Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/44a40d57-0366-3f3f-bf95-56473d85c9be.roa
File:                     44a40d57-0366-3f3f-bf95-56473d85c9be.roa (raw, json)
Hash identifier:          cA5as60j28XYsNFc76dZSGS9WChn4ooeN4D9B2wBM1A=
Subject key identifier:   35:EA:D4:2D:C6:D3:28:E5:A3:08:06:4D:45:8F:03:B9:FE:26:9E:79
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845B383612FC4373062E6F42000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/44a40d57-0366-3f3f-bf95-56473d85c9be.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        130.137.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:61:2f:c4:37:30:62:e6:f4:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=35762ab1-309d-4af6-a206-2ec7e7aa22c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:81:3c:f8:50:0c:d7:b1:7e:56:0b:13:f5:
                    3b:f9:a5:54:70:d9:bd:be:2b:47:97:4d:78:df:ce:
                    76:84:d6:d9:e2:63:c0:54:2a:e3:33:7d:09:91:01:
                    b5:80:3d:9f:c8:ca:60:6a:d3:83:42:27:f1:9c:78:
                    69:34:64:3a:98:eb:7b:77:0f:2f:cc:a6:57:b8:6d:
                    71:d4:e0:e1:9d:bb:78:ca:71:55:e3:77:03:7a:29:
                    71:80:b6:50:5c:27:d3:46:ce:b1:61:29:c4:ad:76:
                    35:42:70:42:22:0f:f6:85:e2:df:55:ea:51:6f:57:
                    ee:56:97:6c:84:51:6e:2d:10:2b:1e:49:57:b2:ef:
                    0e:df:17:0f:8c:e6:1f:38:01:87:ef:4c:56:fe:31:
                    7b:a7:b1:a7:4e:d4:d7:d5:2c:ed:9c:91:c3:dc:5c:
                    ed:0c:46:48:47:5a:6f:26:12:33:a8:58:d3:e5:93:
                    69:e9:8b:03:34:8a:52:b0:a1:5f:4e:7f:1c:ae:88:
                    16:96:31:a0:37:b2:25:fe:2d:47:25:ac:4d:71:da:
                    c4:eb:4c:63:cb:51:1a:68:36:45:e4:b7:eb:56:b5:
                    9e:1b:29:9a:dc:e6:85:02:a7:fc:65:8b:ea:69:7f:
                    1f:4f:50:f3:85:d6:ee:b4:5d:73:f5:ac:53:df:b0:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:D4:2D:C6:D3:28:E5:A3:08:06:4D:45:8F:03:B9:FE:26:9E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/44a40d57-0366-3f3f-bf95-56473d85c9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:87:a0:9f:40:8c:ee:7a:58:ae:d4:b0:cf:a7:bc:8a:ce:62:
         f8:3f:87:b7:7d:64:7c:a9:a3:2a:74:76:01:61:bb:eb:05:31:
         60:3d:3f:b1:9b:34:56:ff:be:ac:0b:d0:0e:e3:fc:53:32:1e:
         ce:53:d9:75:58:99:88:4a:67:dd:64:02:dc:8c:17:af:42:c4:
         bf:54:41:ca:c3:b0:53:2c:bc:8c:d6:60:df:43:fa:7d:68:9c:
         f9:4f:62:7e:4a:71:fa:dc:72:43:a3:aa:a6:f5:54:0d:7c:c3:
         52:67:15:df:ee:be:d3:df:cb:1d:d7:4d:67:c6:98:7c:d9:f5:
         04:ac:be:ea:3e:23:12:9c:93:07:0f:ad:0f:18:ba:4c:d5:b1:
         bf:d6:96:7d:19:23:db:67:f9:6c:76:24:d8:71:13:09:49:b1:
         17:37:2f:f7:95:13:d7:81:94:02:14:11:3c:0a:b6:dd:0d:82:
         ce:4b:0b:4c:46:64:cc:15:2c:06:c9:2b:75:8d:83:3f:11:61:
         0d:75:f2:07:6c:b1:bb:f5:a0:c7:ae:1b:80:bb:8d:41:2b:2b:
         cf:8a:13:e5:c8:de:bc:d2:55:2f:d4:2e:98:8e:6c:c0:09:74:
         d0:d4:70:f0:49:8a:0b:6f:0e:9f:38:ee:92:a7:f4:dc:22:26:
         af:61:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:55:57 2024 by rpki-client on console-fra.rpki-client.org