11:dd:1d:5e:41:4c:7f:74:
                    44:0f:af:b7:be:24:cd:fb:de:0e:1d:45:09:d8:a9:
                    db:a0:2e:91:f2:c6:16:b0:a6:a8:6a:78:93:e8:8a:
                    d3:e3:ef:6e:20:9d:57:83:64:d6:07:68:90:d5:8f:
                    3e:64:1e:fc:09:bd:02:39:2a:64:12:6e:27:16:4f:
                    42:a5:05:6f:51:89:69:9e:24:35:5d:3b:9d:34:7e:
                    21:3d:1d:30:84:db:d5:d5:14:f2:89:2c:dc:de:d1:
                    8e:57:4b:32:30:6b:72:70:a8:4e:64:68:7c:0b:2e:
                    cb:d9:d9:e7:3b:2d:9e:ea:bf:bb:68:04:06:98:2b:
                    fd:35:52:df:20:b2:30:99:26:c6:5c:58:df:d5:70:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:B9:69:B1:E7:64:66:A0:05:C9:C2:9C:39:11:00:A1:54:80:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/17e0fa72-751f-33d8-82cf-6633da701fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:56:7f:38:c6:d0:62:cc:40:4f:a5:ab:9f:d0:ec:84:e9:
         8c:e7:ce:dd:3d:01:bd:03:f8:d8:9b:0f:aa:c9:ea:8a:a4:33:
         f1:39:97:1a:4c:75:5c:42:50:aa:3d:ba:03:cf:05:ac:14:f5:
         e5:65:96:d2:65:58:5b:56:95:99:6d:4a:75:cb:02:9d:55:db:
         14:0f:ab:ba:e6:37:ce:c1:e2:0d:70:9d:28:74:aa:c1:50:4c:
         4e:db:59:78:2b:d9:94:81:c1:ba:83:f4:03:1a:b1:42:1d:08:
         20:b2:fd:5a:fd:eb:0f:9b:f2:d6:de:da:60:81:12:06:a8:2f:
         c5:97:93:6a:2c:4e:af:06:95:d9:c0:21:79:bd:66:fb:c9:22:
         99:fc:2d:5b:3f:f7:7b:7d:3b:fb:2e:82:da:6b:07:6f:ed:d4:
         86:95:3e:2d:bb:f4:36:d1:91:5b:26:8d:9f:0b:08:4d:2d:df:
         a1:1f:3f:6f:76:19:63:3c:3c:8e:cf:10:0d:cc:a8:c9:ad:b6:
         81:43:72:89:4f:38:c9:4e:c8:da:28:f1:58:a5:88:b6:df:4b:
         50:ee:d0:12:e0:8a:ce:05:3b:2b:25:ed:f5:dd:b2:a3:2d:1a:
         ca:c9:cf:92:a3:f6:f3:3f:b7:72:1b:6a:0f:55:c5:3f:fa:2c:
         5c:d1:2c:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICB43pIwCJyy0zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk
YzM4ZTBjOWItNzk4OC00NzQ3LWJmMTUtYzUyNTgyMDg3NjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6isaMiD7MOmj0O214isIahbeNvw+r1+Kyk
8GppKMxjUJhSpEJN0mDlNDi0W11Os5PsngvVAexrvXygXdnWQOxFbco4sXPoImcU
HH8QmO96fO8c0q0LJFBXoFtqp+UnwoZTSnNsnG9uFTcXkySOEd0dXkFMf3RED6+3
viTN+94OHUUJ2KnboC6R8sYWsKaoaniT6IrT4+9uIJ1Xg2TWB2iQ1Y8+ZB78Cb0C
OSpkEm4nFk9CpQVvUYlpniQ1XTudNH4hPR0whNvV1RTyiSzc3tGOV0syMGtycKhO
ZGh8Cy7L2dnnOy2e6r+7aAQGmCv9NVLfILIwmSbGXFjf1XBV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRHuWmx52RmoAXJwpw5EQChVIBXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTdlMGZhNzItNzUxZi0z
M2Q4LTgyY2YtNjYzM2RhNzAxZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF12Vn84xtBizEBPpauf0OyE6Yznzt09Ab0D+NibD6rJ6oqkM/E5lxpM
dVxCUKo9ugPPBawU9eVlltJlWFtWlZltSnXLAp1V2xQPq7rmN87B4g1wnSh0qsFQ
TE7bWXgr2ZSBwbqD9AMasUIdCCCy/Vr96w+b8tbe2mCBEgaoL8WXk2osTq8GldnA
IXm9ZvvJIpn8LVs/93t9O/sugtprB2/t1IaVPi279DbRkVsmjZ8LCE0t36EfP292
GWM8PI7PEA3MqMmttoFDcolPOMlOyNoo8ViliLbfS1Du0BLgis4FOysl7fXdsqMt
GsrJz5Kj9vM/t3Ibag9VxT/6LFzRLHk=
-----END CERTIFICATE-----
Generated at Fri May 3 01:55:57 2024 by rpki-client on console-fra.rpki-client.org