Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa
File:                     2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa (raw, json)
Hash identifier:          4eZnBgSjn+TOn8LQVoIx8WMtSg4Ud91hSLq6V4N7LmY=
Subject key identifier:   4B:B8:ED:0E:73:33:C1:A5:33:35:94:AD:F3:FE:5A:76:D2:1A:FF:AC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584551CD6DB5D1E1547CA5CA0050
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        130.137.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6d:b5:d1:e1:54:7c:a5:ca:00:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=ac8788c1-f63b-4db2-9095-59e556c7a464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:2e:b6:bc:5c:82:99:3d:9e:0d:44:be:c0:
                    72:3c:82:04:6f:d0:53:69:49:f7:a2:22:7d:9c:fa:
                    9d:1a:a3:69:e0:2d:c9:f1:2a:af:a2:dc:f2:f4:22:
                    a5:98:4e:a1:5e:6d:b0:10:58:d6:64:42:91:c6:2e:
                    92:36:16:44:91:21:8d:8e:a0:a0:e3:75:86:2a:21:
                    5f:b2:ed:1e:38:bc:27:62:ad:6c:af:32:ac:9a:7f:
                    a0:8d:fd:59:58:72:70:8b:47:60:70:47:d6:b8:ac:
                    d9:43:99:50:25:7c:95:e8:de:04:3a:04:81:ed:08:
                    a5:f0:c7:f5:81:db:8b:dc:62:b1:aa:ad:70:45:5f:
                    88:54:13:74:93:72:9c:e1:c2:d2:c6:4d:64:87:4f:
                    34:1c:7d:db:36:52:1f:cc:f3:c8:cf:45:99:13:19:
                    b1:1e:3a:3a:0f:fa:4f:54:0c:56:02:2a:84:fa:1a:
                    df:1c:c1:1d:41:e8:c6:b9:bc:61:55:db:f7:5e:87:
                    93:91:69:98:73:66:75:cb:05:bd:73:cc:d7:a2:38:
                    85:fe:79:b3:81:da:42:8e:56:96:f6:a3:d6:f2:ad:
                    19:ba:81:ee:03:1a:da:4b:bb:76:1b:85:93:63:7d:
                    a1:fc:20:35:71:cc:52:8b:d6:69:f7:5d:a6:ed:bb:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B8:ED:0E:73:33:C1:A5:33:35:94:AD:F3:FE:5A:76:D2:1A:FF:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b08c318-5db7-308c-86b2-5b5466ad5b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:37:70:aa:6b:33:1e:27:de:42:87:a8:fa:74:a7:c5:69:6e:
         42:93:d2:97:6c:4e:77:4a:17:12:90:80:e3:68:a6:0e:ad:21:
         d7:43:e6:ef:a4:a8:86:9c:71:78:25:0d:e1:f6:27:41:ef:e7:
         64:fd:89:e5:41:41:4b:c7:a3:26:dd:e2:d0:a0:cb:94:54:a6:
         85:b0:d0:67:a5:49:4d:69:cc:30:51:93:27:52:61:77:e9:72:
         06:b2:dc:d7:1e:cf:44:bc:06:e7:8a:b2:68:c4:e4:f8:bf:cf:
         cb:c3:cb:8d:9a:d4:03:de:61:df:b2:0e:4e:bd:00:08:19:33:
         b2:e0:c2:75:cf:36:2c:f9:1c:bb:2a:69:d1:2f:73:cf:0f:14:
         d2:22:83:94:05:80:8b:bc:a6:00:ce:a2:2a:7d:3b:72:8b:57:
         c3:97:ad:a3:eb:cc:5c:30:e7:03:f2:ab:9c:ef:5a:a7:a0:e1:
         a0:f8:42:a6:b6:24:fd:25:92:cf:1f:eb:75:8d:7a:02:a2:0b:
         8c:2f:ea:7b:3b:56:d0:7a:ed:f4:14:2d:85:99:4d:a2:aa:c3:
         e5:80:3f:51:d6:98:b1:71:98:c4:57:69:b3:86:8d:c4:f2:0c:
         de:a1:95:6d:4e:2e:d9:68:03:01:13:24:10:b5:73:62:89:a4:
         57:bd:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:06 2024 by rpki-client on console-fra.rpki-client.org