Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
File:                     237ed539-e7c4-3afc-8222-c0b4292ef524.roa (raw, json)
Hash identifier:          2lKP8SSOZ1gY5c0CpXE9G4sUrLP817NzHhXdz7BnWeM=
Subject key identifier:   63:13:57:CA:9D:7B:14:EB:0C:47:39:BA:F6:CA:CC:6A:CB:66:EC:19
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584838854BABA851149C34243880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4b:ab:a8:51:14:9c:34:24:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=e39cd13b-0741-4c8b-97fc-cc437ad26b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:6a:cb:b7:a5:6c:91:bf:97:bb:86:02:19:
                    85:91:f8:44:3e:6f:44:72:bb:16:04:0f:52:8d:0c:
                    e5:b0:3b:a4:a5:81:8d:6a:0e:2d:ea:22:ba:9f:c1:
                    90:8e:30:27:a0:97:f8:33:20:d9:f1:40:ae:73:ab:
                    55:ec:d1:7f:a1:44:4e:9e:45:52:73:01:41:c4:69:
                    24:0f:88:66:68:aa:55:c8:71:a4:e4:1e:32:1e:16:
                    5a:2e:db:ce:6a:4c:55:bd:02:18:46:74:bb:7a:36:
                    95:5d:c7:e4:73:05:91:58:5d:88:ab:80:a2:28:98:
                    94:03:b4:fc:35:1f:af:4d:17:42:d6:6e:21:4d:c7:
                    a6:08:9d:ac:2b:95:c1:a0:8b:e1:e5:e9:69:66:57:
                    a5:68:94:61:4e:1a:69:57:2c:42:89:85:a2:91:e8:
                    4e:75:29:e6:df:5b:a4:78:2b:29:5e:2f:da:96:57:
                    4f:3f:91:e5:7d:bf:9d:47:ee:78:a9:17:85:71:64:
                    68:55:f5:f1:86:06:fc:90:d5:6b:56:3a:ea:af:c3:
                    4e:1c:20:a4:3b:6c:e1:0b:28:30:79:db:c6:7d:0e:
                    92:50:64:11:ce:6a:ed:55:23:eb:26:00:0c:a0:ed:
                    43:71:65:e8:d1:18:c3:0b:59:96:c4:92:f1:97:be:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:13:57:CA:9D:7B:14:EB:0C:47:39:BA:F6:CA:CC:6A:CB:66:EC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:22:87:5a:6b:ab:b8:3f:51:43:8c:7e:3c:44:4f:9f:0f:
         0e:41:52:3e:13:2c:1a:b9:8c:62:12:7d:ab:ac:02:87:1f:6a:
         7c:c5:f1:ef:51:78:d9:1e:e8:ef:ea:d4:5a:3e:cb:22:73:87:
         bb:2d:f9:bb:77:02:6e:2b:87:46:43:0c:56:8f:78:d6:ac:df:
         bf:ea:aa:43:80:e2:36:99:c1:c5:53:b4:fd:19:90:90:ba:e8:
         ab:2d:c2:5c:1a:d4:b8:16:92:d8:ce:d6:e6:86:09:37:11:6f:
         2f:0f:85:a4:c1:9a:c4:bd:3a:08:1c:14:74:15:cd:9d:c2:c2:
         b0:d4:10:cb:43:ed:b7:e5:50:b1:8f:a3:c0:c0:e1:e5:f1:39:
         ab:5c:c2:c6:1d:7f:67:4b:49:da:f8:c7:5b:fe:38:b2:f6:9a:
         27:c5:0d:fe:94:b8:23:af:b5:d7:ee:06:9c:a8:a2:95:7e:2d:
         fb:63:d9:df:40:b5:d7:0a:a3:51:fd:cd:a9:18:87:4b:f3:7e:
         0c:14:14:f6:d2:40:79:0c:1c:77:38:1b:a7:ef:50:6b:be:19:
         a5:bb:f1:88:e1:09:51:53:18:61:0d:72:e2:b7:35:59:32:46:
         e5:10:37:7b:e7:c8:af:1d:d4:eb:19:30:56:8c:85:cb:22:22:
         45:61:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:27 2025 by rpki-client