Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa
File:                     a93c0d05-33a8-334f-8413-c6ac78b587f0.roa (raw, json)
Hash identifier:          dO/a57tNUs2J2quBMPtfeda8MeesZ8i0WuwWoEzc5j4=
Subject key identifier:   A2:DD:FC:BD:47:A9:FB:A1:79:1A:0F:32:82:A9:D8:91:B6:13:44:79
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845B38361AD8714D70E7FF0FD00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     8987
IP address blocks:        130.137.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:61:ad:87:14:d7:0e:7f:f0:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=9b9b6f02-21f7-4902-9fa2-38b4103d2e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:f6:9f:5e:9e:29:07:cb:d2:79:0e:56:2b:
                    20:5c:3d:91:6c:96:f1:da:ab:82:b4:ba:b4:8a:55:
                    04:82:bb:03:f9:fd:af:95:38:6c:de:dc:29:ab:f0:
                    69:ed:4d:48:bf:83:6c:df:69:80:d9:ff:04:ac:1c:
                    2d:7d:02:95:c4:ce:66:e6:33:66:a9:97:c1:fb:8c:
                    d3:e6:80:f4:d4:42:09:2d:71:3f:11:58:b5:53:b5:
                    10:8b:6a:f9:ae:24:e3:d7:dc:2b:f7:0f:5b:dd:e5:
                    bf:c1:f4:a5:f7:08:2c:3f:44:94:6c:5e:e7:80:71:
                    23:4e:fd:46:15:70:72:bd:8f:cc:a3:89:ac:db:90:
                    a0:0d:ff:50:38:e2:96:50:85:0e:c9:17:f6:95:5e:
                    45:2c:e8:f0:89:17:79:ce:c8:fe:9a:5b:7b:df:d0:
                    99:c3:f1:1c:60:41:91:de:23:28:c7:1f:a4:b3:5f:
                    0e:51:b8:0b:ab:41:24:9f:ef:75:e3:34:9f:d0:a8:
                    33:32:cc:85:c5:88:d8:ec:ee:73:b6:39:b9:9b:a1:
                    22:8a:5f:f4:be:cc:1a:51:5a:60:1d:30:1d:8d:e0:
                    c2:a4:00:41:b8:9c:c5:6d:70:2f:62:d8:b2:0b:c0:
                    d8:cd:ca:a9:fb:6c:5d:9d:81:27:96:5d:32:2f:ab:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DD:FC:BD:47:A9:FB:A1:79:1A:0F:32:82:A9:D8:91:B6:13:44:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:88:4a:8b:db:4a:06:09:17:dc:90:7e:d9:28:b1:95:48:98:
         0b:28:44:c0:f2:59:09:2e:3b:74:88:ff:16:1d:3a:fe:33:95:
         56:35:16:0e:43:09:25:92:ed:6a:bd:4c:4b:d0:36:e6:ca:2d:
         a7:29:d7:98:74:70:7e:7c:e4:ba:cc:37:be:9a:48:27:50:70:
         61:4a:f7:b8:c7:8b:82:44:1c:63:53:43:06:56:7e:a6:7c:b2:
         28:8c:10:04:43:8c:c5:cf:a5:ba:ad:06:8c:24:e8:e7:ab:e5:
         dd:72:f8:45:ca:62:19:c6:72:d2:e5:1d:aa:06:01:09:e6:e9:
         36:6d:dc:04:c3:a0:42:3b:5b:3d:d0:c7:53:f7:49:dd:61:76:
         6a:18:a4:7c:e0:8d:bd:2d:fa:cb:35:67:0f:98:85:78:71:36:
         82:d7:4e:0a:3e:64:da:d8:35:ad:24:35:15:d3:c4:7b:7a:59:
         2c:49:f3:7a:47:92:dc:55:67:9f:ca:37:10:74:7f:46:8d:39:
         ca:a7:39:56:6c:31:5b:d1:3b:6f:ac:ce:da:b0:40:e2:19:60:
         4b:67:60:e9:fd:7b:29:75:32:e1:aa:43:b4:56:7f:2a:14:a3:
         dd:48:62:42:79:a6:79:08:02:f5:58:48:af:95:80:eb:01:95:
         1f:1e:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:39:59 2024 by rpki-client on console-ams.rpki-client.org