Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d7a89449-9bc1-3044-8983-45d70bf07899.roa
File:                     d7a89449-9bc1-3044-8983-45d70bf07899.roa (raw, json)
Hash identifier:          ryn/zuMItKEhgN8gfblp12pZcEvlKtDDMRbap+/X7mA=
Subject key identifier:   FD:A2:4F:F1:EB:8B:3F:E6:6B:23:A1:87:8D:78:E0:AC:63:C7:3C:05
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584558C83680BBAD3A567DBAA880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d7a89449-9bc1-3044-8983-45d70bf07899.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        130.137.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:36:80:bb:ad:3a:56:7d:ba:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=8a570bd3-254b-40a3-8445-94bedd243e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:da:a8:ea:e8:c3:62:db:13:b9:3d:5c:9c:
                    f8:e6:b8:32:cc:06:52:02:b9:85:2a:82:bb:e4:fb:
                    a4:ab:73:3f:a7:06:a0:ec:34:25:0c:fc:47:c9:eb:
                    42:ac:23:60:ff:f9:d3:79:95:90:a6:26:7b:de:f4:
                    b3:33:f5:04:03:a6:7c:b5:86:02:13:a5:3c:d1:d5:
                    9c:dc:9d:b0:38:55:de:db:6c:c5:b0:24:41:c1:f4:
                    56:2c:09:15:8f:b3:b9:c7:fe:77:ed:91:9c:52:37:
                    b3:c6:a9:9e:e6:d5:a3:f2:47:6a:f3:11:37:50:3d:
                    6d:ec:bd:7e:2d:32:b6:29:b0:da:bf:de:cf:11:39:
                    e5:02:1e:ae:88:3f:2f:46:e6:15:6d:3f:44:3a:c7:
                    ee:4c:e4:86:84:51:22:e3:9f:a3:c0:db:a4:b3:c9:
                    23:a7:28:2a:da:0b:4c:ed:84:d2:3a:c3:5c:38:9f:
                    e6:67:f8:13:51:2d:cd:b7:30:26:fe:94:1c:f8:46:
                    5e:b3:e4:5e:e0:be:c6:fc:0c:ed:e4:b9:47:30:f4:
                    62:c9:22:b6:0e:2e:03:85:75:94:ba:8c:cc:ad:02:
                    f5:e6:12:d0:cb:19:dc:5a:4b:3e:a7:89:ff:a3:cd:
                    bc:1b:ba:15:8a:3d:95:46:73:f6:fe:87:11:b0:be:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A2:4F:F1:EB:8B:3F:E6:6B:23:A1:87:8D:78:E0:AC:63:C7:3C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d7a89449-9bc1-3044-8983-45d70bf07899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:64:0e:94:cc:1c:49:f1:de:2e:4a:b7:21:7a:b5:7e:2c:
         fb:be:9b:f3:15:d1:f4:2b:fc:d8:b7:bb:23:e6:2a:eb:50:31:
         80:6a:df:c5:ed:cc:3c:49:cf:52:91:b1:9d:56:ea:76:c4:c2:
         79:58:04:f3:ef:16:ab:1c:2a:df:36:0b:8f:8e:86:58:e8:92:
         41:12:f9:af:33:df:54:0f:5a:67:45:ad:9d:aa:6d:46:8b:43:
         43:e3:1f:6e:69:94:d5:49:a6:75:dc:b9:be:d1:d2:6f:91:a1:
         de:0a:ab:00:9b:2b:93:84:df:67:2a:07:b3:0d:dd:8b:8f:7e:
         3b:5f:53:4c:b8:06:ac:7b:5e:ca:60:22:77:68:7d:fb:77:50:
         19:a7:d5:6c:20:05:8d:21:c2:bc:e3:d0:77:73:af:e8:30:f9:
         66:12:44:9e:37:ed:96:75:f4:66:de:cf:1d:ef:6e:e6:8a:1c:
         92:b7:54:86:29:77:3e:1b:fc:08:41:0a:c5:16:26:2b:3c:81:
         03:8f:c8:a2:f0:7d:6a:67:5e:ca:f6:7b:d5:23:2d:29:d0:da:
         52:43:c4:9a:44:ef:fb:c2:05:fe:c9:bd:ab:31:8e:c8:9d:36:
         54:d9:e1:d0:bd:b6:c7:8c:26:06:52:52:81:ee:e9:07:00:13:
         9c:c9:17:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVYyDaAu606Vn26qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDMyNzEzMDAzNVoXDTI0MDYyNTEzMDAzNVowLzEtMCsGA1UEAxMk
OGE1NzBiZDMtMjU0Yi00MGEzLTg0NDUtOTRiZWRkMjQzZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4jaqOrow2LbE7k9XJz45rgyzAZSArmFKoK7
5Pukq3M/pwag7DQlDPxHyetCrCNg//nTeZWQpiZ73vSzM/UEA6Z8tYYCE6U80dWc
3J2wOFXe22zFsCRBwfRWLAkVj7O5x/537ZGcUjezxqme5tWj8kdq8xE3UD1t7L1+
LTK2KbDav97PETnlAh6uiD8vRuYVbT9EOsfuTOSGhFEi45+jwNuks8kjpygq2gtM
7YTSOsNcOJ/mZ/gTUS3NtzAm/pQc+EZes+Re4L7G/Azt5LlHMPRiySK2Di4DhXWU
uozMrQL15hLQyxncWks+p4n/o828G7oVij2VRnP2/ocRsL4vhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2iT/Hriz/mayOhh4144KxjxzwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDdhODk0NDktOWJjMS0z
MDQ0LTg5ODMtNDVkNzBiZjA3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADC0ZA6UzBxJ8d4uSrcherV+LPu+m/MV0fQr/Ni3uyPmKutQMYBq38Xt
zDxJz1KRsZ1W6nbEwnlYBPPvFqscKt82C4+OhljokkES+a8z31QPWmdFrZ2qbUaL
Q0PjH25plNVJpnXcub7R0m+Rod4KqwCbK5OE32cqB7MN3YuPfjtfU0y4Bqx7Xspg
Indofft3UBmn1WwgBY0hwrzj0Hdzr+gw+WYSRJ437ZZ19Gbezx3vbuaKHJK3VIYp
dz4b/AhBCsUWJis8gQOPyKLwfWpnXsr2e9UjLSnQ2lJDxJpE7/vCBf7Jvasxjsid
NlTZ4dC9tseMJgZSUoHu6QcAE5zJFz8=
-----END CERTIFICATE-----
Generated at Thu May 2 03:30:08 2024 by rpki-client on console-ams.rpki-client.org