Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa
File:                     d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa (raw, json)
Hash identifier:          ekFnCu+N/NXEqZmOPbYARwxc+bJ+ydmyx07mFmpo+yI=
Subject key identifier:   51:44:8D:04:E5:4C:81:BD:62:ED:04:6C:B8:CE:02:B1:C8:FC:4F:2D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858484EDAC571234049D9362849C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     8987
IP address blocks:        130.137.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c5:71:23:40:49:d9:36:28:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=b6c6c12c-5199-4562-9500-b5c55daa5e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:c7:bc:85:91:89:5f:7a:64:bc:5f:d0:98:
                    0c:dd:60:26:76:49:7b:3d:64:6a:a7:02:85:bc:30:
                    68:4c:38:d9:34:af:06:83:9d:b0:af:a6:49:97:46:
                    ea:25:87:2e:30:80:89:5b:25:31:a1:d6:41:09:56:
                    43:07:0c:86:9a:a0:b0:7f:a0:4c:89:bf:8e:78:aa:
                    20:81:a4:01:bc:8c:94:30:f8:ce:33:90:90:6e:b7:
                    e8:e4:1a:8a:9e:b6:52:ff:18:f8:d5:b3:8d:4b:1d:
                    e0:e4:d2:2b:08:d4:b9:b7:77:02:76:00:60:b8:31:
                    95:57:01:18:9b:54:b5:d6:7d:45:7c:f5:f3:e8:ca:
                    c7:59:bf:93:3d:1c:8d:4d:fc:4b:e9:89:7d:3f:2a:
                    18:74:48:55:58:48:1d:96:de:9c:da:1c:01:4b:c3:
                    7f:33:7a:d2:c5:97:e7:f3:5a:58:da:f8:e0:85:01:
                    b5:fb:4f:ff:86:96:d8:10:5b:33:07:ee:28:c0:d0:
                    f2:2d:14:bf:05:33:ff:c3:09:1b:1b:ad:64:ca:68:
                    ec:0d:92:c5:81:40:e4:87:0e:66:b5:13:08:fd:96:
                    c2:da:f7:28:31:68:d9:3b:c7:14:bd:71:0b:43:dc:
                    d0:5e:59:7b:d6:ea:4e:c8:d4:ac:9c:a4:3a:05:e1:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:44:8D:04:E5:4C:81:BD:62:ED:04:6C:B8:CE:02:B1:C8:FC:4F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:86:3c:d8:0e:31:5c:24:99:0c:26:d8:51:29:4d:9b:6d:
         73:06:eb:cf:85:aa:9d:5f:52:da:29:41:18:8b:b6:5a:36:73:
         56:67:bb:9f:86:53:c6:47:09:c8:3e:cf:03:14:d6:0b:5a:87:
         21:45:e1:0c:ce:bf:62:a2:d4:9a:b8:cc:7a:ba:1a:d1:bb:32:
         12:a0:d4:c3:91:ca:7f:bf:71:c7:5e:f7:a9:b3:eb:33:45:41:
         54:dd:60:fb:7f:f8:1a:2e:4d:55:2f:53:97:60:04:49:89:0e:
         0c:76:e5:53:72:b8:25:67:1e:ad:b1:e5:4c:b6:60:dc:44:6d:
         65:09:3f:5c:8a:7e:38:bc:d3:e2:8d:c7:39:cc:f6:60:a3:93:
         41:27:ed:89:19:e1:ce:08:11:25:c3:91:52:8f:47:c1:bf:b0:
         17:b7:08:0c:7f:92:cd:1d:13:2d:c6:d7:6f:13:c7:ba:1a:e9:
         b7:53:d6:7b:e8:10:25:42:03:6a:06:a4:9d:c0:f9:3c:97:3b:
         9d:db:9d:ee:96:36:63:13:ce:22:7b:34:92:44:e3:19:d3:e7:
         55:9c:1c:c9:18:dd:26:ec:7e:1b:d5:5e:c8:df:1c:cd:69:eb:
         d0:1e:74:a2:e9:47:6d:f3:99:0c:9c:ec:74:45:a2:cc:32:17:
         a1:0f:8c:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sVxI0BJ2TYoScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
YjZjNmMxMmMtNTE5OS00NTYyLTk1MDAtYjVjNTVkYWE1ZTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge/HvIWRiV96ZLxf0JgM3WAmdkl7PWRqpwKF
vDBoTDjZNK8Gg52wr6ZJl0bqJYcuMICJWyUxodZBCVZDBwyGmqCwf6BMib+OeKog
gaQBvIyUMPjOM5CQbrfo5BqKnrZS/xj41bONSx3g5NIrCNS5t3cCdgBguDGVVwEY
m1S11n1FfPXz6MrHWb+TPRyNTfxL6Yl9PyoYdEhVWEgdlt6c2hwBS8N/M3rSxZfn
81pY2vjghQG1+0//hpbYEFszB+4owNDyLRS/BTP/wwkbG61kymjsDZLFgUDkhw5m
tRMI/ZbC2vcoMWjZO8cUvXELQ9zQXll71upOyNSsnKQ6BeGNAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFEjQTlTIG9Yu0EbLjOArHI/E8tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDRkMmQ1MmYtYTVkZC0z
ZmQ0LThmYjktZTE2MDBjZjNjZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATZhjzYDjFcJJkMJthRKU2bbXMG68+Fqp1fUtopQRiLtlo2c1Znu5+G
U8ZHCcg+zwMU1gtahyFF4QzOv2Ki1Jq4zHq6GtG7MhKg1MORyn+/ccde96mz6zNF
QVTdYPt/+BouTVUvU5dgBEmJDgx25VNyuCVnHq2x5Uy2YNxEbWUJP1yKfji80+KN
xznM9mCjk0En7YkZ4c4IESXDkVKPR8G/sBe3CAx/ks0dEy3G128Tx7oa6bdT1nvo
ECVCA2oGpJ3A+TyXO53bne6WNmMTziJ7NJJE4xnT51WcHMkY3SbsfhvVXsjfHM1p
69AedKLpR23zmQyc7HRFoswyF6EPjHs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:52 2025 by rpki-client