Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5bcdecf3-385d-3f55-9553-abed5e01afcc.roa
File:                     5bcdecf3-385d-3f55-9553-abed5e01afcc.roa (raw, json)
Hash identifier:          nikBnr5lGUUUb4g+1trz7/zKLIxoZgcB8AGNwoLaktc=
Subject key identifier:   F4:CA:2F:94:04:1B:93:3E:A6:7B:AF:4C:A0:AC:51:F7:15:28:07:8D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475EA621BF9F1088EDAA849E40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5bcdecf3-385d-3f55-9553-abed5e01afcc.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     14618
IP address blocks:        130.137.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:21:bf:9f:10:88:ed:aa:84:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=00c52ac1-3613-4527-aa42-e0992578d007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:e4:f6:e7:80:6b:e8:14:63:6b:14:e9:bf:
                    1e:26:a9:f4:1c:6b:0e:53:2e:95:39:65:ba:e8:54:
                    b2:e8:48:04:fa:28:a0:ee:c0:a2:70:19:f8:39:c5:
                    d7:6a:78:ae:3f:a5:fb:b2:18:80:a9:2f:c0:ab:3b:
                    f7:63:57:e4:5e:ee:13:43:01:e2:b7:d3:99:dd:a1:
                    50:7e:0e:8e:0b:20:dd:2d:f5:ca:43:a4:aa:7a:79:
                    f7:af:d3:18:51:4d:b8:9e:d6:3c:7e:11:3a:9f:f2:
                    ad:75:2f:c3:bd:9c:1c:a6:b2:57:59:8f:81:f3:f9:
                    0c:a7:e9:58:dc:71:07:5b:f8:92:7b:4a:c1:f1:b7:
                    7f:27:4b:21:8d:6f:4c:1b:e1:f4:e3:52:d4:94:8a:
                    45:b0:7a:d1:8e:0e:4d:d5:8d:bd:dc:8e:9c:69:42:
                    7b:42:94:28:c0:97:42:ec:e1:15:6d:16:6d:6b:02:
                    0f:d8:aa:6c:6a:e9:71:6d:ef:be:18:6b:64:c0:11:
                    0d:df:e8:71:f6:74:82:13:f5:99:c2:87:2f:3e:ff:
                    e3:40:78:61:7d:2e:ad:3d:3d:cb:48:2f:c8:23:45:
                    a2:26:e3:d0:55:d9:60:da:6b:79:29:dd:91:ab:fd:
                    f0:31:a2:64:1f:ad:64:c0:eb:c9:f4:a4:40:1a:f2:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CA:2F:94:04:1B:93:3E:A6:7B:AF:4C:A0:AC:51:F7:15:28:07:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5bcdecf3-385d-3f55-9553-abed5e01afcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:76:d6:fb:5a:c0:e0:3b:c3:ee:14:5b:ea:7b:bc:da:e2:
         97:a9:1a:9b:14:b2:fd:cf:15:3a:8c:fa:9d:ac:e3:57:06:2f:
         ab:4b:c3:63:f6:e8:82:0f:01:88:08:ca:f1:b3:72:e3:78:d5:
         b3:4c:10:0c:9e:8e:b8:51:a1:d2:23:f0:ed:66:d2:8c:ae:df:
         18:51:c8:ad:4f:69:12:d7:49:da:c1:6a:32:96:5c:53:1a:fd:
         23:29:43:e2:0e:0a:32:c9:98:fa:e5:50:bc:41:20:50:94:51:
         9b:62:ff:ad:ce:a8:37:22:41:7b:fb:6e:b1:15:b5:20:ce:bc:
         7b:31:b3:1b:16:c6:28:8a:b4:bd:7e:ea:f6:24:93:bc:33:17:
         58:19:7b:dd:27:ed:57:fe:af:38:1c:c1:1b:37:43:a4:5c:69:
         83:47:33:c6:10:48:27:fb:38:4b:12:7b:ef:c7:27:45:6d:43:
         11:04:c2:b4:5d:9f:13:89:fd:29:92:3f:72:14:37:42:46:35:
         fe:f1:b2:21:ca:fe:93:f1:3b:3a:2a:9a:e0:fd:bd:70:b7:7c:
         90:16:98:e0:b0:9e:28:57:ab:b3:e4:a5:5d:c2:a5:08:2f:8d:
         a8:27:8d:03:c6:0c:e8:78:3b:46:fb:c1:e6:9e:2a:90:90:90:
         b4:2a:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:49 2024 by rpki-client on console-ams.rpki-client.org