Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7ca45317-6d80-3b09-a538-1f7cd9ffd16d.roa
File:                     7ca45317-6d80-3b09-a538-1f7cd9ffd16d.roa (raw, json)
Hash identifier:          FZN2qIHKqVLMvEDmoOqvxMjKrlUe4/b3Pg4trrtR8FE=
Subject key identifier:   4D:1D:A2:A0:37:1E:C6:BC:7E:EB:D5:59:EB:28:C0:C7:8B:02:12:FC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483E1AA531B9D862BE85247C00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7ca45317-6d80-3b09-a538-1f7cd9ffd16d.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.137.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:a5:31:b9:d8:62:be:85:24:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=6ad09eb4-7046-4382-a9f6-149b8720e2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:da:9f:0d:45:fd:f7:15:62:f8:a2:e1:9f:
                    7e:92:2e:17:e2:7e:41:0d:1c:73:79:a7:b3:a5:a5:
                    6f:9b:9e:3a:80:66:70:48:36:a9:44:a1:be:86:e5:
                    96:68:0f:ce:1f:61:20:21:e0:2d:ab:37:9e:07:ee:
                    98:88:72:78:25:65:d5:59:72:d0:b1:5f:8e:4f:c7:
                    34:f6:de:af:25:04:23:58:25:ec:47:0c:42:fc:5c:
                    46:65:e7:74:5a:e4:9a:1b:83:c0:62:75:74:71:2b:
                    12:13:01:40:82:94:79:9e:f8:a0:9e:8b:e8:3d:a1:
                    4e:4b:3b:8d:e8:c3:67:1d:cb:cd:05:a8:7d:13:c9:
                    05:e6:cd:0f:09:24:fb:47:67:ef:f0:08:8b:1c:28:
                    ca:b7:8e:72:f4:91:5c:1c:be:8b:63:cb:f8:d6:21:
                    19:21:16:b7:63:41:75:b2:c3:20:a2:a1:f1:33:6c:
                    d6:81:63:81:4b:c9:5e:fa:46:21:d9:29:a6:5a:48:
                    cf:10:71:54:05:e3:30:23:d6:5b:9f:eb:5c:00:a0:
                    f2:2a:30:eb:9e:a4:d1:c9:03:8c:a3:c1:66:b5:85:
                    38:7e:c7:4f:f7:b9:af:26:b1:a8:da:a1:5c:77:77:
                    cd:11:f8:28:af:24:e0:4e:20:12:d7:67:77:01:b3:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1D:A2:A0:37:1E:C6:BC:7E:EB:D5:59:EB:28:C0:C7:8B:02:12:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7ca45317-6d80-3b09-a538-1f7cd9ffd16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:71:f5:f8:ba:24:4a:cc:78:9b:39:8c:57:c1:ce:b6:2b:fa:
         99:f0:75:ec:a2:7d:ae:6f:6e:61:de:62:eb:e0:81:d5:46:a9:
         21:e5:80:53:4d:e7:b1:4c:ff:30:75:06:fc:f7:7c:9e:c2:70:
         70:ac:1b:a4:25:18:14:e7:0f:33:d8:50:a5:72:4b:a2:ad:b2:
         5e:4f:df:ac:aa:4c:0d:89:4b:46:eb:eb:c8:1f:0e:10:dc:16:
         3d:fb:ff:47:bc:38:67:bd:d4:cf:7d:68:e8:f2:ec:16:b6:5c:
         bf:17:12:e5:29:16:1b:82:1e:2c:f5:3c:e8:77:ca:f4:5d:ef:
         dd:ad:a7:7b:b5:5c:81:bf:54:7a:a3:a5:ad:cf:4d:b2:f2:2b:
         79:be:f5:a6:23:da:af:dc:66:5e:96:e3:a9:00:38:21:9a:26:
         ae:34:ac:64:97:f6:24:1b:ba:97:3b:dc:5c:09:a0:3d:03:87:
         04:aa:0e:70:e6:58:f4:4f:61:16:be:c6:98:75:34:05:5c:4e:
         d3:74:2c:f7:c9:6e:39:14:5e:57:1f:5f:6d:fd:b9:4c:7e:79:
         ec:b1:56:41:49:f2:44:c3:b2:1d:f3:20:80:5f:23:54:b2:76:
         fd:08:45:be:99:76:84:c9:7b:68:27:29:6f:d4:d2:51:b0:cb:
         2a:dc:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:46 2025 by rpki-client