Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa
File:                     785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa (raw, json)
Hash identifier:          Lj35KPX8z4LHoLfM9M0Q4i+HgBWgb6dPnTCg9LObRdU=
Subject key identifier:   50:AD:93:70:17:B7:17:6A:0B:97:55:9A:F7:97:E2:2E:81:33:78:44
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844F5CAAF677DDCCB73EAF00C40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     8987
IP address blocks:        130.137.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:af:67:7d:dc:cb:73:ea:f0:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=fd9ef5a7-b602-4d03-985f-a1ce12731c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:a9:af:61:42:2d:3f:9c:5d:1c:e6:30:2c:
                    26:f9:7b:a1:c2:3d:af:23:4a:ae:20:cb:fa:67:46:
                    ec:9d:91:f1:9e:de:66:4e:85:e5:1c:5a:d8:28:fa:
                    0c:64:19:d2:ff:69:fd:16:4f:cd:4e:15:5d:b2:90:
                    55:6c:2c:03:67:eb:6b:33:f4:02:d3:b3:6c:3c:11:
                    fb:12:07:48:09:63:ff:ce:9d:77:44:75:cb:a6:a4:
                    67:2b:d1:66:30:2c:f7:4e:58:a0:9a:63:e3:78:1a:
                    19:89:8d:20:3a:1b:ef:b7:3b:0b:c8:6f:38:27:82:
                    64:fb:5a:7f:0d:3a:73:b3:6b:df:19:40:98:83:4c:
                    e6:e7:5a:ce:b9:b2:5c:ed:16:8a:96:17:21:99:3c:
                    4b:fb:e9:47:7f:fd:69:f3:a9:e8:72:42:83:23:c1:
                    fa:e1:11:42:b4:e7:72:12:50:9f:ba:bc:85:90:a5:
                    07:94:98:21:90:8d:6d:d8:1a:71:cb:91:6d:93:f9:
                    9e:99:c4:5d:9a:d6:3d:97:01:57:a0:05:bc:10:78:
                    02:9a:70:e4:60:e0:e0:2b:45:8a:9c:7b:77:11:a8:
                    de:f7:2c:08:04:d9:93:8f:49:56:a4:ed:e6:e6:59:
                    b6:cd:ca:91:53:d2:fa:91:20:f8:0a:f2:f6:06:55:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AD:93:70:17:B7:17:6A:0B:97:55:9A:F7:97:E2:2E:81:33:78:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:02:95:5f:b6:28:56:52:86:fb:a2:44:8e:08:a5:c5:cc:da:
         ae:fb:98:0c:ad:20:8b:2a:69:9c:2c:d5:ef:9b:bd:26:9a:5d:
         86:c7:27:33:68:ba:84:8c:8b:d8:bf:89:41:8a:85:6a:ca:e5:
         d0:b1:d5:70:ef:78:49:94:d0:8d:00:3f:fb:ab:48:18:0a:d2:
         f7:e1:db:08:2a:22:60:2f:66:5f:61:73:7e:4b:e4:8c:a0:f6:
         6c:e0:98:cc:4c:41:2c:f6:43:be:5a:80:d2:94:0f:49:bb:03:
         f0:fc:3d:c2:31:e0:2d:b6:90:bb:d3:dc:dd:df:d3:dd:6f:09:
         d6:42:e7:88:ba:a5:1e:53:c8:35:df:e9:44:3e:fb:c4:2f:ab:
         45:32:e0:cb:c9:13:9f:d1:b1:ea:d2:45:ed:fb:59:77:99:03:
         58:54:bf:ce:a9:57:d9:0a:66:21:73:7c:a8:14:c2:0b:ef:a5:
         3d:b6:79:5a:64:05:57:26:2e:a7:b1:70:da:ed:a7:79:c4:40:
         ea:6a:bb:35:d6:32:43:4a:4a:be:44:5e:38:91:a3:bd:70:95:
         ae:81:2b:c3:36:be:ad:d6:36:8f:12:84:9a:77:b2:f2:4d:39:
         86:2a:52:9f:60:b4:a5:fa:03:70:1f:50:64:9f:19:52:44:4f:
         1f:cb:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:02:59 2024 by rpki-client on console-fra.rpki-client.org