Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa
File:                     a47d3352-10f4-3335-bf83-7e70062a6086.roa (raw, json)
Hash identifier:          G+iurEko1jIrk+7yQdlTFD5yRhW5OOOHn00sdAWNWqU=
Subject key identifier:   5C:3B:A0:7D:30:74:D2:9A:55:9A:47:54:18:F2:C5:D9:C9:3D:4C:4A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844BC8FA9FE13CB70E049A19080
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa
Signing time:             Wed 31 Jan 2024 14:00:30 +0000
ROA not before:           Wed 31 Jan 2024 14:00:30 +0000
ROA not after:            Tue 30 Apr 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        130.137.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bc:8f:a9:fe:13:cb:70:e0:49:a1:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan 31 14:00:30 2024 GMT
            Not After : Apr 30 13:00:30 2024 GMT
        Subject: CN=c17b8831-252f-4bd4-8a03-5d7157818f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:00:66:9f:15:8e:37:ce:d1:4b:38:ae:7d:
                    dc:7e:dd:18:a0:88:46:c8:76:cc:bf:35:e3:f5:99:
                    19:47:4a:04:f6:1b:36:02:99:1f:09:01:46:dc:30:
                    a1:20:03:05:e2:9f:1f:31:52:21:b7:65:e0:fe:90:
                    f6:f6:1e:18:1c:39:57:90:d4:5e:47:6a:e5:57:df:
                    5f:4b:55:ec:03:74:7b:ba:62:43:64:16:e1:e5:36:
                    80:c7:92:7b:16:0a:16:7b:10:23:df:87:15:f1:9a:
                    f8:c2:86:d2:60:92:41:52:4c:aa:07:24:5e:5a:cb:
                    20:ac:2b:3f:b7:dc:51:07:20:70:c7:5f:80:09:ad:
                    31:9f:41:d0:c6:bc:2d:36:73:14:cd:f6:91:69:3e:
                    19:17:a9:f6:50:80:ab:8d:4d:10:0c:b2:41:60:a3:
                    e4:bf:b0:de:32:04:ae:3b:25:ef:ce:74:f4:e0:af:
                    ff:6d:a8:b3:ff:1c:7f:81:a2:5e:b0:05:83:26:bd:
                    1c:96:63:82:01:ac:96:a0:88:81:82:b8:ad:c5:35:
                    60:01:76:d2:34:ca:18:9f:86:a4:c6:a7:99:1e:2c:
                    bb:0b:71:ef:35:a4:10:c2:85:c3:e9:cd:f4:7a:d9:
                    70:76:3b:d0:ef:74:9f:40:80:dc:59:d3:d4:98:8d:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3B:A0:7D:30:74:D2:9A:55:9A:47:54:18:F2:C5:D9:C9:3D:4C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:30:1b:e4:8a:4a:46:7c:d8:7a:f5:06:14:b3:02:3d:51:96:
         73:9c:47:16:f8:a8:e8:ef:d2:39:fb:cd:71:de:f7:4b:07:ea:
         26:a3:83:82:d0:7d:37:26:e7:db:c1:fb:ec:41:31:5a:f9:2f:
         70:e6:91:9e:3c:e1:75:34:c9:55:2b:a5:ed:ff:9b:7e:c3:4d:
         49:52:2b:2f:9f:d2:73:5e:dd:1d:4b:cd:c7:cd:8c:fb:34:13:
         2a:20:7e:a5:04:90:ad:31:1d:13:d5:bd:a3:8c:08:70:f8:f8:
         a7:6e:4b:5b:d1:7f:07:53:75:0a:7b:68:d8:66:db:e5:36:cc:
         d7:79:a2:32:a7:04:8d:e9:9f:8d:f3:c1:b6:6a:ab:f2:4b:de:
         25:53:ca:50:4d:64:20:5d:55:b7:b3:52:35:78:75:85:fd:18:
         ee:b9:f9:d1:2c:9e:92:37:d1:57:f8:d8:d2:ca:a0:24:42:1b:
         e3:96:46:22:3f:47:f6:a0:7c:57:1b:1e:1d:ed:02:1d:a4:6f:
         5f:7f:13:e9:83:c1:13:18:15:dc:49:90:96:3f:87:97:bd:47:
         86:20:9b:b6:1c:36:12:f3:ed:67:fc:f9:ec:90:19:d5:db:99:
         19:0a:fb:7b:4a:4f:a2:fb:31:dd:9d:cc:04:2b:de:ca:ed:a5:
         34:40:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:53 2024 by rpki-client on console-fra.rpki-client.org