Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
File:                     e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa (raw, json)
Hash identifier:          mvmWddus3cYYlSOwlijSWJwiYtCuMMj/FdmVSJGWwDc=
Subject key identifier:   51:73:8E:88:ED:77:BC:21:DA:A0:57:CC:30:51:7F:26:24:3E:A7:7A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848530AE85110EB0F668E2861C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        130.137.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e8:51:10:eb:0f:66:8e:28:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=cd924263-0a92-482a-8733-c5230a1211b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:81:16:7c:30:b6:96:88:62:13:a5:64:de:
                    78:60:38:4f:1c:f4:f3:8c:e2:aa:f7:16:f3:4b:44:
                    48:bf:21:46:ee:b1:7b:7b:5f:9f:a8:d0:cb:ab:38:
                    29:cb:07:fd:02:c0:d7:63:35:80:d6:b8:b7:88:37:
                    33:a3:49:9a:f8:9a:3b:73:e3:5a:d6:d1:17:04:6e:
                    f9:75:57:f8:4e:4f:fc:9f:ff:f7:19:c1:c5:67:8b:
                    35:2c:88:f2:db:51:94:be:5d:13:bb:b0:fb:bb:12:
                    61:cb:0c:d3:9b:95:ec:84:5d:d1:cd:fd:f7:e9:4f:
                    62:2f:36:9b:78:36:e3:bc:bd:dc:84:1d:c4:c2:08:
                    20:ff:7c:f5:ae:7c:ff:40:fd:27:b8:1f:59:45:4e:
                    1a:7b:62:d3:81:ff:15:ef:ac:93:ea:3a:e5:d9:82:
                    c0:5c:9f:d2:f8:f1:67:ae:f1:c0:ad:04:cb:58:e2:
                    b4:99:60:f4:d3:08:22:fe:d1:72:b2:01:a1:32:1d:
                    af:aa:db:64:d7:74:08:b0:70:d3:b8:ab:72:50:f4:
                    3b:e7:81:ea:7d:d7:12:0a:65:b1:2a:10:05:10:19:
                    cd:8a:4b:d4:a0:9e:92:9d:f0:75:4d:d7:1e:2e:68:
                    2b:9b:94:68:6b:db:42:d9:20:35:4a:52:7a:4d:8b:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:8E:88:ED:77:BC:21:DA:A0:57:CC:30:51:7F:26:24:3E:A7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:60:7a:b3:39:e8:24:b9:14:38:4f:9d:23:ae:50:ae:1c:01:
         93:f9:35:ae:ed:77:9c:11:f2:b6:94:e7:eb:4e:cc:f3:05:60:
         53:ff:48:ce:68:56:0b:33:6d:7a:92:d3:72:94:c2:a5:9e:67:
         bf:13:49:3f:d2:35:b4:ec:4b:39:d9:53:dc:55:20:21:a5:d9:
         0e:ca:51:f4:a5:76:6c:78:75:9b:e3:1c:7f:ed:da:cb:8d:ca:
         80:2e:7d:5a:52:1a:89:c4:ba:39:06:01:a6:a6:c1:e0:2a:25:
         2b:9e:c8:a1:f9:e7:e1:d3:65:b4:d8:fc:75:8d:3d:e1:d0:ff:
         60:7d:41:11:c2:84:68:85:8d:29:81:56:2b:ee:ac:69:06:bb:
         ea:b5:b4:50:7a:2b:b4:3c:c5:df:81:c3:92:bc:03:1f:1d:33:
         c3:72:4a:73:57:f5:36:1c:55:3a:81:e8:d4:57:77:9c:f1:72:
         a7:49:7f:ef:1a:4a:11:9a:b1:99:c8:dc:17:9a:c1:3e:57:c7:
         fb:ee:db:c9:ad:09:ee:ab:17:00:13:48:d3:37:e7:ba:2b:47:
         89:ce:d2:bc:26:74:10:02:8c:c1:1c:18:b8:f5:8e:78:68:5d:
         ef:1d:c1:78:e2:8c:e3:f1:4e:fc:0b:a5:82:b6:3d:a9:54:b4:
         cc:63:30:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:08 2025 by rpki-client