Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa
File:                     3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa (raw, json)
Hash identifier:          g1In/3vmDZ09HIInv2HoCWkNt1s7SS91wCinsWi9iBM=
Subject key identifier:   05:21:3F:EF:9D:E2:3A:CB:A8:9A:72:FF:59:D3:27:27:06:0C:93:65
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858448A4F537F965AB0D3B9F57880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa
Signing time:             Sat 13 Jan 2024 14:00:29 +0000
ROA not before:           Sat 13 Jan 2024 14:00:29 +0000
ROA not after:            Fri 12 Apr 2024 13:00:29 +0000
asID:                     14618
IP address blocks:        130.137.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8a:4f:53:7f:96:5a:b0:d3:b9:f5:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan 13 14:00:29 2024 GMT
            Not After : Apr 12 13:00:29 2024 GMT
        Subject: CN=2d2d8831-575c-4310-bfdc-0fdad0a8867b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:28:99:93:35:16:b4:c0:44:9c:be:4e:43:
                    91:66:f5:91:02:29:d0:de:4a:45:77:fe:8e:c4:ff:
                    5b:45:ae:c3:fd:41:46:c7:45:b9:31:09:4c:78:b3:
                    9a:26:ab:13:7b:aa:64:07:8e:56:52:38:cc:ce:85:
                    b2:9b:cf:f2:7a:08:5d:52:2e:9a:f8:4d:49:95:04:
                    bc:54:ce:78:94:bb:6e:a1:55:64:c7:d3:43:7a:f4:
                    2f:32:71:19:e4:48:4b:39:06:4a:67:05:14:d7:83:
                    94:c6:ce:10:6c:32:ba:5a:32:59:45:04:03:49:9c:
                    1c:f5:68:42:4c:d8:9d:0a:23:20:a6:54:e7:e1:d4:
                    89:4b:f4:5d:99:02:15:a3:35:ae:f7:44:90:79:ba:
                    15:b3:12:da:13:7f:22:67:27:6d:e0:87:8a:8b:ca:
                    45:2c:4f:90:5f:4e:15:b3:89:f9:ad:6b:e3:5b:ea:
                    ef:e6:af:df:02:eb:5f:2c:15:f4:a8:fd:94:b1:9c:
                    d6:48:11:a7:ab:36:ba:26:e4:94:0b:a9:29:77:af:
                    c2:24:9f:aa:a4:70:1e:76:8f:e4:3e:18:8d:d3:dc:
                    96:f9:77:f1:1a:9b:ab:12:b4:92:75:5b:57:f1:f3:
                    f5:98:7d:70:41:6e:a6:24:a9:32:2c:41:b7:df:2f:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:21:3F:EF:9D:E2:3A:CB:A8:9A:72:FF:59:D3:27:27:06:0C:93:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:fa:6d:4c:97:bb:3c:b6:4e:cf:2e:ea:eb:ab:1a:e0:52:
         ac:0e:2c:dd:3e:00:a0:64:a6:8c:32:34:1d:03:d7:d6:aa:d6:
         62:28:09:1a:42:7f:dc:01:34:ae:31:6f:60:3a:ea:17:a8:f5:
         1f:de:18:4b:b0:73:d5:8d:da:13:bf:12:fe:0e:03:2d:e6:96:
         d5:73:23:ae:df:f6:2f:da:c0:b6:c7:b5:4b:db:64:fa:8f:5c:
         2d:44:38:15:6a:ef:9f:00:cc:65:c9:a6:d6:14:08:3e:d2:0d:
         36:4d:b3:ef:6b:c0:c6:52:bf:cc:67:33:b6:7a:1b:c9:f0:d3:
         d6:76:31:39:1b:9d:ae:07:dd:66:9c:a6:6b:5b:b2:1c:11:77:
         6c:5c:c5:e8:bc:93:e8:11:bd:a1:79:47:6c:85:ac:ec:43:0c:
         09:9b:f5:4d:39:09:56:39:93:24:0e:71:e2:78:05:7b:51:31:
         a0:c1:00:31:8a:bd:ce:44:2a:d1:8b:81:e7:46:ba:6d:80:7d:
         7b:4a:68:da:99:c0:74:ec:b4:e5:eb:1d:62:4e:6a:ce:2a:0b:
         3f:84:dc:dd:04:64:88:49:0c:6d:22:b9:9d:1a:08:1f:16:b5:
         51:94:6b:55:79:63:46:23:71:06:c2:96:5c:d3:53:7b:a4:49:
         0c:20:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:55:48 2024 by rpki-client on console-fra.rpki-client.org