Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d3153884-6160-3477-8099-9c495c124829.roa
File:                     d3153884-6160-3477-8099-9c495c124829.roa (raw, json)
Hash identifier:          EgQq1jnueiE+BD2NGGjYckNHo9SOrFNZqKPZOg0gPv0=
Subject key identifier:   AA:0D:66:A2:B2:21:75:00:34:A7:0E:9A:FB:2C:E2:3E:AC:DB:3F:58
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB3B505AF5AC3AC5C7A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d3153884-6160-3477-8099-9c495c124829.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        130.137.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b3:b5:05:af:5a:c3:ac:5c:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=8d6e2e69-0122-4ae5-9411-53eaf687883f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:ab:83:1b:44:05:e6:ab:69:19:9b:41:1e:
                    24:3e:19:08:61:b2:61:82:66:95:1d:c1:55:8a:f2:
                    6d:d1:f6:d7:14:2b:12:f8:73:58:9c:03:21:75:72:
                    f2:b7:0f:ea:01:05:30:4c:f7:f9:1e:26:4f:b0:0f:
                    d3:97:10:6a:f3:da:0a:ae:6b:4e:64:e4:dd:21:1e:
                    c8:af:a9:eb:71:5e:a6:00:39:8f:8e:dc:5a:d7:64:
                    3e:05:b2:82:2c:df:1a:de:8f:76:6c:a1:de:ad:2e:
                    df:a0:58:b7:71:75:35:36:d3:24:d1:84:2d:cb:f1:
                    fb:65:bd:5a:76:63:fa:ae:d2:d7:8f:a2:60:aa:f2:
                    09:f3:22:f5:04:40:d2:3b:8e:9f:11:d0:3e:33:e2:
                    40:f0:3f:fb:f6:92:73:f1:d3:dd:d3:fc:76:0e:00:
                    60:35:5d:c9:4d:d6:00:a8:c8:7c:76:f7:78:3b:3d:
                    1f:58:31:8a:f8:57:cd:1a:7f:f5:50:fb:3c:ad:42:
                    a4:4a:98:54:e0:39:c9:eb:1f:2e:cf:60:4e:72:b3:
                    b0:53:89:71:11:0f:26:2f:63:85:0c:a5:e8:a2:70:
                    8e:0f:92:0d:32:ba:f3:6f:eb:48:74:4b:7d:10:fa:
                    06:9a:c5:fd:81:91:b4:4c:4d:d9:99:21:88:88:f6:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0D:66:A2:B2:21:75:00:34:A7:0E:9A:FB:2C:E2:3E:AC:DB:3F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d3153884-6160-3477-8099-9c495c124829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:77:5d:61:8a:17:a2:2c:cb:b9:48:e6:12:83:7e:21:35:f8:
         12:31:17:87:b6:c9:d8:53:e4:1e:e8:19:c8:4e:e0:0c:b0:b3:
         34:b3:22:45:08:6e:9c:01:ca:52:9c:88:59:53:90:8b:7f:4e:
         21:c5:b8:05:3e:fd:2e:8d:26:18:11:83:3d:82:fd:da:e2:8e:
         af:b6:25:aa:70:f5:61:91:7b:ee:a6:f1:bb:44:8c:ac:5b:92:
         64:33:61:79:d1:16:24:00:a5:75:d9:12:8a:e0:51:e2:db:a4:
         c5:12:2f:d6:80:5b:59:8b:2d:76:11:bd:9a:a2:fa:98:e1:08:
         b8:6c:16:0c:61:7e:71:d6:2d:02:c9:63:66:36:08:e2:b5:be:
         de:43:31:e4:5c:64:53:71:ad:4d:66:be:8c:eb:ed:48:97:01:
         57:ce:99:ec:e8:74:fb:21:bf:48:f7:c1:3a:f4:fd:72:24:fa:
         b0:b4:36:c1:56:a4:f2:14:3e:da:6c:17:aa:af:56:e4:ba:8d:
         8f:84:eb:5a:29:ae:99:b6:4a:7f:36:39:2c:73:01:a0:8d:55:
         09:67:fb:3f:ee:3c:75:af:d4:4a:23:92:d9:91:90:6d:9a:ac:
         4e:8d:54:87:25:d9:fb:0b:c7:63:36:50:a3:46:67:84:ba:df:
         e7:97:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:58 2025 by rpki-client