Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a476596-81d0-3278-ba69-aeed7427a7cf.roa
File:                     6a476596-81d0-3278-ba69-aeed7427a7cf.roa (raw, json)
Hash identifier:          Sj3H48loI6OuFFI1gImGVFZ9EacHwfOBxgbaG7b1pr0=
Subject key identifier:   45:41:7A:DE:15:06:AF:5C:8C:BA:34:F1:F7:89:02:E0:13:88:68:AC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858456CF2C905C321A17897D36280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a476596-81d0-3278-ba69-aeed7427a7cf.roa
Signing time:             Wed 03 Apr 2024 18:22:34 +0000
ROA not before:           Wed 03 Apr 2024 18:22:34 +0000
ROA not after:            Tue 02 Jul 2024 18:22:34 +0000
asID:                     14618
IP address blocks:        130.137.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:f2:c9:05:c3:21:a1:78:97:d3:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  3 18:22:34 2024 GMT
            Not After : Jul  2 18:22:34 2024 GMT
        Subject: CN=067ce6fa-7422-4751-a6eb-bf3e047d82e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:4a:5e:58:61:91:95:56:63:88:2f:3a:cf:
                    e9:1a:a7:c2:68:b5:87:d8:fd:f7:60:7a:2e:10:8b:
                    32:2f:88:88:d8:e0:18:54:12:69:84:19:69:29:5b:
                    a3:ea:c3:f3:d7:a0:63:29:20:05:76:ec:0f:37:1b:
                    1a:b8:5b:58:61:0b:6c:2c:98:e4:80:78:37:95:37:
                    f3:9e:5d:e5:b4:99:6b:e1:31:94:2d:72:4b:f8:07:
                    e1:c4:f5:83:90:b9:80:d0:c8:3e:ff:3b:e3:c6:75:
                    20:be:f2:a5:e8:a0:4c:f8:88:68:fc:e8:97:5a:29:
                    69:b9:07:69:f0:84:a1:5f:3d:d0:c9:c2:33:aa:ef:
                    06:e8:d3:3c:ae:0c:a4:ac:79:2c:f0:6e:91:94:05:
                    8b:42:8f:ee:8f:b8:aa:48:29:89:5a:0c:8e:6e:6e:
                    ae:bb:46:ef:0f:9a:a0:95:da:7e:36:9c:dc:c0:88:
                    47:07:d6:9e:11:39:27:e4:a3:c8:6c:a4:57:ff:c7:
                    5a:cd:b9:88:1e:ad:7b:40:f1:17:ed:fb:f4:b1:79:
                    e9:7d:77:23:35:b3:f7:d1:65:a1:8c:40:23:c5:4e:
                    10:e1:54:cf:23:c4:5a:91:a7:d6:b9:5c:07:dd:9d:
                    45:05:f1:b4:bc:06:c5:97:b6:08:b0:60:36:07:f4:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:7A:DE:15:06:AF:5C:8C:BA:34:F1:F7:89:02:E0:13:88:68:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a476596-81d0-3278-ba69-aeed7427a7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:63:c9:70:63:35:f6:b8:ac:75:24:1d:0c:37:f6:75:07:34:
         21:cc:dc:9b:3b:52:34:6b:4f:c9:52:aa:c8:82:16:b8:d3:63:
         5d:d1:ee:ae:91:f1:0e:81:7e:1d:fa:35:19:54:eb:4a:67:e7:
         7b:db:47:5b:2d:0c:1d:b6:fc:ae:a2:56:21:7d:61:e4:8d:23:
         1e:77:0c:58:40:ab:f6:b3:f1:6b:fc:c9:67:82:26:b1:fc:db:
         a7:c4:51:1e:f4:31:c6:32:20:98:35:53:62:20:27:3a:2c:ba:
         61:92:cd:25:18:9a:93:89:40:0b:38:32:30:3e:c7:b1:b5:b2:
         59:b4:6f:7b:32:ca:da:4c:b6:3f:11:08:89:4d:23:db:30:92:
         40:c8:47:49:32:4f:ec:f7:84:21:16:44:8c:4c:56:13:54:19:
         fa:54:af:f2:09:b7:f5:a1:45:ca:5c:a0:a4:ce:02:39:f5:cc:
         57:59:06:37:1d:2d:9f:50:7c:78:ee:e7:e1:00:fa:46:4e:4f:
         81:24:bb:bc:73:af:2a:4c:7d:be:c2:74:db:31:40:cd:ac:92:
         a4:39:c2:ba:45:42:10:fc:2f:91:bc:99:2f:21:76:32:5b:4d:
         d0:9e:a4:ab:a7:57:d3:21:4d:03:11:a5:3b:e3:54:67:46:2b:
         46:d3:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:08 2024 by rpki-client on console-ams.rpki-client.org