Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa
File:                     b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa (raw, json)
Hash identifier:          U9Xp6AvKWfM3O0JaDJ+HUk0M/87QDMCFynoMYKppUqE=
Subject key identifier:   22:CF:C0:42:A7:51:DA:D3:2B:EF:DA:02:E2:9B:40:8E:1D:F5:24:C2
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858459E93512AEAF31B6F24643600
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     8987
IP address blocks:        130.137.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:51:2a:ea:f3:1b:6f:24:64:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=b80f7f5a-4e76-4825-bb85-242a4efc0f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:ae:10:4d:c4:08:a3:3d:cd:36:d7:7f:3c:
                    a5:2d:7a:5b:4b:11:e3:eb:ef:53:2b:4a:99:8b:2c:
                    ef:64:9a:6e:c8:58:4f:6c:61:f4:b8:b7:89:7a:b1:
                    ed:61:5c:11:85:84:6c:a1:5e:26:b2:b6:d2:22:5d:
                    52:3b:c6:4c:e6:47:8b:d9:a5:6a:0f:f3:09:e7:cc:
                    53:1b:a2:b1:a7:ec:8e:f1:f7:0f:0c:3a:0f:1e:0f:
                    75:c9:db:66:4f:86:c3:7d:7c:f3:2b:06:bf:a4:1c:
                    cc:8b:e9:10:57:0c:32:5e:d0:03:22:f9:39:03:33:
                    cf:25:64:2a:04:7f:72:f9:ab:3e:98:8e:ae:bd:ad:
                    95:7c:b1:6c:81:a8:ce:d3:50:ca:b0:0e:c3:54:12:
                    ce:40:a3:47:42:99:91:52:e3:71:ff:6f:d1:81:c3:
                    2e:38:cc:6a:01:9d:e0:c2:4e:56:5a:ca:d8:d9:0b:
                    e4:1d:f0:cb:40:52:2e:fa:3b:d8:ba:af:56:7e:12:
                    ae:03:25:0b:34:b8:06:bd:c7:d5:9e:a3:0f:bf:14:
                    1b:64:52:0f:a1:6e:c9:dd:01:10:67:d0:b2:e1:ca:
                    48:83:e2:64:fb:d1:90:cf:c2:49:f2:4c:48:8b:3b:
                    25:4c:62:cc:3a:63:c9:14:a7:0e:17:bd:c2:34:44:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:C0:42:A7:51:DA:D3:2B:EF:DA:02:E2:9B:40:8E:1D:F5:24:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:5f:48:8f:16:f0:f7:08:3d:93:56:ec:77:42:bc:e7:54:
         a6:a6:d2:22:da:21:cc:4b:a3:a2:04:b3:15:45:fb:bd:6f:38:
         7f:65:1c:2a:c5:1c:3a:e1:1f:dc:ec:a0:52:e1:8c:05:7b:ae:
         d7:e4:05:87:0b:b9:22:8d:f2:6f:da:80:2b:81:60:2a:c6:db:
         dc:0e:2e:44:e0:0e:16:79:5f:6d:c4:8d:49:28:64:1f:0b:07:
         3c:1e:09:bd:3b:eb:b9:01:09:66:29:e9:14:b9:68:a0:68:fe:
         ef:5f:00:0d:07:0c:f1:48:3d:ec:b8:54:2c:77:b6:67:c4:f6:
         fb:a7:02:80:ce:aa:26:3b:c9:cd:a8:45:dc:9e:8e:45:9a:cb:
         a3:1f:ed:df:cb:5d:02:3e:83:7f:75:79:06:d3:be:e6:48:03:
         2d:58:94:43:9d:91:4b:c1:d0:74:77:a0:78:9a:27:52:0f:68:
         77:29:de:49:25:0a:1b:b9:a4:68:90:77:1e:88:d1:9b:36:67:
         2c:d0:f3:5c:41:72:80:3a:5e:73:cc:63:42:da:74:e2:c4:89:
         b4:85:a3:ac:24:f5:70:07:26:f4:84:f9:61:2f:77:22:38:42:
         21:b6:13:eb:aa:6d:f3:41:b0:b2:62:6e:c8:61:ca:0b:de:cc:
         77:29:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:42 2024 by rpki-client on console-ams.rpki-client.org