Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa
File:                     2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa (raw, json)
Hash identifier:          uD01BM1CeCvLMWSpqbRXxtXIlqCZiaDclvMHM+xJQBc=
Subject key identifier:   99:3C:F4:6B:9F:9A:0D:CF:44:94:F5:19:0A:B1:87:C7:9D:59:5E:2B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845AC8A1811699BAC73C8EBF8C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        130.137.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:18:11:69:9b:ac:73:c8:eb:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=af4913c7-f63b-4264-b09b-d040f679fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:1e:70:96:6b:5f:f0:90:5b:6a:e4:30:da:
                    3e:54:e6:01:c4:e5:23:cb:35:2a:4d:8c:a8:cf:a9:
                    3e:47:b9:0e:f4:46:49:12:fa:cb:c6:7d:34:e8:9e:
                    ba:93:34:cd:98:ca:4d:76:7a:9a:4e:74:12:b8:73:
                    8f:b4:89:13:9a:ba:d0:71:63:95:fc:21:a8:48:91:
                    df:27:38:8b:6a:e4:9a:0c:26:0e:58:d0:aa:41:e4:
                    e7:65:15:cd:a6:3f:0f:c3:58:f4:d0:64:02:23:29:
                    39:53:b4:19:9d:f6:3a:08:76:c9:5d:77:af:be:33:
                    32:2e:e9:fe:b5:c6:30:8f:86:98:26:ae:5f:d6:89:
                    df:05:9a:0d:b7:a0:48:ff:15:81:35:32:96:8b:7f:
                    ef:02:6e:3e:d7:6c:02:25:0c:a2:4e:ac:18:4c:8f:
                    47:e6:15:e0:93:4d:20:24:f2:03:f9:b7:55:0c:51:
                    a5:02:a1:9b:10:e7:a3:db:1f:c2:f3:3e:8d:a5:73:
                    88:f9:b0:42:94:fa:1e:87:f4:2b:c3:c2:dd:18:75:
                    f2:8a:82:9f:ba:8b:f3:41:91:ba:c5:4f:35:9b:e9:
                    1f:cf:c7:83:da:80:42:cf:0c:c0:ed:d9:fa:ae:25:
                    db:e6:ac:e1:40:2f:80:fb:e5:51:5c:8d:f5:a0:82:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3C:F4:6B:9F:9A:0D:CF:44:94:F5:19:0A:B1:87:C7:9D:59:5E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:84:64:6f:64:37:51:57:0e:94:d4:8d:9f:11:3b:6c:bd:
         64:ef:cf:97:3c:d0:7f:0c:5d:53:8f:b7:dc:77:28:2a:38:87:
         ca:8f:d3:fd:77:77:2f:18:23:82:99:d9:dc:79:19:1f:90:b9:
         54:9b:1c:59:de:85:22:e2:6b:3c:0f:d2:25:bb:7a:a0:a7:02:
         11:a7:cc:ec:1f:e1:fe:40:26:7d:ef:e2:ea:60:a0:09:d2:86:
         c9:b7:3c:b8:60:46:26:db:07:68:90:32:ee:03:08:07:6a:e7:
         f4:f3:40:c8:41:08:d4:4d:a3:fa:6c:a5:fc:28:ab:b7:73:d7:
         e2:52:e3:af:6f:f8:28:42:3a:f2:12:cd:0c:25:8a:92:50:6e:
         45:96:f3:90:59:b1:8e:d5:d4:dd:70:d4:c3:2c:8b:8f:b2:05:
         86:80:b4:ae:9c:ba:c2:ca:e6:08:ac:61:be:be:cd:ef:b8:29:
         1f:1c:d5:bb:3d:54:c4:9f:94:ee:32:56:65:7c:e0:24:b1:0a:
         b6:4a:88:72:bb:ff:54:fc:c0:d7:5c:7b:d2:46:71:4e:39:73:
         7b:4e:6f:96:9e:53:d2:ac:37:ed:c3:3a:2c:8e:ea:b3:d3:d4:
         23:a7:74:0a:69:13:86:e9:16:db:35:5f:12:bf:6d:c6:b2:bf:
         96:87:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:06 2024 by rpki-client on console-fra.rpki-client.org