Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41629e22-e21a-3a4e-87b6-916486920950.roa
File:                     41629e22-e21a-3a4e-87b6-916486920950.roa (raw, json)
Hash identifier:          OCPjESkdbmqThGGT6Eu80037NGN2SwRX9oVWH0+0JTU=
Subject key identifier:   0B:61:A6:17:33:FB:5E:18:C5:75:E5:3C:9A:2D:7A:4E:B3:FB:59:5F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285847818BC279431B164967E27330
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41629e22-e21a-3a4e-87b6-916486920950.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        130.137.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:c2:79:43:1b:16:49:67:e2:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=24a0c98c-1a5c-44ee-be8b-658172d1842e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:7d:7b:a8:3e:5f:8b:14:86:d0:46:cf:57:
                    10:99:c5:41:11:9c:5b:62:78:2c:f3:7f:89:7f:a3:
                    33:e7:2e:f6:21:17:08:8b:7d:8a:c2:f4:6a:29:a9:
                    80:92:8e:38:72:e3:40:d3:dc:82:4d:53:8b:bf:7e:
                    f8:45:12:e7:e5:91:39:ed:2e:ac:50:e2:44:19:ee:
                    82:42:e9:1a:3f:f8:02:ab:ef:e4:8a:00:b6:1d:50:
                    63:3c:8d:2a:c1:ad:5d:20:62:fc:64:b8:f6:f4:82:
                    27:91:c7:a9:f3:77:26:92:98:5f:a9:71:3a:05:d0:
                    50:b0:00:b6:9f:d5:bc:f6:34:5d:57:8c:ca:cc:2c:
                    8e:52:f7:04:64:23:d1:d2:cd:5d:22:21:c4:66:da:
                    ba:be:1f:49:d3:f8:cb:65:20:86:d2:d4:49:e2:70:
                    97:c9:8f:a5:4f:f0:b7:b6:42:cf:0c:17:60:e5:ce:
                    2f:be:e6:8b:a2:be:42:fb:77:34:e1:e6:5d:fd:2a:
                    d7:28:de:10:d7:7b:21:af:77:16:d2:ad:f3:98:82:
                    dd:b9:e5:63:ee:a9:48:87:ee:10:46:ed:52:9e:be:
                    b6:73:2f:42:14:5a:6c:ca:67:c4:66:30:1c:70:d6:
                    52:8a:bc:50:a6:30:fb:38:b9:54:78:71:6e:ca:c8:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:A6:17:33:FB:5E:18:C5:75:E5:3C:9A:2D:7A:4E:B3:FB:59:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/41629e22-e21a-3a4e-87b6-916486920950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:4c:bb:8b:e2:fb:65:53:b6:d7:6d:cf:7d:13:f8:a9:89:
         87:04:2f:01:ad:c2:2e:32:4a:b0:4b:a0:7f:bf:bb:43:59:10:
         06:5e:11:c1:5f:02:07:66:84:4b:53:73:bf:b8:54:dd:b2:af:
         16:2a:a8:f3:94:30:47:76:8b:82:fd:62:50:de:2d:09:3a:bf:
         53:57:da:6e:83:3e:95:35:23:7e:59:26:51:19:e0:4b:e0:60:
         41:8a:0e:07:5e:5b:f6:60:55:3c:b0:2c:65:9c:86:b3:94:92:
         24:77:c2:17:40:8c:7e:98:68:86:e1:6e:09:bf:fb:ff:42:e0:
         7a:96:11:71:fe:3a:d7:bc:ee:c0:d8:c8:80:4b:a6:50:b9:c2:
         75:ff:40:28:c6:9e:c2:bd:19:9c:c7:7b:ca:ce:fe:7d:f4:6a:
         c1:b0:21:f1:87:62:44:f8:f0:5b:a2:8a:48:0a:2a:df:98:52:
         d1:12:06:fd:fb:54:e9:63:c9:c1:af:b8:f5:d9:84:64:45:43:
         4a:9d:23:b9:99:6f:39:a0:90:84:90:e7:6e:b6:5b:10:1a:e5:
         cd:fb:19:58:53:87:ef:67:a8:8b:47:c2:6f:34:ca:b1:22:22:
         3c:a2:17:81:4a:bc:65:0d:bb:01:9f:e7:01:2f:c7:af:41:a1:
         f3:f3:4b:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeBi8J5QxsWSWficzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTAxMTEzMDA0MVoXDTI1MDEwOTE0MDA0MVowLzEtMCsGA1UEAxMk
MjRhMGM5OGMtMWE1Yy00NGVlLWJlOGItNjU4MTcyZDE4NDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSd9e6g+X4sUhtBGz1cQmcVBEZxbYngs83+J
f6Mz5y72IRcIi32KwvRqKamAko44cuNA09yCTVOLv374RRLn5ZE57S6sUOJEGe6C
QukaP/gCq+/kigC2HVBjPI0qwa1dIGL8ZLj29IInkcep83cmkphfqXE6BdBQsAC2
n9W89jRdV4zKzCyOUvcEZCPR0s1dIiHEZtq6vh9J0/jLZSCG0tRJ4nCXyY+lT/C3
tkLPDBdg5c4vvuaLor5C+3c04eZd/SrXKN4Q13shr3cW0q3zmILdueVj7qlIh+4Q
Ru1Snr62cy9CFFpsymfEZjAccNZSirxQpjD7OLlUeHFuysjjLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAthphcz+14YxXXlPJotek6z+1lfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDE2MjllMjItZTIxYS0z
YTRlLTg3YjYtOTE2NDg2OTIwOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDsTLuL4vtlU7bXbc99E/ipiYcELwGtwi4ySrBLoH+/u0NZEAZeEcFf
AgdmhEtTc7+4VN2yrxYqqPOUMEd2i4L9YlDeLQk6v1NX2m6DPpU1I35ZJlEZ4Evg
YEGKDgdeW/ZgVTywLGWchrOUkiR3whdAjH6YaIbhbgm/+/9C4HqWEXH+Ote87sDY
yIBLplC5wnX/QCjGnsK9GZzHe8rO/n30asGwIfGHYkT48FuiikgKKt+YUtESBv37
VOljycGvuPXZhGRFQ0qdI7mZbzmgkISQ5262WxAa5c37GVhTh+9nqItHwm80yrEi
IjyiF4FKvGUNuwGf5wEvx69BofPzS+Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:49 2024 by rpki-client on console-ams.rpki-client.org