Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b6f44fc8-d8bf-36bc-a8e1-5344a35189cf.roa
File:                     b6f44fc8-d8bf-36bc-a8e1-5344a35189cf.roa (raw, json)
Hash identifier:          mwpypFZuxpgeVYEP8hUfyZH8fsp7uA6Ha+FaxhKrPfE=
Subject key identifier:   1B:6B:DB:85:B7:B4:54:BA:E9:61:D4:0D:0B:BD:DB:CC:9C:5F:9D:95
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858456CF4E8F03C764ED12117C880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b6f44fc8-d8bf-36bc-a8e1-5344a35189cf.roa
Signing time:             Wed 03 Apr 2024 18:26:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Tue 02 Jul 2024 18:26:50 +0000
asID:                     14618
IP address blocks:        130.137.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:f4:e8:f0:3c:76:4e:d1:21:17:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Jul  2 18:26:50 2024 GMT
        Subject: CN=aa565e71-1a79-4471-ab03-0e0588e6f7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:94:45:d5:3e:24:22:c2:f0:6c:fb:7b:ea:c3:
                    52:a8:bd:f7:da:ef:06:ab:41:48:fd:39:e1:1d:73:
                    f0:5e:30:d0:92:97:84:77:00:c5:70:4f:57:cc:fd:
                    85:6b:27:42:2e:7c:18:f9:26:5c:23:bd:87:de:35:
                    f5:3b:83:9e:88:37:17:3c:34:fc:92:53:1d:4e:42:
                    1e:b7:3d:ae:16:46:98:6f:71:f0:c7:d4:db:13:94:
                    9b:0e:3d:d9:6d:4b:3b:d4:c8:7c:d9:9d:af:5d:53:
                    e7:aa:ab:c7:fc:11:a4:40:c1:e6:8d:f3:bd:d7:33:
                    2a:b1:ca:93:11:f7:3e:c2:eb:33:a3:45:b1:fb:69:
                    ce:9c:ca:22:fa:84:ed:89:99:55:39:f3:35:f7:7d:
                    34:c1:d8:4a:60:a5:49:08:40:de:b9:f5:f8:87:2f:
                    99:3d:f4:12:f7:d9:26:b9:ff:2f:92:86:5d:be:de:
                    7e:ca:d5:1c:26:45:e8:0e:97:aa:8c:29:89:d2:a7:
                    f2:4e:15:5d:88:f6:c8:87:f7:f3:6b:18:b3:2c:99:
                    b6:8c:b5:16:50:ef:e3:95:f2:8f:63:97:02:9d:44:
                    f8:a6:63:51:f8:9a:89:95:1b:84:58:53:f3:3c:b6:
                    10:20:86:a8:80:b4:2a:ea:74:1a:6a:b3:3f:01:bc:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:DB:85:B7:B4:54:BA:E9:61:D4:0D:0B:BD:DB:CC:9C:5F:9D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b6f44fc8-d8bf-36bc-a8e1-5344a35189cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:95:56:b3:41:a5:10:5f:ad:3e:80:be:2b:4f:e3:7c:e6:
         04:0b:e6:df:6e:17:ab:e7:37:6c:55:64:f3:bc:1d:d9:72:71:
         0c:22:e1:86:fb:51:a1:fc:9e:ab:23:40:eb:25:2e:04:6f:40:
         1d:f8:09:d7:39:82:26:b0:73:99:60:a9:81:9f:71:5c:4b:36:
         a3:a1:39:cf:6c:04:cd:a4:23:a9:0c:07:ce:07:2c:42:4c:55:
         af:e0:5d:81:08:f9:6c:1b:b3:a1:96:87:8a:4e:6f:51:61:83:
         bd:3e:22:cf:b9:61:fd:0d:fd:10:2e:99:51:26:ee:b6:d6:aa:
         9e:5c:90:a1:dc:0b:87:96:4f:63:65:e6:e4:5b:35:7f:92:8a:
         28:e2:db:a5:33:a9:c5:84:87:73:09:28:c2:35:0b:67:02:34:
         75:6d:b0:d9:cb:0b:85:6a:1a:dc:51:09:fa:08:a5:33:03:af:
         d8:9a:89:8a:30:79:f9:d6:c6:6d:d0:fb:22:60:55:72:b3:e5:
         bb:cb:5f:9d:c7:d2:46:b6:0d:26:8d:88:d8:1f:79:da:0b:b6:
         ae:d3:e4:ca:ed:9a:e1:b8:f5:d9:26:44:82:92:af:27:aa:38:
         6c:5b:31:0b:3c:f5:08:30:79:0d:ae:26:69:ab:e4:1b:86:eb:
         92:00:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:08 2024 by rpki-client on console-ams.rpki-client.org