Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f69ec2f-8b42-385c-86e9-585793c72a07.roa
File:                     8f69ec2f-8b42-385c-86e9-585793c72a07.roa (raw, json)
Hash identifier:          HGkI9HqkBCC9YBy8JlJuKs3kwRqEM80jvWnVi60gLUQ=
Subject key identifier:   E6:F8:22:47:71:B0:1C:64:C0:79:D9:02:3A:A2:48:58:61:05:7A:2C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285847299B1FC2D53C2EE035A809E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f69ec2f-8b42-385c-86e9-585793c72a07.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1f:c2:d5:3c:2e:e0:35:a8:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=b163549d-7b02-4e98-be01-3ef8d7bd5127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:1f:08:93:91:d5:09:0a:47:26:78:91:5d:
                    ca:7b:e6:63:57:23:f4:72:30:4f:2f:28:98:91:83:
                    8f:f6:84:da:f2:35:a3:e1:15:bc:38:67:d3:00:4b:
                    c3:0a:07:76:cc:94:51:4b:16:94:f6:84:70:2c:83:
                    f2:4f:1e:9a:b6:fc:3b:16:9f:49:44:9a:a1:c6:88:
                    b3:45:e7:6d:b9:4c:fc:e0:a6:64:34:9b:ab:10:12:
                    4d:c5:ef:13:73:76:7a:c5:66:79:44:89:07:bd:17:
                    66:f0:b1:fc:38:fb:1f:18:a4:3e:1e:3d:50:e4:b9:
                    a6:85:4f:2c:03:e1:13:53:3f:c0:ac:f2:a3:d2:53:
                    53:72:cb:a3:94:cf:35:43:4a:92:4f:36:90:48:7c:
                    5f:bf:37:82:c0:8a:b4:b0:05:1b:c5:fb:5a:fd:cd:
                    6b:44:63:5e:f1:fb:6a:de:fb:73:bd:0e:90:f2:ff:
                    80:7e:67:eb:50:65:7b:61:46:10:4e:b1:8f:2c:7d:
                    44:0e:2c:43:71:2b:e7:ac:bf:77:af:bb:c4:04:2f:
                    83:ca:a2:6c:cd:d7:2d:f4:9c:bf:3b:20:7a:92:6a:
                    58:28:17:d6:01:b6:91:a1:3d:9f:c0:8e:f9:98:80:
                    45:57:5d:72:08:02:f0:23:d9:4e:dd:b5:08:66:7f:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:22:47:71:B0:1C:64:C0:79:D9:02:3A:A2:48:58:61:05:7A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f69ec2f-8b42-385c-86e9-585793c72a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d4:04:2f:3b:0c:31:19:06:7b:3f:98:d4:a3:b5:fe:54:53:
         26:f5:35:af:13:d9:94:77:15:4f:4c:3a:55:ca:77:6c:b9:c4:
         93:1a:3e:0a:82:05:33:68:ba:3c:2c:71:bf:c4:55:e5:cc:fe:
         b5:12:9d:58:26:f2:5a:7e:eb:60:99:c0:df:31:ee:58:c8:dc:
         a2:9d:00:02:35:60:2b:42:46:51:30:0e:0a:92:c3:29:55:20:
         91:ba:59:09:5a:34:03:8d:1b:76:95:bf:2c:18:c5:db:2e:c8:
         76:65:5e:94:da:de:c9:94:6f:5c:9a:c4:56:55:92:45:ea:be:
         34:9d:e5:0e:fb:10:6b:18:22:f9:e1:1d:da:00:bf:b0:4e:a7:
         85:03:9f:37:83:52:07:ac:9d:99:d3:63:61:cc:eb:7a:42:46:
         ee:5a:b7:24:04:c4:8e:92:61:33:b0:27:de:32:16:0a:82:9e:
         67:78:79:da:98:fd:9e:ff:95:8b:9c:6f:55:a3:17:5a:9f:3f:
         e7:7e:62:42:d2:67:77:d8:25:21:3e:55:c2:a6:8f:9a:c5:8a:
         b6:34:6c:b9:bc:a0:3e:9a:33:64:be:93:a2:e9:35:86:d8:82:
         cc:54:d3:cc:22:2a:4d:f1:ba:64:22:43:73:60:ec:16:50:00:
         37:53:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:50 2024 by rpki-client on console-ams.rpki-client.org