Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48d9adcd-e8e6-3d9d-bedb-65a1bcd473bd.roa
File:                     48d9adcd-e8e6-3d9d-bedb-65a1bcd473bd.roa (raw, json)
Hash identifier:          y3akkcPydqgo4vSp7Hd3B+ntAexft955kE+0vL4fZwY=
Subject key identifier:   E2:8F:3C:C3:B8:9C:35:C3:2E:F6:10:20:97:64:75:3C:77:23:01:64
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584548081E4D4FF11044755ECD40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48d9adcd-e8e6-3d9d-bedb-65a1bcd473bd.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        130.137.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1e:4d:4f:f1:10:44:75:5e:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=d8b6af79-ac92-4513-8ed5-2cc2556e027a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:a8:e1:ea:93:56:27:8e:98:c4:59:71:c3:
                    20:ee:04:e1:e0:89:20:48:e2:ce:77:12:69:17:cf:
                    69:5b:8e:b7:18:19:bc:e5:87:f9:fd:9e:e3:c1:d2:
                    35:fe:7c:09:f0:e3:1f:90:49:0b:3b:ee:76:f7:00:
                    bb:81:61:90:99:9f:40:17:b1:ac:da:64:f9:6f:b8:
                    2d:91:cf:ab:34:dc:3f:c8:7e:29:de:80:ec:00:4e:
                    6e:b2:0f:19:50:cc:b4:46:08:b9:27:9d:04:67:56:
                    22:a2:bf:23:af:72:85:66:10:a2:4f:d3:0f:ba:0a:
                    d2:8c:1b:cd:40:5c:d5:b6:91:d9:ab:f3:d3:e3:6c:
                    d4:e5:01:05:bb:05:95:3b:ac:0e:7a:57:c9:54:38:
                    ab:2d:4d:aa:c8:57:41:e6:71:ee:f2:e6:68:58:5f:
                    dc:9c:d1:cc:ae:b4:fb:1d:73:c8:41:0d:40:39:c9:
                    ee:aa:c2:38:65:93:a4:b5:1a:03:18:59:7b:c8:d0:
                    2c:05:04:73:df:58:c6:42:cc:f8:95:a4:ad:d1:18:
                    55:0f:e0:b2:fb:b5:d1:e2:19:e2:01:5e:b3:1c:79:
                    88:fc:07:bd:94:13:e2:2f:a0:0d:af:6b:f1:92:77:
                    e3:9e:4f:9f:eb:48:f5:38:02:83:ef:f9:15:33:1f:
                    00:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:3C:C3:B8:9C:35:C3:2E:F6:10:20:97:64:75:3C:77:23:01:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48d9adcd-e8e6-3d9d-bedb-65a1bcd473bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:ed:f7:f7:de:cb:03:49:32:62:76:e9:b6:54:77:d5:0e:
         65:f0:2c:79:24:96:1a:4e:16:16:f6:2a:81:5b:f2:c9:ae:d7:
         f2:ea:a3:17:50:86:6a:b3:bb:d4:92:66:3d:68:05:5e:0c:da:
         c6:cf:58:67:9b:a2:b6:e8:35:9e:61:f8:9b:4f:8c:09:a4:ca:
         f3:c2:9e:68:b4:3f:0c:f7:ae:b0:3b:c6:90:57:c3:b2:c6:34:
         cd:a1:c6:51:4a:b9:c9:f5:1b:ac:be:0c:fd:7b:21:f5:9e:40:
         11:de:8b:14:b9:62:08:28:fd:11:07:42:2d:ed:35:d1:8c:a4:
         58:0b:50:71:15:c9:5c:54:37:7c:d8:d4:d4:83:ed:57:1a:da:
         e8:97:12:df:17:8d:bc:63:99:49:27:c1:2f:d7:87:a2:2b:2d:
         51:70:3c:3b:b6:13:d0:65:1e:dc:f7:f5:21:59:64:45:eb:e1:
         13:7b:9d:c9:d4:76:27:a7:98:78:58:be:9e:c3:8d:55:b6:9d:
         c3:88:36:5b:8c:27:2e:cc:ae:86:4a:0c:f4:5c:d5:c2:b8:4c:
         a7:00:b3:01:42:da:f1:30:d8:c1:37:10:b2:65:26:b8:47:f2:
         be:9e:68:f8:6e:63:4e:36:20:8b:69:93:32:b8:9e:bf:80:67:
         a1:55:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:57 2024 by rpki-client on console-fra.rpki-client.org