Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e49dfb6c-b840-3313-99b5-655537dd78e3.roa
File:                     e49dfb6c-b840-3313-99b5-655537dd78e3.roa (raw, json)
Hash identifier:          7Xs9pq4REqj/qT0l2NRpQxrX7SZpnI5U1QSTKpFfG8E=
Subject key identifier:   57:38:24:F5:9A:4D:3E:0C:B3:46:92:7A:1E:C3:A0:5A:61:71:C9:A5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475EA61B725A7E66068DB06180
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e49dfb6c-b840-3313-99b5-655537dd78e3.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     14618
IP address blocks:        130.137.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:1b:72:5a:7e:66:06:8d:b0:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=0c637ab3-6c58-4d30-afbe-2a05bacd01bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:db:ce:fb:10:da:5d:aa:b7:af:77:90:38:
                    0c:26:e4:4d:25:0e:f8:66:23:a9:43:a2:55:26:4f:
                    26:34:7c:df:0d:ff:58:5d:a6:71:ef:0e:3f:6e:ad:
                    0a:78:79:87:aa:13:51:9c:36:3c:12:03:4d:a0:7d:
                    7e:69:c1:93:9d:06:64:3d:da:04:b2:41:6f:c0:96:
                    5c:ea:8f:5a:69:92:97:16:70:ba:c1:ae:b7:ea:87:
                    a1:c6:9f:d7:e3:e6:a9:ee:39:b5:91:59:05:26:98:
                    0c:16:10:ac:74:26:7e:22:35:38:ff:d3:d0:e8:96:
                    02:fd:62:da:16:d6:6f:89:43:24:46:af:09:74:4b:
                    11:d2:3d:db:f7:13:56:31:cf:74:fb:2d:7c:84:5a:
                    d5:d1:b4:44:c0:07:ec:89:af:b3:31:c8:50:41:a9:
                    b8:5e:77:86:69:33:33:12:11:7a:87:6b:49:bf:dc:
                    dc:10:0d:b0:1a:27:c4:6a:c0:89:05:08:54:d2:27:
                    14:59:93:fd:4a:99:87:e6:d5:e1:28:de:46:74:89:
                    6e:8a:ba:e0:ff:d9:f6:73:ff:be:f6:27:46:21:13:
                    45:c2:0a:c3:f3:0d:5b:2e:a5:d2:82:77:4f:d6:f2:
                    42:5a:c7:ed:17:96:ee:93:9b:f6:6a:24:9e:cf:73:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:24:F5:9A:4D:3E:0C:B3:46:92:7A:1E:C3:A0:5A:61:71:C9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e49dfb6c-b840-3313-99b5-655537dd78e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:be:85:ec:74:70:63:e2:22:01:00:5e:b4:97:ee:68:fe:bf:
         df:a9:bf:5e:a2:f1:5d:ab:1c:58:a0:0a:03:be:06:2f:93:36:
         1e:51:a8:43:43:eb:91:75:81:67:a5:75:11:25:ed:47:49:57:
         f1:f0:65:be:8a:2e:17:9f:fe:8b:bd:0f:0c:26:39:1c:7f:e7:
         34:66:8f:c2:d2:83:81:e7:73:16:9f:e6:17:a0:ba:d0:e1:bf:
         c3:86:a4:30:b6:aa:52:07:ce:9b:e5:83:c0:0d:e4:bb:1e:8e:
         86:83:e9:0f:09:c0:b0:c7:37:46:a4:92:52:31:03:53:8e:ea:
         9a:54:61:e8:e9:ea:02:02:06:ca:c5:2e:6c:fe:27:2c:39:a9:
         4b:b3:e4:35:fe:c1:21:c6:ef:64:0d:da:0f:7b:4f:c3:b4:aa:
         54:44:06:4b:bd:64:13:d3:d8:3f:af:a7:3a:c0:a9:d4:c9:f5:
         e2:43:22:da:9a:1b:57:94:2f:91:72:c7:75:fe:b2:e7:bb:8e:
         77:bb:b1:c2:90:9a:a8:3d:0b:b6:72:1b:3f:1c:34:89:08:eb:
         c6:81:6d:94:b4:ea:b0:e9:d8:98:55:b1:b4:6e:9d:c8:7f:a4:
         43:e4:59:f2:5c:65:6e:b1:98:09:da:05:94:3f:4a:12:9a:b0:
         6b:9a:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org