Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bdbd3650-370e-33be-b0c1-622cd37450d9.roa
File:                     bdbd3650-370e-33be-b0c1-622cd37450d9.roa (raw, json)
Hash identifier:          itgRZC8XzinFNArQ2RYbCzr6duG2ZLlqhuUdbvRRUBw=
Subject key identifier:   DE:88:1F:E8:6B:4B:5E:AA:06:33:5F:C3:12:AC:E7:E5:86:8D:DE:E1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483B4FFE06E7144AEBB9C89910
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bdbd3650-370e-33be-b0c1-622cd37450d9.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        130.137.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:fe:06:e7:14:4a:eb:b9:c8:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=ab250ae5-586a-45c6-b3b0-3ab87005cbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:3a:e6:e3:d0:d8:be:38:0d:35:0a:d8:8d:
                    08:4a:54:55:5b:f2:b6:a0:0a:eb:8b:53:24:74:16:
                    fa:ec:c0:2e:40:c2:12:be:db:b0:e1:90:4e:c8:63:
                    c8:7d:2b:98:8a:42:0f:0a:ee:fa:2a:45:f1:ba:aa:
                    2c:08:d6:7a:75:43:a1:ac:cc:3f:b6:d3:03:a2:d1:
                    51:76:64:4b:11:12:28:40:53:b2:57:8a:ff:5a:0c:
                    07:60:a4:9a:f4:00:14:75:38:1a:8d:48:c3:f0:fb:
                    06:db:07:5c:14:f6:45:b5:62:45:b8:78:00:8d:da:
                    94:da:7c:08:fe:bd:b2:0b:dd:34:14:94:54:89:98:
                    cb:c1:e4:8f:3f:13:e2:88:90:00:b1:25:70:a0:7c:
                    ad:f9:88:95:bd:40:15:6a:b6:af:f2:e6:a3:bb:69:
                    40:bf:2c:8b:60:56:bc:44:e7:bc:67:bc:1b:5a:3f:
                    79:27:73:9e:c7:de:0e:23:15:f5:f3:99:3b:b8:1d:
                    e1:d8:e1:7b:ec:95:31:00:2a:1e:e7:15:86:47:f9:
                    2c:40:38:96:5f:dd:c4:76:eb:49:96:32:c3:24:8a:
                    2e:32:e1:f4:6b:d3:54:4a:42:c6:2d:4b:7f:f1:e7:
                    aa:e0:2e:fe:6f:08:e4:8a:d5:4c:a6:6f:b2:16:a8:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:88:1F:E8:6B:4B:5E:AA:06:33:5F:C3:12:AC:E7:E5:86:8D:DE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bdbd3650-370e-33be-b0c1-622cd37450d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:cf:28:7e:3a:08:28:33:6c:e7:7d:fe:9d:26:f7:4c:79:
         97:71:fd:c6:b7:f1:f8:82:03:ef:e2:b0:20:42:06:2f:e1:48:
         01:eb:d7:ec:1d:31:68:b9:13:da:8c:a2:b4:92:fd:ed:a3:d8:
         36:4a:34:66:3b:1f:b5:1f:43:e8:1f:e7:d3:8a:b1:1a:5b:45:
         50:e1:7b:1d:07:8f:f3:16:67:01:78:51:51:32:61:1f:32:8b:
         e4:e6:39:ca:ef:0d:e2:76:b3:4a:d8:9f:67:ff:08:60:e2:06:
         a2:98:02:a6:49:a0:54:c4:f4:e6:8d:ba:7a:77:cf:ff:1d:4c:
         4c:56:a0:7a:df:da:0e:63:b3:f1:86:c9:70:83:12:9a:50:45:
         f7:ab:67:57:df:0f:10:f0:72:9f:60:9b:8f:47:57:2c:02:1a:
         5c:50:56:36:9c:d9:72:d3:23:ba:a5:eb:b4:be:2c:87:e8:07:
         73:64:16:a1:70:99:42:c0:83:8d:94:9a:88:69:e8:7f:6f:c9:
         4d:3b:72:bd:dc:5c:1e:1f:a0:b1:f2:fa:9c:d4:2d:b6:d6:c1:
         4d:41:d6:99:70:a5:12:af:55:c9:39:ee:f5:38:4c:12:f0:25:
         93:0c:58:b6:2e:ab:71:c3:8c:00:6c:c9:92:9f:c0:35:4a:41:
         c8:9d:50:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/4G5xRK67nImRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
YWIyNTBhZTUtNTg2YS00NWM2LWIzYjAtM2FiODcwMDVjYmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurs65uPQ2L44DTUK2I0ISlRVW/K2oArri1Mk
dBb67MAuQMISvtuw4ZBOyGPIfSuYikIPCu76KkXxuqosCNZ6dUOhrMw/ttMDotFR
dmRLERIoQFOyV4r/WgwHYKSa9AAUdTgajUjD8PsG2wdcFPZFtWJFuHgAjdqU2nwI
/r2yC900FJRUiZjLweSPPxPiiJAAsSVwoHyt+YiVvUAVarav8uaju2lAvyyLYFa8
ROe8Z7wbWj95J3Oex94OIxX185k7uB3h2OF77JUxACoe5xWGR/ksQDiWX93EdutJ
ljLDJIouMuH0a9NUSkLGLUt/8eeq4C7+bwjkitVMpm+yFqhIcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6IH+hrS16qBjNfwxKs5+WGjd7hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmRiZDM2NTAtMzcwZS0z
M2JlLWIwYzEtNjIyY2QzNzQ1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7Szyh+OggoM2znff6dJvdMeZdx/ca38fiCA+/isCBCBi/hSAHr1+wd
MWi5E9qMorSS/e2j2DZKNGY7H7UfQ+gf59OKsRpbRVDhex0Hj/MWZwF4UVEyYR8y
i+TmOcrvDeJ2s0rYn2f/CGDiBqKYAqZJoFTE9OaNunp3z/8dTExWoHrf2g5js/GG
yXCDEppQRferZ1ffDxDwcp9gm49HVywCGlxQVjac2XLTI7ql67S+LIfoB3NkFqFw
mULAg42Umohp6H9vyU07cr3cXB4foLHy+pzULbbWwU1B1plwpRKvVck57vU4TBLw
JZMMWLYuq3HDjABsyZKfwDVKQcidULQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:00 2025 by rpki-client