Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/265200e7-e1db-301c-a3c4-e682d6708109.roa
File:                     265200e7-e1db-301c-a3c4-e682d6708109.roa (raw, json)
Hash identifier:          8FCILA+kRZdW1HqmJ0aZA9e9vDQB0lAPveAc0lpXHXE=
Subject key identifier:   37:CD:AC:F6:CE:65:12:F2:B7:F5:58:CE:43:1B:E3:25:FA:53:25:03
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844B85F9B44C1E34C25AF402880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/265200e7-e1db-301c-a3c4-e682d6708109.roa
Signing time:             Tue 30 Jan 2024 02:00:25 +0000
ROA not before:           Tue 30 Jan 2024 02:00:25 +0000
ROA not after:            Mon 29 Apr 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        130.137.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b8:5f:9b:44:c1:e3:4c:25:af:40:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan 30 02:00:25 2024 GMT
            Not After : Apr 29 01:00:25 2024 GMT
        Subject: CN=3c3c3d90-54d2-49fd-88fa-2d9b93775c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:af:15:94:1d:83:d2:83:b9:14:f6:2b:b5:
                    42:88:af:82:bd:91:35:c7:98:cd:86:c2:94:ab:2b:
                    b0:75:c7:3f:83:b2:2b:37:28:10:7f:d6:c9:5c:58:
                    56:4b:b5:5e:46:67:81:83:af:b9:3a:4c:30:27:40:
                    7f:55:53:28:89:50:c9:94:ee:31:21:77:f6:dc:87:
                    18:d1:a7:c5:2b:39:66:9a:7a:e5:f7:75:13:c6:5f:
                    93:85:54:49:a2:fe:b4:02:dd:57:a5:49:22:48:c2:
                    0d:f8:59:fe:bf:4b:cd:c3:c3:05:02:b3:49:40:9a:
                    f9:9c:f1:cf:28:e3:88:99:4f:3d:95:68:e8:d4:59:
                    0e:94:b2:3c:44:0e:25:b4:1e:b1:17:81:83:d3:b7:
                    58:23:94:a9:57:f6:b7:2a:6c:c1:7b:47:a9:6a:a3:
                    c2:cb:9c:cd:31:7d:59:72:f2:42:81:d3:82:37:c6:
                    fe:29:ca:1e:b1:f3:34:d6:ed:6f:16:5f:22:a3:b4:
                    2e:7f:09:ab:06:5f:81:27:37:48:9c:0d:7b:95:ec:
                    74:b5:f4:ec:00:d6:1f:bb:25:ac:7a:94:77:c2:37:
                    2a:75:5d:7b:56:c3:da:69:51:90:9a:36:d0:31:5f:
                    f2:6a:83:9f:ef:09:de:b1:dd:a5:d8:87:55:07:ad:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:AC:F6:CE:65:12:F2:B7:F5:58:CE:43:1B:E3:25:FA:53:25:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/265200e7-e1db-301c-a3c4-e682d6708109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:13:71:5f:56:11:fe:9e:dc:b6:66:73:2d:91:b0:40:71:
         4c:13:61:aa:a3:5a:fb:9a:02:52:12:45:da:a2:4c:6f:88:3a:
         38:30:4a:dd:e6:4e:36:e7:c3:6e:25:02:fc:5c:9b:a4:bb:ff:
         f8:38:d5:73:e5:fd:1a:07:f6:ce:4d:ff:2d:a2:04:f8:41:c2:
         8c:71:98:b6:be:df:4c:bf:cc:c5:12:33:f6:ba:9e:37:5e:f9:
         a9:df:2b:0f:14:c1:72:71:2b:0c:44:c3:33:0f:81:68:e0:81:
         6a:f9:05:ef:92:e5:8e:f6:43:d3:12:0e:fb:47:2f:f5:3c:5b:
         77:9f:b8:d9:83:c7:46:8b:b7:6f:c6:ef:8d:ce:d5:98:7b:1d:
         7c:bc:d9:77:b6:09:ca:65:c5:06:e6:db:88:a4:c9:a5:61:b4:
         e2:a4:a4:e5:0f:a5:5f:a3:89:fc:6f:34:0f:39:1f:de:8c:41:
         67:07:47:e9:fb:62:79:d8:0d:e1:7f:9c:64:36:f2:50:20:3b:
         ee:5e:bd:1b:42:a9:de:91:14:29:06:93:f9:46:ab:b3:54:1c:
         70:db:1c:b6:24:a0:3b:0c:96:a7:2d:74:be:00:25:2b:35:aa:
         3a:69:81:15:44:88:08:23:b7:01:2d:95:42:e9:80:72:de:fd:
         77:08:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:59:19 2024 by rpki-client on console-ams.rpki-client.org