Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
File:                     1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json)
Hash identifier:          PLcyzcJbNosI3LUMijFS1qXEdtsstIjAsJQtM+PIQlY=
Subject key identifier:   21:39:4D:1B:04:ED:BF:0F:05:09:A6:31:58:0B:0F:18:C5:BD:A2:C3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483B4FFA1502D8CB6D08149580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     8987
IP address blocks:        130.137.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:fa:15:02:d8:cb:6d:08:14:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=11cd8b6e-3162-4338-8d74-8364eae5ebe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:1f:d2:a9:04:2f:b0:63:da:c5:13:f1:01:
                    79:c5:6b:57:6e:97:a7:4f:71:f3:b7:d7:0d:46:40:
                    20:9b:ba:23:ff:42:61:3a:57:8f:15:bb:a3:5c:02:
                    23:7b:81:78:1c:dc:d8:fd:9a:0d:89:10:c4:9f:5b:
                    c3:04:ee:f5:b4:94:da:4d:63:7e:d6:dc:c4:04:96:
                    38:4b:85:4f:ce:fe:93:42:ca:a6:2c:40:74:aa:7f:
                    40:f6:c1:0e:64:56:0a:3d:51:1b:ff:02:cb:f4:7e:
                    c1:e9:b1:83:5e:74:37:f6:3a:c0:76:1d:35:ae:a3:
                    ea:08:27:84:57:83:ef:df:4b:23:97:08:05:96:77:
                    b8:87:38:9e:e9:02:8a:de:46:c9:99:d1:a1:eb:5f:
                    35:19:b6:5e:53:9b:8d:0c:f5:9a:04:29:ba:9a:0a:
                    2c:a9:65:4c:83:40:c9:67:a0:08:08:43:d6:f2:4c:
                    2f:49:92:f2:79:ae:37:84:8f:45:4d:7c:b3:cd:20:
                    19:48:27:d3:8d:78:01:59:25:51:03:1a:27:58:27:
                    9d:45:f3:f0:f8:b5:49:6f:c3:81:58:ad:12:55:80:
                    57:c9:68:75:c9:19:2c:a1:fc:fd:bd:0f:d7:1d:af:
                    95:54:5a:ee:2a:b5:96:f2:db:b2:5c:17:b6:04:59:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:39:4D:1B:04:ED:BF:0F:05:09:A6:31:58:0B:0F:18:C5:BD:A2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:19:4a:a3:71:95:6f:11:9c:3a:27:73:04:f3:51:a9:a5:0a:
         52:65:ec:a9:5b:af:bb:b9:76:9d:67:ec:4e:b6:5a:83:76:57:
         d4:71:28:92:0b:6d:74:51:49:13:ac:68:9c:06:24:ed:2e:d7:
         a5:ee:95:71:45:55:2d:2b:7a:5a:0c:d2:1b:40:96:ce:17:c4:
         0d:29:94:b6:d6:16:9b:b1:5b:55:2a:4c:9d:e6:4d:2c:48:18:
         31:dd:8d:30:6a:5f:2f:46:f5:92:6c:70:ec:67:0e:ac:e3:5f:
         5f:21:a7:76:a1:44:60:18:e1:83:30:c7:35:b3:eb:c3:2a:46:
         12:bf:12:66:d8:2a:1a:61:63:aa:f5:56:d3:6b:b7:0b:8e:b5:
         25:71:99:0e:0d:45:da:13:bd:f0:8a:86:95:37:29:3f:4a:f3:
         5a:46:d8:1e:96:30:b4:8b:a8:cf:a5:f3:ef:e9:36:3f:4d:e2:
         ad:0c:b1:5a:82:7f:53:c0:ff:3a:09:b9:34:ce:d9:fe:2d:bd:
         5d:24:f9:d7:fa:cb:14:a4:c4:9a:3c:ce:65:f5:9a:4e:e2:ac:
         35:e0:85:26:9c:6b:39:22:c7:d9:97:fb:78:6f:71:56:3c:f7:
         9c:b9:eb:85:17:ad:f9:62:2f:ce:3a:be:c6:6b:4d:35:30:d8:
         7b:90:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 06:16:31 2025 by rpki-client