Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/829634b4-d940-3e3c-a7a8-04c9d2172686.roa
File:                     829634b4-d940-3e3c-a7a8-04c9d2172686.roa (raw, json)
Hash identifier:          71jo/bBVu+CfitebaJkZjciDAC0Xh6NudlfiqZc4GM0=
Subject key identifier:   09:47:AE:1D:C2:CF:97:A3:1D:B1:97:C6:57:A8:F3:CB:F2:32:26:E7
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285847F584EE25AD6724D258DE7C00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/829634b4-d940-3e3c-a7a8-04c9d2172686.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     14618
IP address blocks:        130.137.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ee:25:ad:67:24:d2:58:de:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=c8fcc191-93b2-44f5-8462-4f02bd7a72c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:19:fa:dd:00:fa:ed:a5:a7:b4:89:5a:36:
                    31:f3:c2:1b:00:ff:4c:e6:02:73:70:ab:f7:00:ba:
                    ff:2e:ef:82:ac:27:3e:fa:45:6f:1a:81:b6:2c:67:
                    26:96:80:91:0a:8e:66:74:f6:be:82:da:f5:1b:0d:
                    19:8c:e8:73:ae:ee:b2:9b:49:ea:9a:51:42:e5:8e:
                    d5:73:70:06:a6:03:02:cd:7d:a5:92:0f:81:44:d7:
                    0b:14:10:a8:a6:f2:61:a3:a6:ba:60:6b:48:03:e9:
                    a8:d0:da:b8:c6:7e:d2:ee:ac:cd:57:16:53:4e:57:
                    be:c5:7f:a9:d2:2c:a1:ce:64:0a:c9:ac:26:6a:2b:
                    11:e4:49:94:e8:16:57:69:b8:c9:59:0f:5b:ae:fc:
                    b8:ef:9c:84:2f:42:cf:1c:15:bf:2e:16:00:4e:34:
                    19:c6:ec:51:0e:fa:af:27:c9:6a:d8:7e:f9:d7:10:
                    b8:38:3e:17:71:34:8a:b2:eb:80:45:3c:07:7b:66:
                    6f:74:be:f6:8c:33:b8:73:7f:0e:92:7c:9d:95:1a:
                    ee:54:06:5f:d2:e6:d3:ab:e9:a9:e8:af:eb:24:da:
                    ee:ca:29:d4:00:c8:9c:35:34:59:c0:a4:28:ea:c1:
                    2b:c4:d3:4d:cd:ec:77:cd:42:c0:2a:a4:0b:d3:f3:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:AE:1D:C2:CF:97:A3:1D:B1:97:C6:57:A8:F3:CB:F2:32:26:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/829634b4-d940-3e3c-a7a8-04c9d2172686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:da:2c:87:80:0a:37:50:0a:10:ca:97:38:85:2e:4d:9a:e6:
         2b:0d:64:3f:1e:85:b7:32:73:c5:87:27:3f:3a:c5:37:02:73:
         d1:21:5c:f8:3f:bc:bf:c4:3a:b0:a2:4d:28:b3:84:a3:57:04:
         85:75:f8:77:34:bb:89:33:a5:6d:e4:44:64:3c:3a:bf:30:d3:
         88:74:b1:61:c5:27:a3:5b:dc:e2:d1:d8:96:d0:42:4f:34:50:
         c8:69:34:ed:33:2b:ec:cc:d4:c9:9e:62:2a:44:99:ed:04:93:
         1b:d7:a7:9a:e3:6e:0f:be:39:b9:8b:9c:17:d3:42:2f:ca:05:
         82:09:6c:b8:53:02:6a:9d:45:d3:f5:13:be:a6:4c:2a:9c:ef:
         99:ed:d5:08:e1:f1:83:a5:cc:b8:2d:b7:a3:96:d2:ac:46:91:
         be:58:15:e5:52:66:86:7c:b9:53:c2:cf:28:39:ec:b0:d6:94:
         59:a5:0f:19:79:61:03:a6:9c:60:c7:e7:b9:dd:c3:b0:51:b7:
         fb:98:32:05:28:97:ae:f9:a9:11:1a:3e:e0:1a:f1:84:c5:70:
         35:93:dd:3a:c9:cf:fc:95:1b:1e:3a:78:23:9a:a6:26:f9:79:
         bb:9a:eb:4e:4e:d0:e9:6e:21:4f:7d:8e:d5:6e:ad:7f:72:be:
         b6:20:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:22 2024 by rpki-client on console-ams.rpki-client.org