Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa
File:                     8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa (raw, json)
Hash identifier:          zRc8YUFQXXuyo94+GYUtDXnt/2lSwXHwSEEX82zxbGE=
Subject key identifier:   22:49:AE:2B:5E:38:3C:F9:6A:B2:A0:8C:B8:E3:E2:D1:AB:80:CB:15
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285847537B5D61203C156024B88000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        130.137.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:5d:61:20:3c:15:60:24:b8:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=3f25ec05-6728-45dc-a6cb-5c56d006a66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:75:36:f6:56:0a:34:d5:ad:f5:2a:40:5e:
                    57:db:87:4d:13:7d:f6:30:9b:e5:fd:f0:df:07:38:
                    0e:da:54:cd:a8:19:9e:c1:e3:0d:88:d8:e9:08:58:
                    bb:75:0e:92:9c:3b:7f:62:a1:91:4a:aa:15:69:cf:
                    ed:cd:1f:5e:17:e9:2e:ed:17:84:6c:be:d8:66:52:
                    b1:17:88:dc:44:21:51:de:4a:bb:01:7f:fa:ac:ac:
                    d8:35:18:d0:89:1f:40:b6:7b:2f:28:3b:33:20:26:
                    f0:9f:f9:5e:b3:7a:66:d1:62:56:ff:63:a8:7c:51:
                    91:0e:fb:73:13:ea:b4:02:7a:ab:95:be:42:28:b9:
                    e9:c1:85:3c:e5:70:11:cb:19:07:15:1e:fe:90:e1:
                    3a:cc:85:0c:8e:83:9a:0c:72:d8:af:a6:49:91:07:
                    7a:5f:c5:f3:dd:75:5f:76:b6:90:dd:c0:e7:c3:9c:
                    2f:b4:8d:95:d2:1d:a7:4a:f1:16:4c:f9:be:f3:38:
                    98:93:1a:2a:31:6b:e5:df:a6:57:c4:a3:95:ab:08:
                    6c:40:a6:9a:f6:b1:f6:88:5e:bb:0a:0a:38:c5:e4:
                    ca:35:8a:9b:ce:01:38:f8:31:17:32:ed:a5:2b:f0:
                    95:6e:a5:b0:ab:cc:6e:0d:ff:4e:82:5b:25:b6:09:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:AE:2B:5E:38:3C:F9:6A:B2:A0:8C:B8:E3:E2:D1:AB:80:CB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:78:83:5b:85:11:f3:7d:ab:4e:ef:18:6e:eb:4a:54:22:0f:
         2a:90:b6:2d:aa:2c:e2:f7:01:1a:89:32:3e:69:23:c4:ad:1b:
         ce:a6:71:65:2d:62:c0:a3:4c:b0:c8:91:ef:5e:60:ac:f1:88:
         5a:d5:9b:b4:30:a5:66:d3:fc:57:34:99:1a:b7:91:ef:3c:4b:
         fa:09:bf:b0:c8:72:29:f0:98:db:78:f5:cd:d2:c3:35:61:83:
         6a:17:6b:b4:06:21:ad:60:30:bc:66:7e:42:44:9b:3f:7f:56:
         98:64:b1:bd:83:6e:17:4f:7d:d0:d3:e1:b2:6d:28:65:fe:8f:
         95:7d:97:86:8d:a5:e6:31:c0:16:ab:65:95:ac:4a:e8:51:19:
         be:c1:bf:51:85:c1:06:45:17:af:f7:5d:81:a5:56:ca:fa:09:
         46:c7:30:6e:d6:02:9e:30:c3:04:9d:35:fd:80:40:a6:43:eb:
         09:e7:ec:14:88:54:fb:c2:7c:db:66:54:cf:48:69:dd:b4:3f:
         53:b5:c7:8d:e0:b8:6c:62:9e:8a:2c:32:b0:bc:b2:1b:7e:5f:
         0a:c0:4f:c7:f0:66:30:26:5f:e9:8c:7f:d0:af:bc:dd:bc:e4:
         49:5f:df:ee:e6:12:ac:ec:d2:f7:77:4b:cf:e7:52:2c:05:1d:
         9c:61:fa:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe11hIDwVYCS4gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
M2YyNWVjMDUtNjcyOC00NWRjLWE2Y2ItNWM1NmQwMDZhNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunN1NvZWCjTVrfUqQF5X24dNE332MJvl/fDf
BzgO2lTNqBmeweMNiNjpCFi7dQ6SnDt/YqGRSqoVac/tzR9eF+ku7ReEbL7YZlKx
F4jcRCFR3kq7AX/6rKzYNRjQiR9AtnsvKDszICbwn/les3pm0WJW/2OofFGRDvtz
E+q0Anqrlb5CKLnpwYU85XARyxkHFR7+kOE6zIUMjoOaDHLYr6ZJkQd6X8Xz3XVf
draQ3cDnw5wvtI2V0h2nSvEWTPm+8ziYkxoqMWvl36ZXxKOVqwhsQKaa9rH2iF67
Cgo4xeTKNYqbzgE4+DEXMu2lK/CVbqWwq8xuDf9OglsltgkBXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJJriteODz5arKgjLjj4tGrgMsVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGM5NWVjN2EtNTEyOC0z
OGQwLWJmZjAtZmNkYWI4NWU4N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZ4g1uFEfN9q07vGG7rSlQiDyqQti2qLOL3ARqJMj5pI8StG86mcWUt
YsCjTLDIke9eYKzxiFrVm7QwpWbT/Fc0mRq3ke88S/oJv7DIcinwmNt49c3SwzVh
g2oXa7QGIa1gMLxmfkJEmz9/Vphksb2DbhdPfdDT4bJtKGX+j5V9l4aNpeYxwBar
ZZWsSuhRGb7Bv1GFwQZFF6/3XYGlVsr6CUbHMG7WAp4wwwSdNf2AQKZD6wnn7BSI
VPvCfNtmVM9Iad20P1O1x43guGxinoosMrC8sht+XwrAT8fwZjAmX+mMf9CvvN28
5Elf3+7mEqzs0vd3S8/nUiwFHZxh+gc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:50 2024 by rpki-client on console-ams.rpki-client.org