Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ede5f64c-de4a-3c8b-8e17-c921799d8300.roa
File:                     ede5f64c-de4a-3c8b-8e17-c921799d8300.roa (raw, json)
Hash identifier:          HqkB+SfgFvtpL/jlTn01Xp3niTP9qgrjSeo9m3JPFw4=
Subject key identifier:   73:BF:AD:C9:6B:37:25:1E:F3:43:A3:67:5D:8E:A7:9C:2B:90:A7:AA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845B4E8D33E88B6531DD53B4E80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ede5f64c-de4a-3c8b-8e17-c921799d8300.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        130.137.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d3:3e:88:b6:53:1d:d5:3b:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=88f6df2d-0846-4986-a979-2eac5b28eeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:1c:d9:13:dd:5f:27:94:42:85:d0:d4:d4:
                    2e:d2:94:13:e3:87:e3:e3:ef:53:a0:70:7f:9e:11:
                    42:bc:ed:37:9e:9b:63:88:26:a7:4d:68:c2:6f:22:
                    1d:86:f5:6d:e7:6b:12:f8:c5:d8:db:25:f4:08:30:
                    3b:3d:ed:6d:94:16:f0:90:ed:16:8d:c7:6b:b3:95:
                    90:a4:f3:21:5a:b7:a4:09:36:ed:83:c1:7b:ff:84:
                    74:99:5b:4d:7d:1b:55:0f:96:9f:1f:e1:12:ec:fd:
                    f0:59:e1:5c:18:c1:ba:68:d2:fb:b9:e4:7f:c1:f7:
                    6a:41:dd:7b:da:bf:5e:05:0e:e7:ee:4b:29:f5:a8:
                    cc:13:17:c3:bc:8d:a0:35:88:64:d2:82:e6:f2:cb:
                    e5:62:71:0f:87:e5:51:a3:e6:54:f1:d1:a5:09:b0:
                    1b:a6:6b:47:c8:de:06:52:db:a7:ed:ad:d5:ef:d7:
                    45:c5:a4:2b:79:0e:45:dc:56:bd:9a:2a:40:ff:2f:
                    97:01:41:ee:77:26:a6:88:90:7e:36:f8:8d:5f:eb:
                    ba:58:4a:46:bb:f8:4f:c9:a1:6f:36:8b:60:6c:15:
                    05:ad:12:a1:78:93:fa:f8:1f:86:de:33:48:de:d6:
                    37:e3:e5:15:1c:8f:51:5f:47:47:47:71:1b:d5:93:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:AD:C9:6B:37:25:1E:F3:43:A3:67:5D:8E:A7:9C:2B:90:A7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ede5f64c-de4a-3c8b-8e17-c921799d8300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:04:14:48:8c:e3:49:50:ee:e9:b0:98:b5:5d:c1:d5:26:
         95:7d:23:f4:5a:db:eb:02:37:0f:d1:a8:ca:94:8a:11:10:4f:
         76:d5:20:01:d1:c9:78:68:98:64:fb:51:32:2d:fe:41:64:41:
         b1:ab:de:04:4a:de:b7:3e:b4:a5:46:7e:3c:3f:f6:26:47:53:
         d9:38:d1:95:95:d2:d3:94:4f:df:65:4c:83:4c:d9:8a:de:7b:
         bc:cb:1c:47:96:e2:e4:c7:b7:e3:55:80:dd:27:d2:58:04:73:
         d6:40:31:7e:2d:7d:9d:60:c0:57:44:66:a3:e0:64:29:11:3b:
         48:61:7e:c6:cb:8a:a3:46:b9:73:76:fd:5a:46:b4:ea:3c:2e:
         22:0e:9c:32:8f:a0:ee:b0:ef:f5:e2:6e:32:d6:53:4e:b6:a5:
         a2:c0:fb:00:ad:b1:a9:2e:f6:de:d0:97:7a:2c:79:ba:a5:3f:
         f3:80:b7:0f:2a:dc:49:cd:65:f4:10:55:c2:fc:49:ef:b6:f6:
         dc:0c:80:fc:1b:6a:7e:44:9d:70:ec:91:b5:a9:30:1d:87:ce:
         c2:fd:ca:ae:76:1a:dc:00:de:8d:77:18:33:2e:be:d8:be:3f:
         9c:24:54:88:6f:83:5d:85:f5:35:e8:95:ca:a8:6a:5e:9b:07:
         0c:13:9d:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06NM+iLZTHdU7ToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ODhmNmRmMmQtMDg0Ni00OTg2LWE5NzktMmVhYzViMjhlZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPoc2RPdXyeUQoXQ1NQu0pQT44fj4+9ToHB/
nhFCvO03nptjiCanTWjCbyIdhvVt52sS+MXY2yX0CDA7Pe1tlBbwkO0Wjcdrs5WQ
pPMhWrekCTbtg8F7/4R0mVtNfRtVD5afH+ES7P3wWeFcGMG6aNL7ueR/wfdqQd17
2r9eBQ7n7ksp9ajMExfDvI2gNYhk0oLm8svlYnEPh+VRo+ZU8dGlCbAbpmtHyN4G
Utun7a3V79dFxaQreQ5F3Fa9mipA/y+XAUHudyamiJB+NviNX+u6WEpGu/hPyaFv
NotgbBUFrRKheJP6+B+G3jNI3tY34+UVHI9RX0dHR3Eb1ZMuswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHO/rclrNyUe80OjZ12Op5wrkKeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWRlNWY2NGMtZGU0YS0z
YzhiLThlMTctYzkyMTc5OWQ4MzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoMBBRIjONJUO7psJi1XcHVJpV9I/Ra2+sCNw/RqMqUihEQT3bVIAHR
yXhomGT7UTIt/kFkQbGr3gRK3rc+tKVGfjw/9iZHU9k40ZWV0tOUT99lTINM2Yre
e7zLHEeW4uTHt+NVgN0n0lgEc9ZAMX4tfZ1gwFdEZqPgZCkRO0hhfsbLiqNGuXN2
/VpGtOo8LiIOnDKPoO6w7/XibjLWU062paLA+wCtsaku9t7Ql3osebqlP/OAtw8q
3EnNZfQQVcL8Se+29twMgPwban5EnXDskbWpMB2HzsL9yq52GtwA3o13GDMuvti+
P5wkVIhvg12F9TXolcqoal6bBwwTnXQ=
-----END CERTIFICATE-----
Generated at Thu May 2 22:32:07 2024 by rpki-client on console-ams.rpki-client.org