Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa
File:                     dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa (raw, json)
Hash identifier:          cmqi71EjS+1jnMzkyDhLFRmh1z2tRjo2C6Q+og8ud/I=
Subject key identifier:   A9:A7:17:90:BF:C0:B6:6C:3B:0E:E6:5B:1C:07:4A:68:CF:A4:F3:A5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845963343F64157F58616B77900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        130.137.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:43:f6:41:57:f5:86:16:b7:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=e85377b5-450c-4b56-b5a2-5c084bdebcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:8e:4f:37:7e:2c:02:d3:92:5f:12:92:54:
                    12:31:aa:5f:6d:83:42:1c:34:57:c5:fe:59:7c:d7:
                    5c:0d:32:08:19:23:b1:53:3c:de:73:fb:c5:85:f5:
                    6e:9b:35:94:c5:5c:21:40:ca:02:c6:c5:6c:c4:b2:
                    9a:c2:8a:b9:01:07:20:3c:be:df:33:30:40:85:8a:
                    d6:10:5c:b9:ce:ad:94:8e:c4:ca:40:9d:f1:15:8f:
                    ef:e5:8d:6e:8d:16:97:b5:93:88:b3:49:5d:84:70:
                    87:e8:88:5d:58:df:06:f2:1b:e3:f6:b6:94:fa:a6:
                    0f:ad:72:83:00:57:c6:75:0b:08:58:80:52:60:ff:
                    03:bb:ae:60:61:78:fe:8d:30:e5:46:f6:01:33:6e:
                    9f:46:19:f5:35:82:d4:3a:80:e0:11:28:9a:44:28:
                    75:1e:23:2e:e3:1a:db:fd:75:c0:80:74:3d:14:a4:
                    d6:aa:a6:9e:35:c1:4c:d6:50:c4:69:c5:17:a7:3b:
                    78:4a:3e:6f:3e:68:70:16:02:1f:c0:fe:15:17:76:
                    9b:32:5f:1c:00:49:67:8d:5f:64:0c:f6:49:b3:91:
                    e7:8d:b2:82:f3:f8:a1:8e:29:05:f7:cb:d2:d0:fd:
                    85:80:fa:74:bd:80:75:00:2f:33:1f:31:f9:9d:73:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A7:17:90:BF:C0:B6:6C:3B:0E:E6:5B:1C:07:4A:68:CF:A4:F3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:53:47:41:f4:e7:00:94:c3:da:f6:25:c0:bd:4e:94:c5:
         74:b6:60:d4:42:1d:68:e2:a6:c2:25:3d:6d:23:78:23:b4:a7:
         0b:89:cd:fa:09:a6:54:5a:fa:74:70:e0:37:d9:23:85:c1:d7:
         b6:ea:93:12:71:1e:64:3b:0b:7f:3f:5d:16:90:0a:ed:77:86:
         8f:1d:d3:b3:b6:b1:74:68:a3:d6:7f:60:bd:ac:11:40:85:fc:
         39:9f:21:4f:e8:41:62:1b:ad:a1:26:f4:c6:20:bf:02:12:6e:
         73:46:3d:b2:12:e1:24:c6:73:97:b7:6a:65:79:9a:0b:04:ed:
         47:18:20:7b:11:ef:df:8d:7c:ab:69:7d:7d:03:fc:a6:4e:24:
         e8:12:3c:53:bb:d5:a4:6a:c5:61:03:7e:8c:f2:3a:b8:84:a1:
         2e:64:80:94:57:9a:88:aa:e7:00:63:8d:f9:56:92:fb:20:d7:
         11:3b:c8:04:eb:15:cd:de:df:8e:79:3d:83:e8:16:57:e5:3e:
         2c:0e:db:26:de:91:2b:15:e6:84:67:bf:6b:d1:94:19:9b:ad:
         3d:15:93:d9:93:29:10:16:ab:c3:42:4a:43:e5:f0:34:21:9c:
         17:e1:4c:a4:17:a3:9c:4c:f2:9b:60:be:1c:a6:50:da:cc:e4:
         fe:01:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:08 2024 by rpki-client on console-ams.rpki-client.org