Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa
File:                     2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa (raw, json)
Hash identifier:          NkAr77sfIcLdkagpnW5M/E2jFutCdepzGEHIC7QbxIw=
Subject key identifier:   32:F5:4F:C5:D3:10:E0:B2:FC:3D:52:E8:36:88:6C:A9:72:3E:86:99
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475BDB68D46441F41B916CA600
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        130.137.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:68:d4:64:41:f4:1b:91:6c:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=9022bba1-7feb-490b-b173-20a957265d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:ea:1c:be:cb:01:18:d7:81:a0:fc:ec:3f:
                    cb:ba:10:f3:76:db:69:2c:2e:37:4d:30:f7:2c:91:
                    56:c6:33:f0:b4:4a:23:82:05:51:10:2c:b5:9d:1d:
                    10:8b:0c:1f:db:e4:fd:06:3a:00:5f:be:15:24:bf:
                    ec:bb:38:14:5e:bf:e6:06:22:f9:8a:e4:74:6b:0a:
                    05:82:a0:59:93:62:60:ba:82:2b:11:01:79:3c:87:
                    db:a8:91:23:7e:f6:16:06:42:61:56:64:fd:38:f2:
                    07:11:fb:ae:18:a2:ba:7b:9e:3b:28:15:ef:80:cf:
                    5f:2a:99:63:6d:77:48:5a:23:0e:5d:81:5a:7d:55:
                    00:5a:13:cc:e4:4a:59:1d:97:85:8b:7b:6f:9e:85:
                    35:c3:b3:3b:e3:12:82:83:19:f8:31:3e:5c:99:df:
                    fb:86:70:f6:a7:cf:5e:32:4b:b6:ed:12:7f:0b:b3:
                    06:ae:fc:c3:14:c3:f0:74:5a:49:25:ee:25:16:44:
                    5d:5f:67:91:18:8b:52:ee:17:3d:fe:fb:e6:24:a1:
                    a6:67:9a:5c:ad:3d:10:ab:c4:5a:6d:c0:4c:2c:bf:
                    f1:cd:c9:98:76:69:89:41:25:93:96:ad:65:42:47:
                    c7:4f:f7:c9:b3:b5:b0:6c:a2:79:2e:e9:18:2b:8a:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F5:4F:C5:D3:10:E0:B2:FC:3D:52:E8:36:88:6C:A9:72:3E:86:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ba0ef00-9d28-3b0d-bb2e-fc53aac0480c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:b1:3a:e6:5b:2e:4a:3d:f6:ef:e1:be:0b:9b:70:3a:b6:
         79:57:95:a4:55:46:be:e3:3b:32:ba:99:a5:f9:37:a8:57:c7:
         33:21:33:a1:ba:1f:1e:34:0c:2e:6a:36:55:ed:e2:28:a6:b4:
         45:18:07:05:c2:44:99:fc:f8:f7:01:ec:a1:ec:ce:64:43:c4:
         99:3d:11:32:80:dd:d9:14:d8:e5:b0:a3:97:b1:be:3a:21:84:
         ca:48:b1:9f:31:a1:7b:f1:9e:15:f3:de:83:69:a1:fc:73:29:
         0f:6b:b1:68:ec:54:65:68:8d:d0:5a:57:0b:c1:08:0a:c4:f6:
         8f:59:4d:40:df:05:bc:0c:cd:b9:1d:40:a0:ac:4f:e6:c1:51:
         bb:91:7f:6c:55:37:8c:ae:e5:4e:95:0d:e4:b3:c1:29:93:61:
         58:d7:32:12:6c:f7:53:b3:e0:ba:d3:29:1d:fb:4b:31:4b:52:
         55:25:bc:62:68:91:7e:6a:1a:1e:32:71:f9:47:4d:0f:77:bf:
         9e:16:1d:8e:ac:ff:b1:04:00:10:16:7b:57:b3:57:ab:cc:f5:
         c9:fa:84:4d:42:c1:62:2f:4e:ed:c8:ee:5b:ca:d5:47:bd:0b:
         59:fc:b1:00:63:87:46:69:26:39:6f:79:f9:5f:62:0c:36:7f:
         94:0e:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:47 2024 by rpki-client on console-fra.rpki-client.org