Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa
File:                     7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa (raw, json)
Hash identifier:          7AqsrRZZZTq4tB4wR27S93QpfzHvjmkaxM3LgJuuUp8=
Subject key identifier:   B2:30:42:E5:E6:AC:86:FB:73:D7:C3:2F:30:8D:7B:35:CB:61:4C:AB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475BDB6B7DCE1002FF79DF1240
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        130.137.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:6b:7d:ce:10:02:ff:79:df:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=3b3d5f02-5dfa-4a32-a7b7-b806d2aba883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:3d:f3:50:55:72:fe:7d:59:8b:ae:15:ff:
                    96:03:a0:a1:dc:a4:68:fe:2e:a4:8f:67:cc:25:10:
                    73:2c:c5:74:db:ab:b8:5e:c5:ce:2b:ca:33:d5:ff:
                    05:33:39:0f:03:e1:96:97:15:13:43:06:a4:a9:af:
                    0d:2e:2a:73:1b:10:cd:7f:17:89:15:46:32:cd:27:
                    2c:ac:c9:96:9c:1f:50:84:60:17:20:16:b5:4d:7e:
                    f1:c7:ce:d1:30:dd:8e:4c:71:cd:b9:bb:42:d6:89:
                    9a:50:bd:ea:d6:83:39:70:a9:24:01:c4:e4:49:36:
                    cd:fb:dd:0e:a1:2f:74:6a:12:04:1f:e4:56:69:1b:
                    ee:98:90:05:9a:20:f5:fa:b8:05:72:34:9b:d2:71:
                    29:e2:85:59:c8:b3:f3:1a:d0:17:60:f5:a5:13:df:
                    c0:c6:e4:0c:8c:85:01:47:f7:b2:58:1a:56:1d:2b:
                    de:11:b4:aa:1e:5f:0f:4d:15:ee:e7:ae:7a:a1:46:
                    6b:1a:dd:4b:65:10:80:93:71:c7:f8:f8:df:f5:4e:
                    a3:ec:da:c9:ed:0e:6b:a7:13:48:31:d9:60:d5:96:
                    dd:34:9b:09:5d:fb:ff:08:c5:03:00:5a:a2:02:16:
                    b9:31:17:9e:6c:d6:4e:0d:b4:6a:cb:1d:96:02:13:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:42:E5:E6:AC:86:FB:73:D7:C3:2F:30:8D:7B:35:CB:61:4C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:96:88:61:72:0a:e6:a7:a2:0b:ea:20:76:6c:09:fb:e7:99:
         d6:e9:40:87:d3:8f:8a:38:b9:b7:1d:17:ec:35:d2:2f:e4:bb:
         3f:ec:4e:3e:68:51:ee:ba:78:ad:92:57:59:30:e2:7a:08:cc:
         27:0d:7b:c0:1e:01:2a:55:12:fe:54:da:7a:97:8e:61:af:a5:
         ef:bc:d4:7e:f0:ca:55:5c:61:f8:e9:96:5a:ab:44:c4:d8:ad:
         45:dc:af:be:64:4a:cd:49:38:5e:f9:d0:b2:3f:d4:17:c4:1f:
         39:2c:37:82:0f:60:da:6b:c7:38:f4:07:cf:a2:95:42:0c:9a:
         bc:80:0c:70:3d:a7:9c:40:f8:4f:e2:27:e9:b6:86:71:f9:e1:
         79:14:50:7e:56:0e:72:10:74:b6:73:91:58:88:73:0b:eb:86:
         92:09:e3:94:7b:d8:15:f8:2c:b5:cd:64:d9:19:4e:e4:18:89:
         fe:0a:b6:7d:c7:32:4d:8e:cb:55:19:e3:b5:07:db:6e:f3:ea:
         cf:29:fa:54:0f:0d:da:e1:63:8e:69:ac:60:21:af:b0:1e:40:
         cd:ca:e0:24:3e:75:6d:bb:cf:07:b3:7a:25:90:2c:39:18:0c:
         84:e7:28:70:5c:f8:62:3c:14:e0:f4:4b:84:1b:fd:ba:76:c3:
         48:0f:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:49 2024 by rpki-client on console-ams.rpki-client.org