Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d8e3376b-ced4-3d8c-b929-ae88caa57735.roa
File:                     d8e3376b-ced4-3d8c-b929-ae88caa57735.roa (raw, json)
Hash identifier:          LKTTxLKUjqSrtSje+08XahZOKaGqATJEUAxTJqJB78M=
Subject key identifier:   5E:07:BA:B5:21:27:E5:E5:CA:06:5D:4A:00:BD:8E:4E:A3:45:75:76
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285847299B2136B333258DC3C58F12
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d8e3376b-ced4-3d8c-b929-ae88caa57735.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        130.137.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:21:36:b3:33:25:8d:c3:c5:8f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=a083f764-cfcf-476d-a459-eccb915e0ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:55:d7:49:1c:0d:35:d5:15:c7:c4:00:a1:
                    ff:4a:07:43:bd:b0:07:95:02:45:77:94:65:b4:ef:
                    f5:7b:37:e5:50:96:4c:0d:87:ea:a8:34:6c:b2:18:
                    e7:e9:f3:d4:04:ea:56:0c:b8:59:8d:d1:c0:ae:c7:
                    0b:a5:fb:a1:dd:28:41:72:ff:31:55:9e:d3:51:43:
                    9f:98:eb:ae:d5:95:cf:a4:5f:01:14:47:e0:b0:5e:
                    c9:75:2d:6b:6c:1a:6b:aa:39:94:37:fd:e7:3e:bf:
                    b7:e3:d3:2b:cf:cc:75:08:ae:4f:2c:85:33:6b:9c:
                    96:94:b0:a5:38:35:38:32:08:c3:4e:0a:5c:db:62:
                    5f:1d:b4:94:da:09:bc:10:e8:87:4d:5e:3f:95:ef:
                    61:c7:46:09:cc:d8:ff:ba:fc:98:47:c9:02:34:da:
                    3f:b5:ae:9b:de:37:e2:8e:16:db:6b:b7:9b:78:fe:
                    36:2c:38:fa:73:5a:8d:89:6e:4f:cb:57:14:81:da:
                    2e:0f:f1:5b:e1:28:bd:32:49:77:e9:e3:c3:8e:6a:
                    1c:62:3b:34:08:d3:5d:36:c3:66:2d:19:59:1d:b0:
                    74:f4:f2:26:5a:5f:1d:76:ad:2f:67:34:a2:81:cc:
                    c2:0f:90:c6:53:f7:17:2a:25:43:cb:ef:51:80:c7:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:07:BA:B5:21:27:E5:E5:CA:06:5D:4A:00:BD:8E:4E:A3:45:75:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d8e3376b-ced4-3d8c-b929-ae88caa57735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:c4:c3:de:b2:da:14:74:d1:8f:15:52:c1:39:e0:66:d9:
         22:3c:c9:0f:bd:e1:d7:8d:fb:a6:c0:a6:60:2b:22:16:50:5b:
         17:4a:5c:5c:cd:62:5f:45:9c:56:50:ae:77:24:b6:af:d5:24:
         4d:20:2f:8c:94:c0:1f:4f:b7:00:6f:0c:91:b2:54:ff:69:09:
         e3:fc:bf:24:89:8c:57:a2:99:d5:ad:db:da:9e:e9:c8:e7:c3:
         d5:77:be:92:19:27:f3:14:ad:70:8a:54:ee:5d:34:d9:df:33:
         4a:b3:32:3f:f1:03:eb:58:06:65:78:7f:e9:6c:d6:16:54:f3:
         77:de:ee:3b:b7:07:fa:a2:18:ec:4d:93:be:0e:44:93:b4:92:
         d4:34:55:87:ce:a1:11:e3:05:e3:22:67:29:f2:c0:2d:56:e7:
         b3:8d:7b:99:7d:0f:6f:13:cb:3d:1d:23:05:46:06:b1:91:3f:
         83:82:cc:4f:b8:64:2f:86:28:31:6a:f0:7a:e0:f7:dd:03:a1:
         60:4e:af:76:3c:cb:8e:63:8f:3d:76:63:25:34:d4:55:a2:02:
         36:48:d0:01:ee:e9:02:91:db:17:f6:79:c1:49:6f:da:77:43:
         9c:2d:18:23:ef:b4:69:71:65:8b:4d:91:7b:a0:d6:9d:49:1d:
         df:ed:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org