Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/808adc70-aec2-33a4-b66c-15d8f92d820d.roa
File:                     808adc70-aec2-33a4-b66c-15d8f92d820d.roa (raw, json)
Hash identifier:          jRtNekitsJJ9GeHYdhQLIOhJ/lCXBGjzlNsfmNgdLfM=
Subject key identifier:   A3:E7:52:22:E8:EA:ED:5A:71:90:7B:A0:A4:95:62:C7:FB:B9:1D:6B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483E1AADC4264188E6182DD140
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/808adc70-aec2-33a4-b66c-15d8f92d820d.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.137.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:ad:c4:26:41:88:e6:18:2d:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=aa713f4c-bfc8-4224-85f2-90146df1973a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:e1:5d:d9:fe:68:8d:f1:12:36:06:ca:22:
                    15:b6:bd:5c:4c:23:b6:8e:d7:95:ac:3d:c3:46:40:
                    61:39:97:75:1d:95:2f:95:ac:e0:03:6b:c7:2e:ac:
                    28:06:3d:d7:f5:24:54:73:32:6c:8c:e1:95:aa:79:
                    32:ac:22:df:3d:d9:6a:f6:8f:86:99:37:60:32:1b:
                    ea:11:67:04:56:01:cb:63:d7:fe:6d:f8:60:ae:b4:
                    d6:42:17:2a:d5:67:53:c4:f0:72:47:42:7b:2f:cc:
                    bc:e6:7c:14:6c:60:24:06:0a:a8:69:65:ea:9f:f2:
                    e3:77:12:3b:97:08:30:be:68:65:f4:21:ae:41:1c:
                    1c:89:34:88:a5:8b:46:15:de:f6:a1:c3:cb:7b:e2:
                    e9:60:7c:1c:80:06:22:24:66:63:d7:6b:87:d6:ff:
                    76:ae:39:00:a4:c8:33:13:69:15:ff:5c:4c:26:5d:
                    75:b9:ad:6b:5e:c6:d8:74:b0:61:03:e6:02:e0:5c:
                    a0:65:dd:f4:28:1d:18:07:0a:f4:c3:c4:bd:11:e3:
                    35:84:5f:ce:66:47:25:33:70:69:1a:00:3c:0d:a2:
                    9d:30:06:5c:de:89:60:c0:5c:ac:f7:2e:6f:af:df:
                    2e:ee:a5:73:0d:0f:f0:a6:43:13:80:36:ae:eb:d9:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:52:22:E8:EA:ED:5A:71:90:7B:A0:A4:95:62:C7:FB:B9:1D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/808adc70-aec2-33a4-b66c-15d8f92d820d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:07:ff:f2:00:19:59:b0:67:68:fb:83:fe:7e:a8:bc:c9:20:
         4e:29:64:78:de:dc:43:d6:96:de:b3:23:d5:5b:e7:f9:bf:02:
         41:5d:76:15:99:3d:48:09:a7:28:b6:13:6a:49:b1:02:de:54:
         14:c9:dc:a8:ac:0a:d9:d6:29:26:d5:b8:44:18:72:89:37:bc:
         d0:1b:27:8f:f9:9d:19:b0:08:0f:e1:7c:bf:30:46:f2:e3:d4:
         d1:a8:0a:c9:a0:7e:cc:8e:9f:b4:30:17:2e:a5:9b:cc:2a:81:
         41:7e:c6:1e:88:23:2f:aa:f9:5d:d2:90:7e:a0:e4:2c:9f:d7:
         81:4e:a6:75:f6:aa:e6:97:f3:5b:53:d8:01:fe:8c:50:af:d7:
         26:d9:fe:30:10:56:de:49:2a:07:19:51:25:4b:6f:b1:b1:ff:
         f5:fa:c9:2a:10:ab:bf:78:14:86:8b:a6:d1:5c:a5:85:80:58:
         ce:af:d3:3a:96:f6:ef:ea:d4:6a:6c:6b:2a:29:3a:10:df:60:
         1b:f9:f8:5e:7a:5d:24:03:87:5b:01:12:a8:e3:75:2a:dd:d7:
         59:4d:4a:1d:e6:1d:a0:e3:80:d1:9f:ff:25:7e:68:44:33:54:
         bf:dc:8d:f8:ee:b7:50:cc:b3:9e:63:ee:70:b3:b5:36:7c:06:
         54:c9:eb:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gq3EJkGI5hgt0UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
YWE3MTNmNGMtYmZjOC00MjI0LTg1ZjItOTAxNDZkZjE5NzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnujhXdn+aI3xEjYGyiIVtr1cTCO2jteVrD3D
RkBhOZd1HZUvlazgA2vHLqwoBj3X9SRUczJsjOGVqnkyrCLfPdlq9o+GmTdgMhvq
EWcEVgHLY9f+bfhgrrTWQhcq1WdTxPByR0J7L8y85nwUbGAkBgqoaWXqn/LjdxI7
lwgwvmhl9CGuQRwciTSIpYtGFd72ocPLe+LpYHwcgAYiJGZj12uH1v92rjkApMgz
E2kV/1xMJl11ua1rXsbYdLBhA+YC4FygZd30KB0YBwr0w8S9EeM1hF/OZkclM3Bp
GgA8DaKdMAZc3olgwFys9y5vr98u7qVzDQ/wpkMTgDau69nD/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPnUiLo6u1acZB7oKSVYsf7uR1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODA4YWRjNzAtYWVjMi0z
M2E0LWI2NmMtMTVkOGY5MmQ4MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAH//IAGVmwZ2j7g/5+qLzJIE4pZHje3EPWlt6zI9Vb5/m/AkFddhWZ
PUgJpyi2E2pJsQLeVBTJ3KisCtnWKSbVuEQYcok3vNAbJ4/5nRmwCA/hfL8wRvLj
1NGoCsmgfsyOn7QwFy6lm8wqgUF+xh6IIy+q+V3SkH6g5Cyf14FOpnX2quaX81tT
2AH+jFCv1ybZ/jAQVt5JKgcZUSVLb7Gx//X6ySoQq794FIaLptFcpYWAWM6v0zqW
9u/q1GpsayopOhDfYBv5+F56XSQDh1sBEqjjdSrd11lNSh3mHaDjgNGf/yV+aEQz
VL/cjfjut1DMs55j7nCztTZ8BlTJ6wk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:56 2025 by rpki-client