Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b86a14e-0fa5-3fbd-81bd-b90f56a6925d.roa
File:                     4b86a14e-0fa5-3fbd-81bd-b90f56a6925d.roa (raw, json)
Hash identifier:          p1goNVmhB94Vqs38VhVxnEol39tfwzEoI238BHcdeDw=
Subject key identifier:   FC:91:7E:6F:18:28:CF:D2:29:CC:32:46:1D:9E:35:5C:69:63:2A:1C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858484C101AC1EB8E2C6A98AE5A80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b86a14e-0fa5-3fbd-81bd-b90f56a6925d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        130.137.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1a:c1:eb:8e:2c:6a:98:ae:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=a2f4776c-bac1-4dd0-b050-45d72d218e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:78:f7:c3:ad:0e:f8:b2:c9:b4:0d:18:3a:
                    53:c2:ed:f0:f2:d4:6f:3d:65:85:cb:38:c7:3b:2e:
                    59:a6:b2:10:ed:99:88:12:db:ba:93:5c:ac:69:45:
                    8a:8c:84:b3:90:8d:dc:a3:b7:82:8e:35:db:b3:07:
                    d6:ad:fa:ee:56:ad:5a:63:cf:d4:c4:7f:5c:76:12:
                    ee:ad:5c:a8:d1:e5:a1:f0:09:dd:3c:12:b1:5f:6e:
                    b8:a3:70:b1:02:17:44:a8:e4:5d:2a:03:ff:6e:f2:
                    e2:d5:b3:e2:4c:32:7c:95:f5:f2:a4:e6:3a:b6:8a:
                    79:b1:53:04:12:a0:d2:5f:ce:3d:f3:30:55:b8:4b:
                    2b:56:07:db:af:80:75:e5:fa:8d:45:51:1a:6a:55:
                    56:4f:bc:0a:f5:8f:32:7f:46:67:39:b3:39:a3:93:
                    1c:9a:b0:53:40:d4:64:e9:54:06:d4:7e:96:a4:35:
                    25:f1:fa:56:96:1c:d6:60:a6:f5:ce:eb:dd:08:c5:
                    b7:77:dd:ad:71:67:99:0c:45:f4:fb:61:97:50:0f:
                    dc:10:ab:db:9d:15:65:fb:8f:22:c9:18:34:70:3b:
                    b0:6b:34:ed:71:91:f5:ea:be:12:61:e9:51:59:67:
                    5b:13:0c:9a:eb:a3:6c:e6:6e:e0:b6:de:de:6e:6c:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:91:7E:6F:18:28:CF:D2:29:CC:32:46:1D:9E:35:5C:69:63:2A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b86a14e-0fa5-3fbd-81bd-b90f56a6925d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:45:24:61:f0:80:90:a3:a3:b9:63:9c:d6:cf:23:a9:17:
         78:ca:1e:39:12:54:7a:ad:55:55:ce:5f:12:78:0b:89:30:4b:
         f9:0c:9e:1a:ff:53:8a:f6:29:69:2b:98:35:2f:00:de:c2:97:
         8e:eb:56:45:3e:b2:c5:19:39:67:50:e7:54:83:80:ba:b6:3d:
         3f:2a:b2:f8:41:cf:a1:91:44:00:ff:f2:59:ba:ed:b3:b5:24:
         c8:20:4e:8c:d0:72:42:18:7f:a8:78:39:c6:f9:e8:93:d2:95:
         de:5f:5c:db:50:a4:c8:69:19:53:1b:d8:42:68:6b:5d:f7:10:
         71:a2:15:b0:95:25:4d:1d:7c:ff:0b:b0:ca:10:b0:f8:62:eb:
         9e:a9:a9:f6:89:8f:b2:97:46:79:4d:91:ae:21:49:ae:74:6a:
         5d:9c:a8:41:46:59:e1:cd:41:5e:10:12:bb:56:f8:22:c7:f2:
         a3:7a:65:78:09:e6:bb:2b:ba:68:9d:1b:b8:ec:26:24:5d:f4:
         a7:71:c7:68:cb:02:62:eb:2b:5b:74:ac:b7:49:3e:6b:e6:a9:
         0a:3d:24:13:6f:37:2e:b3:e2:3c:38:e3:6a:6e:43:37:bf:91:
         0f:6f:ed:4a:22:6e:d8:bb:25:ab:9c:95:db:6d:b8:ff:e1:40:
         f2:86:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:23 2025 by rpki-client