Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa
File:                     5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa (raw, json)
Hash identifier:          5IG6DBpV35Laxek+KPK+Sv0DPz1+Z5b5IelIj7iSp3s=
Subject key identifier:   58:5F:71:27:BD:87:81:8D:6E:38:53:C0:43:EB:FF:A6:60:42:88:06
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858459BC8A1D76E1B240ACC36B700
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa
Signing time:             Sat 20 Apr 2024 13:00:34 +0000
ROA not before:           Sat 20 Apr 2024 13:00:34 +0000
ROA not after:            Fri 19 Jul 2024 13:00:34 +0000
asID:                     8987
IP address blocks:        130.137.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9b:c8:a1:d7:6e:1b:24:0a:cc:36:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 20 13:00:34 2024 GMT
            Not After : Jul 19 13:00:34 2024 GMT
        Subject: CN=ba15fb5e-22c4-479a-b855-001c4620d651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:fc:84:94:ba:3a:ad:1d:16:18:0a:b6:cb:
                    ff:40:ac:74:4f:87:50:32:74:cf:ae:10:3d:e5:a5:
                    bd:e1:6e:61:1c:76:d5:eb:e3:7c:ab:fe:73:18:a2:
                    3d:53:fd:ee:92:5a:ad:c7:74:6b:1b:c2:6a:da:0e:
                    1f:a3:64:49:51:b0:44:55:5e:b1:06:c5:40:e9:37:
                    70:84:ae:3c:c2:c4:2f:a5:fe:11:ed:eb:0e:4e:15:
                    c6:ac:f9:a8:e5:2e:c0:ab:cf:cc:21:5b:77:ea:68:
                    c8:2a:e6:40:ee:5a:e6:f5:7f:89:13:14:05:1f:38:
                    04:f5:af:33:ab:98:29:e5:df:3e:56:e0:09:d7:01:
                    6e:23:bb:70:ea:73:26:44:7b:a6:cb:e0:5d:a5:fb:
                    78:34:ac:cf:68:ed:3f:d2:48:4d:43:2d:a2:e1:dc:
                    e2:22:59:ae:56:78:66:55:85:8c:bd:27:00:33:c6:
                    e0:c8:01:a5:ac:c9:64:38:6a:3d:3e:52:44:a2:81:
                    b7:90:08:98:f6:f1:b8:9c:e1:ed:64:ba:8f:c9:4c:
                    32:1e:3f:83:d2:d9:bb:e0:ff:aa:6d:1a:fa:83:35:
                    37:44:52:de:f5:38:37:39:e3:2b:ff:22:3f:af:bc:
                    88:26:52:61:60:04:80:82:60:aa:2e:a1:05:05:a9:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5F:71:27:BD:87:81:8D:6E:38:53:C0:43:EB:FF:A6:60:42:88:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5a25d7b1-e8b9-335f-9a2c-9a3bf3dac240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:07:05:63:ea:da:56:5e:ec:45:ad:35:ec:e2:c8:89:16:
         b2:3a:c4:4f:cf:be:82:03:84:37:bf:28:22:74:66:ef:a7:99:
         af:49:d8:1c:de:30:ea:4c:21:fc:f3:4d:f2:90:bd:42:db:a6:
         7d:d9:ca:36:01:33:42:3f:e9:e6:15:f1:e8:01:e0:30:85:7d:
         1a:90:7d:39:7a:6e:33:65:a3:3d:ee:e0:86:d5:ee:dc:cf:19:
         ed:aa:ed:46:09:ad:e0:39:13:55:6f:c6:99:ea:25:0b:e7:59:
         87:27:11:44:94:72:78:e2:9c:55:bc:12:8f:f0:ff:2b:50:6b:
         c5:24:65:03:24:72:e4:9a:6f:88:8e:a3:ef:52:b1:10:e4:cc:
         ef:73:43:50:a4:6c:72:20:7d:95:2f:64:a9:c1:5d:a7:8f:87:
         7d:a9:60:ba:34:9d:c4:01:4f:ff:d6:93:93:11:e2:8c:dc:bb:
         d8:cf:6b:ad:b7:17:4e:fe:5e:ae:46:41:65:46:b9:0e:96:79:
         52:74:9a:ce:25:30:03:ac:cc:bb:c3:76:e6:c0:eb:86:39:9a:
         48:33:5e:64:a1:84:37:dd:6f:47:31:24:05:fb:13:4b:85:8b:
         2c:39:5b:9a:06:84:29:3e:65:71:87:ba:40:02:7e:73:2e:40:
         7f:a2:2a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWbyKHXbhskCsw2twAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQyMDEzMDAzNFoXDTI0MDcxOTEzMDAzNFowLzEtMCsGA1UEAxMk
YmExNWZiNWUtMjJjNC00NzlhLWI4NTUtMDAxYzQ2MjBkNjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7f8hJS6Oq0dFhgKtsv/QKx0T4dQMnTPrhA9
5aW94W5hHHbV6+N8q/5zGKI9U/3uklqtx3RrG8Jq2g4fo2RJUbBEVV6xBsVA6Tdw
hK48wsQvpf4R7esOThXGrPmo5S7Aq8/MIVt36mjIKuZA7lrm9X+JExQFHzgE9a8z
q5gp5d8+VuAJ1wFuI7tw6nMmRHumy+Bdpft4NKzPaO0/0khNQy2i4dziIlmuVnhm
VYWMvScAM8bgyAGlrMlkOGo9PlJEooG3kAiY9vG4nOHtZLqPyUwyHj+D0tm74P+q
bRr6gzU3RFLe9Tg3OeMr/yI/r7yIJlJhYASAgmCqLqEFBalmjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhfcSe9h4GNbjhTwEPr/6ZgQogGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWEyNWQ3YjEtZThiOS0z
MzVmLTlhMmMtOWEzYmYzZGFjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmzBwVj6tpWXuxFrTXs4siJFrI6xE/PvoIDhDe/KCJ0Zu+nma9J2Bze
MOpMIfzzTfKQvULbpn3ZyjYBM0I/6eYV8egB4DCFfRqQfTl6bjNloz3u4IbV7tzP
Ge2q7UYJreA5E1VvxpnqJQvnWYcnEUSUcnjinFW8Eo/w/ytQa8UkZQMkcuSab4iO
o+9SsRDkzO9zQ1CkbHIgfZUvZKnBXaePh32pYLo0ncQBT//Wk5MR4ozcu9jPa623
F07+Xq5GQWVGuQ6WeVJ0ms4lMAOszLvDdubA64Y5mkgzXmShhDfdb0cxJAX7E0uF
iyw5W5oGhCk+ZXGHukACfnMuQH+iKqw=
-----END CERTIFICATE-----
Generated at Mon May 6 02:02:59 2024 by rpki-client on console-fra.rpki-client.org