Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a000bca6-a948-35de-b080-fd4c47226ab6.roa
File:                     a000bca6-a948-35de-b080-fd4c47226ab6.roa (raw, json)
Hash identifier:          1SkY1F3++Oj+nKC/XX8+WmYzRc/NsASv+D+2PpzMC7Q=
Subject key identifier:   87:4D:8D:80:26:1B:67:D6:CA:FE:F2:F7:A2:D4:24:54:65:AC:8D:E3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475910BA55EDBFDC21D961DD00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a000bca6-a948-35de-b080-fd4c47226ab6.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        130.137.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:ba:55:ed:bf:dc:21:d9:61:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=a0ec65c7-273e-4ba0-9929-fe5488c28440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:33:27:36:8e:02:89:ad:91:2f:8e:16:5e:
                    c1:aa:7f:74:7d:4f:20:a1:7a:0d:39:a4:98:31:89:
                    b5:66:dd:e7:a3:2a:71:25:7f:f6:69:da:d4:1f:df:
                    3f:c4:c1:ec:cd:67:39:cd:ba:52:b1:82:11:2f:53:
                    91:a7:08:29:b7:56:26:04:41:60:0b:cc:60:90:be:
                    eb:8f:36:ba:45:b2:a7:36:b9:c4:45:d4:59:6d:e1:
                    0b:26:62:18:2b:51:2f:e4:11:2d:34:7f:c7:31:aa:
                    a6:b7:a7:8b:1e:e3:22:e4:f8:04:7e:71:4b:09:db:
                    a2:ad:eb:f8:97:ff:cd:4a:35:cd:80:c8:e3:5b:a6:
                    c8:ba:e9:66:2a:8b:1f:ba:55:7e:26:f3:7c:30:c5:
                    9e:5f:60:30:98:85:6d:2a:87:c7:f2:2a:15:49:6d:
                    de:34:2d:27:29:74:fd:a6:89:46:33:f3:2b:60:cd:
                    08:d5:ce:03:5f:03:c5:8f:8d:a6:cd:ee:4e:0d:92:
                    f6:c6:fa:04:0f:e5:ab:f7:10:ce:b0:5c:e6:d3:0b:
                    08:40:c9:d8:58:44:b6:2e:9b:41:60:ac:7e:c1:33:
                    eb:82:8a:e6:f7:9b:02:58:ff:3a:56:80:d9:70:4a:
                    46:9f:c4:f3:47:0e:17:dd:fa:2e:f4:5e:f6:91:05:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:8D:80:26:1B:67:D6:CA:FE:F2:F7:A2:D4:24:54:65:AC:8D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a000bca6-a948-35de-b080-fd4c47226ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:21:e7:62:d3:4c:fe:58:1d:05:51:ec:68:8d:86:52:0e:
         b8:43:a7:e2:da:7e:ad:d7:20:e9:25:1e:93:59:c9:34:8a:96:
         55:25:36:4b:7f:99:b5:fd:74:eb:4d:1f:e9:7e:9d:95:03:d5:
         df:ec:ba:71:f3:5c:1d:af:d0:24:b0:61:be:47:d9:c2:5a:f7:
         ff:9b:7e:f7:bc:73:01:ba:68:43:40:6e:df:35:8e:b5:7f:c2:
         ec:35:f4:62:5a:50:39:57:c9:e7:ed:2d:26:b2:66:28:bc:fd:
         dd:90:54:64:a6:73:f4:4e:9a:f6:6d:e3:1f:ee:34:11:96:0d:
         78:9e:c9:ee:0d:53:40:72:85:a4:c9:d8:39:f6:cc:93:49:48:
         2b:e7:5c:d9:53:96:bb:20:3e:ad:c1:10:d6:04:c6:c7:81:44:
         47:5a:5d:8a:21:ec:5a:27:70:13:20:e4:76:ac:1c:ef:4a:4b:
         bf:83:b0:31:7c:33:17:91:d9:90:2c:b3:f2:84:51:54:21:6b:
         c7:82:fe:5a:14:ca:43:fc:1d:eb:fe:a1:8a:74:3d:35:85:0a:
         76:c1:8f:c0:6e:fc:2a:fe:7a:5a:91:af:b0:d4:50:84:d8:9e:
         09:77:bb:73:af:29:75:61:0c:65:57:5d:4a:5a:0a:da:1e:36:
         93:ae:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:22 2024 by rpki-client on console-ams.rpki-client.org