Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa
File:                     e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa (raw, json)
Hash identifier:          vbkJTSIZGK0NQQn6eVjeMLHW04gy2MAzlLn/UZ8RXog=
Subject key identifier:   02:8B:3B:58:DB:8A:CF:FB:E9:D0:0E:48:58:6D:87:56:E1:71:AD:34
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848159FF2C356626D627C7541C4
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     14618
IP address blocks:        130.137.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f2:c3:56:62:6d:62:7c:75:41:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=571c6a4a-a75f-4860-871e-63c05212a3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:b5:d9:51:00:21:4b:64:9e:28:d5:c9:1c:
                    55:e2:59:57:cc:2e:0e:83:72:35:2b:8f:84:39:65:
                    04:46:6f:92:80:1a:6f:23:9d:92:90:71:d1:38:5e:
                    96:cb:0d:de:aa:db:42:e3:59:32:f9:5b:f5:40:54:
                    03:08:e7:31:fb:1e:0d:a4:71:1e:b7:07:6d:22:f4:
                    ec:52:cf:c4:5c:f0:d1:8e:16:89:2f:a1:f2:3f:47:
                    bb:bc:3d:45:13:7a:5c:be:e1:e2:32:fc:4d:e3:ed:
                    8f:df:56:2d:13:85:7f:60:b6:c4:24:ba:21:7e:89:
                    7a:4f:20:c8:bd:8a:0a:08:9e:49:f7:c4:59:f3:7c:
                    04:e5:f7:fe:8d:1f:0b:ab:bc:fc:87:f1:5e:8f:8b:
                    3f:5b:c0:66:b1:f0:5e:b6:3f:03:37:b7:80:63:1f:
                    a6:c5:39:86:c4:7e:1f:1a:87:62:39:89:c3:24:43:
                    bf:b8:6e:86:2d:e0:27:5a:13:f6:13:42:06:ce:e8:
                    e0:c5:00:2c:67:3e:ea:e2:da:22:e8:70:64:3c:b4:
                    fe:12:0d:0a:60:d1:2e:5c:b5:43:ff:d5:8f:12:df:
                    25:52:08:72:87:d5:bd:4c:a2:7d:b4:59:29:e7:81:
                    1d:25:92:ad:31:a7:cf:ae:33:63:fb:b7:8d:e4:05:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:3B:58:DB:8A:CF:FB:E9:D0:0E:48:58:6D:87:56:E1:71:AD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:66:e7:cb:8d:9f:65:dc:30:99:f7:7f:45:67:d4:96:04:68:
         32:2e:4a:0a:2e:6e:5b:51:ca:bd:b2:6a:d1:b2:b6:c5:94:3c:
         09:d9:aa:19:0b:ee:2c:2b:74:e2:1d:33:7d:4f:a0:7e:dd:e7:
         c7:a3:b2:fc:80:ee:7f:1f:2f:17:b3:e8:ff:04:d7:76:6b:eb:
         b6:97:2f:f5:be:a6:4c:25:fe:44:4c:b5:e9:9d:e1:3f:31:89:
         cd:73:31:71:3c:9d:43:20:cc:a2:10:63:55:48:9b:93:78:b6:
         08:74:c1:02:c5:1b:cd:9d:28:a5:6e:a0:8e:a0:40:1a:04:e6:
         9b:f8:a7:c7:4a:c9:3a:a6:fa:ed:c8:93:72:32:b0:e0:de:4f:
         71:4b:bf:af:d4:0c:00:63:9b:41:99:8a:fd:e2:b9:93:0c:a5:
         b9:ea:df:5a:f7:5f:39:3d:3e:79:6c:a4:51:ea:73:ae:90:c7:
         93:ec:84:06:8d:fe:9e:73:33:75:29:8c:59:53:d7:a4:04:49:
         90:e3:09:3e:40:b2:f4:4b:bc:e5:98:93:ec:08:9b:06:58:a7:
         3d:97:4b:f8:0e:25:b8:55:6e:65:e6:0d:4d:7f:59:b2:8e:c9:
         c5:00:3c:16:e3:4b:06:d5:34:6f:ab:ed:2d:aa:f1:9a:3e:93:
         1a:d5:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:10 2025 by rpki-client