Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa
File:                     91b4f611-70ec-3d76-a42a-76c6bf794529.roa (raw, json)
Hash identifier:          61lWEdoApPBDo6n0n5dnYpCa+dEOJCCaXaaHhKnBb0E=
Subject key identifier:   85:56:90:81:4A:AD:C8:DD:8D:5D:1D:2D:E9:20:76:0D:5F:F6:D9:04
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845B38361F1D5C2B7424942C580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     8987
IP address blocks:        130.137.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:61:f1:d5:c2:b7:42:49:42:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=29fbd787-952e-4ecc-a6c2-de1596ac7d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:76:cd:33:57:b7:e4:85:f8:c5:5f:7e:76:
                    84:b5:34:db:33:93:b4:f7:fa:c8:25:58:ff:14:1b:
                    bd:98:b0:59:f8:52:dc:0e:8e:1e:c4:fa:a1:15:cc:
                    02:a3:b0:a4:a5:1d:8b:63:50:85:7f:50:85:ec:f0:
                    9f:0b:3a:0e:80:1b:38:0f:75:da:60:93:d2:d0:5a:
                    96:66:b6:ed:3e:82:c9:9a:72:12:86:96:97:d4:a9:
                    81:be:89:6f:9f:f6:24:f9:27:13:b3:c1:df:3f:ec:
                    bb:b4:f6:84:5f:a5:91:7b:9f:41:9c:6b:fd:e4:35:
                    9d:1a:19:f5:7b:75:e2:7e:78:18:1d:e9:f2:fb:45:
                    13:80:8a:48:67:fe:46:8f:38:11:68:a7:8f:a4:8f:
                    1a:ce:30:36:7f:de:be:4c:13:5c:8b:c7:b0:8d:b5:
                    54:0e:a6:e5:50:d5:5a:ef:84:44:ed:f4:de:21:38:
                    7d:7c:6c:47:9d:2b:eb:b8:b8:4e:58:0d:de:d4:c2:
                    c0:b7:bc:3a:91:cc:81:d3:70:80:87:20:d2:aa:c8:
                    dd:1d:ea:04:35:3b:57:69:3a:24:67:c8:25:18:fb:
                    6b:9c:53:76:80:d8:b6:19:d4:8c:b4:97:01:6c:b8:
                    16:60:8f:05:7b:29:86:ae:80:56:d1:1f:f0:e1:ee:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:56:90:81:4A:AD:C8:DD:8D:5D:1D:2D:E9:20:76:0D:5F:F6:D9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:34:c3:94:89:8a:0a:f8:2c:5b:a4:4b:f5:93:8b:e4:7c:
         7e:6c:70:3e:e0:0a:95:d9:a8:c6:3c:d8:f8:53:10:8e:48:2e:
         b2:c9:65:ef:06:3b:57:7e:6f:60:fe:d1:93:5b:75:a1:4f:22:
         d1:e8:69:50:fd:31:82:c5:77:75:55:2d:7d:79:69:ea:2d:b4:
         75:1d:18:fd:f6:fc:e1:4d:7a:a1:0b:38:c5:7e:c9:19:b9:f0:
         37:a4:35:19:31:7d:4b:b0:c8:ad:07:13:cc:d9:60:28:1e:be:
         83:2b:eb:76:b6:8f:0b:c0:af:e2:eb:1e:4a:9c:26:3e:2a:3c:
         00:4b:22:df:a4:da:c6:3d:fb:08:5d:7b:bb:50:d8:31:43:5c:
         80:0e:51:35:a0:2d:63:25:c5:e0:8c:a9:9f:51:a5:b3:54:3d:
         52:0f:8b:0e:15:83:ab:51:cd:f9:97:cf:a6:b7:d1:78:59:af:
         e5:42:47:97:8b:d2:92:2b:69:e0:76:87:42:bb:2b:db:49:5c:
         8f:4d:1a:56:d6:f5:2d:24:d1:9f:13:f4:3a:00:29:42:b1:58:
         fc:b5:be:2f:bc:78:df:18:eb:be:dc:bd:7a:c9:cb:09:01:58:
         03:77:84:46:75:2f:41:7c:99:15:fd:ed:6f:45:a5:ae:34:7e:
         07:e9:71:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2Hx1cK3QklCxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
MjlmYmQ3ODctOTUyZS00ZWNjLWE2YzItZGUxNTk2YWM3ZDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcp2zTNXt+SF+MVffnaEtTTbM5O09/rIJVj/
FBu9mLBZ+FLcDo4exPqhFcwCo7CkpR2LY1CFf1CF7PCfCzoOgBs4D3XaYJPS0FqW
ZrbtPoLJmnIShpaX1KmBvolvn/Yk+ScTs8HfP+y7tPaEX6WRe59BnGv95DWdGhn1
e3XifngYHeny+0UTgIpIZ/5GjzgRaKePpI8azjA2f96+TBNci8ewjbVUDqblUNVa
74RE7fTeITh9fGxHnSvruLhOWA3e1MLAt7w6kcyB03CAhyDSqsjdHeoENTtXaTok
Z8glGPtrnFN2gNi2GdSMtJcBbLgWYI8FeymGroBW0R/w4e5S3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVWkIFKrcjdjV0dLekgdg1f9tkEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTFiNGY2MTEtNzBlYy0z
ZDc2LWE0MmEtNzZjNmJmNzk0NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGT7NMOUiYoK+CxbpEv1k4vkfH5scD7gCpXZqMY82PhTEI5ILrLJZe8G
O1d+b2D+0ZNbdaFPItHoaVD9MYLFd3VVLX15aeottHUdGP32/OFNeqELOMV+yRm5
8DekNRkxfUuwyK0HE8zZYCgevoMr63a2jwvAr+LrHkqcJj4qPABLIt+k2sY9+whd
e7tQ2DFDXIAOUTWgLWMlxeCMqZ9RpbNUPVIPiw4Vg6tRzfmXz6a30XhZr+VCR5eL
0pIraeB2h0K7K9tJXI9NGlbW9S0k0Z8T9DoAKUKxWPy1vi+8eN8Y677cvXrJywkB
WAN3hEZ1L0F8mRX97W9Fpa40fgfpcd4=
-----END CERTIFICATE-----
Generated at Mon May 6 02:00:41 2024 by rpki-client on console-ams.rpki-client.org