Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa
File:                     4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa (raw, json)
Hash identifier:          831cmQ/iC7ZErKhx4zDO7yHOSUzDhL80xOB2PpAi/hY=
Subject key identifier:   19:CE:4A:94:73:3D:5D:80:A4:E0:3F:95:B0:78:19:9D:FC:55:11:8E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844BDF4F6D00471A1721190BC80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa
Signing time:             Thu 01 Feb 2024 02:00:26 +0000
ROA not before:           Thu 01 Feb 2024 02:00:26 +0000
ROA not after:            Wed 01 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        130.137.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bd:f4:f6:d0:04:71:a1:72:11:90:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb  1 02:00:26 2024 GMT
            Not After : May  1 01:00:26 2024 GMT
        Subject: CN=d83c39d4-91fc-42c9-a8b6-635f8f8d12ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:9d:23:0d:98:a3:3a:f7:cc:32:ca:49:c1:
                    a9:2c:35:c1:8f:eb:f5:00:bc:2d:a4:6e:a3:91:40:
                    da:6a:9d:0a:0b:5b:66:f9:e3:cf:4f:e4:b7:e1:8a:
                    e9:87:c3:29:c9:22:bd:de:17:4d:63:80:af:fc:eb:
                    2d:7c:ac:6c:a1:f9:98:d8:41:34:51:54:34:0e:42:
                    ca:54:42:19:3b:a2:be:64:ed:5a:30:ee:71:0e:ef:
                    44:6a:e4:09:7e:f5:6f:61:21:26:df:02:a3:79:fc:
                    ed:36:72:3b:3b:df:b3:05:6b:c9:12:5f:56:32:4c:
                    86:e2:c0:88:dd:c1:29:14:37:93:9f:18:d3:7d:10:
                    46:ca:c7:ce:2d:67:a2:1a:61:a0:23:31:72:01:3a:
                    7f:91:17:1a:26:b1:0e:0a:69:dc:63:9f:ac:19:71:
                    5a:9d:9d:76:83:66:23:a3:57:ec:65:3b:6a:26:34:
                    19:c7:b9:cc:14:c5:f0:68:f3:fd:ab:c8:d7:b4:c8:
                    8d:6e:06:e9:b1:14:4b:91:3d:b5:c5:4e:74:f6:65:
                    74:93:72:06:5e:67:c9:bf:69:72:ec:17:e9:33:b9:
                    fb:54:94:33:54:2f:fc:f3:53:e8:9d:2d:48:1c:7d:
                    f2:1c:c0:f6:87:1a:d4:b4:93:8a:e2:9e:d9:d5:b0:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:4A:94:73:3D:5D:80:A4:E0:3F:95:B0:78:19:9D:FC:55:11:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c07e6cc-0a28-37eb-85b0-461fa1b46768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d8:d0:4a:c6:a6:5f:35:3c:b8:63:45:6c:d3:6f:77:63:3b:
         5f:df:99:d0:5b:2d:90:dd:09:2c:e4:89:60:0c:94:2d:90:91:
         98:be:23:bd:da:b9:1b:90:f6:43:ee:ed:1b:e0:1c:5b:30:f7:
         67:68:80:96:ee:e5:60:3b:9a:95:da:58:c0:12:3d:b3:f2:d5:
         ae:e4:fb:c3:79:60:bb:16:16:d9:d5:bc:43:53:af:d1:6f:35:
         c3:88:9c:94:7e:47:33:e5:d5:db:b0:47:4c:ff:c2:6d:23:bd:
         89:c2:5d:9f:be:e4:08:f9:41:1b:43:6e:bb:4c:6d:6d:eb:5d:
         c4:1c:cc:48:16:4f:dc:30:e9:72:62:d8:62:b4:fd:62:5f:ad:
         53:39:65:51:5f:ea:6b:b6:fb:1b:c3:0a:31:86:44:5e:53:23:
         4c:19:90:cd:e2:92:99:ab:39:b2:b0:db:85:24:9f:bf:37:04:
         a4:88:1b:91:63:a9:68:69:cb:44:66:fb:13:14:4a:50:e6:4d:
         a6:39:c0:0a:c7:b6:d1:21:49:dc:41:e7:05:5e:91:09:19:c5:
         38:c7:09:62:f3:0c:41:cd:c8:82:e3:0c:ef:e8:f9:6f:e3:d3:
         96:f3:52:f9:7c:09:15:a1:cb:83:ea:9d:67:fa:a4:13:0d:5f:
         b0:77:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:25:44 2024 by rpki-client on console-ams.rpki-client.org