Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa
File:                     cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa (raw, json)
Hash identifier:          Rp3Ljo0ucQ6z9gITLdwVCnUeLtIkfMQPpcf2lqUzBQA=
Subject key identifier:   11:CC:6F:3C:F0:13:6E:7F:1A:3D:70:21:AC:EC:AF:52:FC:AA:46:3D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483455643BFA11F5C64ACB2F80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:64:3b:fa:11:f5:c6:4a:cb:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=49ebe33f-33a1-4b5d-ba04-34d4120a606a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:0c:f3:83:9a:a5:30:05:52:52:39:ee:e1:
                    7d:1b:b9:02:45:1b:e2:17:24:7a:c3:bc:d9:61:62:
                    1c:ea:7e:bf:1c:44:cd:10:06:97:d1:39:a6:50:4a:
                    e3:c2:0b:76:a6:5f:45:fb:f8:df:d2:eb:70:e2:8e:
                    ad:e8:5e:75:61:1f:ad:33:86:e7:5b:47:84:f0:c7:
                    d5:6e:7e:a0:ea:c4:aa:e7:c1:fa:eb:e4:d0:fb:a6:
                    d7:06:13:93:83:c6:30:e5:14:51:e9:9d:0e:5b:5c:
                    40:fb:be:2c:4b:87:98:dd:fa:78:b5:b7:ab:59:8a:
                    f5:2e:e6:a2:18:31:50:22:c5:32:2e:ce:53:7e:14:
                    b4:2c:7c:91:d2:77:54:99:8c:1d:91:ef:d7:17:de:
                    2f:21:fb:2a:ec:8d:10:51:21:e0:b0:82:1b:4f:51:
                    c6:38:1c:aa:fd:98:f5:5d:90:5e:4e:a8:9f:5b:5c:
                    88:00:b3:74:f9:02:07:24:50:e8:51:24:dd:cd:ef:
                    74:af:bf:14:92:ba:b5:51:5d:14:8d:b6:8a:b2:e9:
                    83:76:e3:34:94:8f:32:f7:44:4f:f4:7e:e6:4a:ab:
                    d7:5f:9d:1a:84:3a:1c:98:00:5c:69:1c:7e:bb:33:
                    68:6f:d3:62:14:54:8e:46:3c:10:f7:b3:96:62:4b:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:6F:3C:F0:13:6E:7F:1A:3D:70:21:AC:EC:AF:52:FC:AA:46:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:52:ce:bf:16:ea:7d:ce:04:89:51:e6:f7:c8:5f:01:80:
         fd:d3:21:0b:00:b5:42:bb:88:0a:1a:c6:9e:f7:b0:4b:06:bd:
         b3:c4:0a:25:35:16:f0:19:1f:7f:f4:c8:d6:bf:3c:f5:1d:91:
         ae:89:b2:e3:68:d5:5e:86:44:6c:70:3c:84:b2:bc:81:70:ed:
         72:b0:3c:6c:97:86:17:6e:7d:13:e4:4f:9c:cc:41:1e:ac:48:
         3e:30:08:fd:74:bd:1a:df:3c:82:a8:3c:3d:8e:0a:53:cb:b4:
         fc:4f:0c:f4:b7:ad:e1:1e:9a:0a:b2:45:16:9f:84:59:16:69:
         c9:2f:ce:c1:83:7d:db:58:60:dd:8d:b9:d7:92:6a:9a:e8:5f:
         ff:02:cc:54:bd:82:3f:c8:df:f8:31:3e:c6:11:20:e6:52:6b:
         4a:2c:dc:10:0e:38:a2:19:70:26:13:dc:95:00:09:04:34:57:
         f6:c9:81:0a:d4:9d:b4:9c:dd:fa:af:1d:a4:a5:c8:16:80:4c:
         f5:f6:59:14:1d:de:1d:3a:a1:84:f2:bb:45:c1:fe:61:05:4b:
         22:ca:4d:a7:1a:99:13:f5:2f:89:cc:0a:26:8b:56:2c:85:21:
         43:f7:af:d5:a9:71:41:38:10:64:08:ee:c2:52:d5:51:51:3d:
         6c:bf:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:06 2025 by rpki-client