Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa
File:                     4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa (raw, json)
Hash identifier:          KKcwIRPjLflMRAFPP8cKe3YfJL+ILtoCWntBEPfgF5s=
Subject key identifier:   A3:7D:B3:51:A5:E4:C7:D5:AB:5C:EB:47:F3:D9:99:FB:B9:7F:09:0C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584569885A780F06AD793AF549EE
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        130.137.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:5a:78:0f:06:ad:79:3a:f5:49:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=c5eef406-97fc-4dfd-b394-7bb08e7ebe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:ed:d9:48:aa:64:d4:79:8f:95:31:f8:e5:
                    98:79:64:1f:b8:bb:e5:8d:b6:aa:fe:93:21:da:0e:
                    f1:e4:80:52:d6:5a:6c:d8:f5:c4:a6:fb:ac:dd:e7:
                    57:39:d5:08:cc:73:98:1f:5d:9e:09:72:c2:2f:41:
                    78:bd:32:3b:33:47:2a:32:e2:5a:8e:b3:f8:44:78:
                    1c:93:44:c1:3f:35:ff:31:48:e6:31:0c:0b:80:46:
                    78:a0:41:26:aa:6d:a6:6c:28:e0:b8:a7:71:56:77:
                    0d:9f:21:a2:aa:ff:96:2b:38:8f:02:6d:23:46:de:
                    ea:9d:1d:e8:3d:63:02:be:5e:de:da:27:24:9b:eb:
                    01:c1:7d:8e:99:e3:ed:3e:ac:25:98:2f:c9:a2:58:
                    b2:63:d9:24:51:57:4e:8e:64:a8:19:fa:4b:9a:e3:
                    0f:f7:5a:2f:fd:b0:b6:14:f8:2d:8b:bc:02:18:f9:
                    c0:9f:a4:bb:68:80:4f:11:e5:dd:92:24:ac:e1:bf:
                    0a:b8:da:3a:1a:9c:da:1c:75:2d:e4:98:2c:1a:47:
                    85:6a:cd:d6:c3:ab:7c:d2:79:f6:82:30:fb:ef:c0:
                    6f:fb:b6:16:4f:fd:14:8f:d8:d9:37:26:da:44:5f:
                    1c:90:53:fd:d6:44:7c:28:88:ac:2f:b4:62:70:4e:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:B3:51:A5:E4:C7:D5:AB:5C:EB:47:F3:D9:99:FB:B9:7F:09:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4e9acd02-d9dd-32c4-8a27-4949a587bf12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:58:db:d2:60:0d:f9:7b:04:cd:f0:49:5c:36:3d:08:3f:
         67:43:22:3b:b0:67:99:b8:74:cd:5b:88:df:64:ee:f4:1c:3d:
         70:29:50:7c:33:e7:cc:d5:f3:37:bf:48:9c:62:b5:46:74:14:
         e6:5b:e0:d0:2f:95:3d:6a:66:b4:bf:8b:1c:79:56:54:e9:32:
         5b:73:a2:92:c8:8c:08:0a:22:70:e2:da:8e:ce:d2:e0:4e:e6:
         09:7e:8c:3e:f4:b4:0a:c8:a3:cf:3a:20:72:f7:65:6f:48:ab:
         9a:db:e2:70:63:64:b0:e5:69:d3:12:bb:0c:6e:59:a2:27:a7:
         a2:b7:95:23:b1:b4:24:f2:99:a1:4c:36:e8:ea:66:fd:61:9d:
         f2:15:a4:ed:94:e5:4c:43:a1:82:f9:27:1e:94:0f:15:b6:d3:
         65:1a:0d:6d:3e:15:e2:21:81:ea:71:eb:9d:d0:d6:3f:dc:22:
         5b:eb:fc:af:54:28:b0:ab:19:71:b4:ca:ef:eb:25:a0:db:3f:
         9c:07:b5:09:b8:6d:e2:ee:32:55:50:61:7d:73:99:17:6d:e3:
         f4:fb:dd:eb:f4:38:41:90:75:ab:f8:84:bb:86:ef:61:60:b1:
         3b:0c:e5:ed:c4:71:a0:bb:b2:9e:76:ca:55:6d:ed:bc:15:c2:
         d8:0d:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:29:27 2024 by rpki-client on console-ams.rpki-client.org