Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f37450b9-11a7-349c-ae99-5d21f3a6281a.roa
File:                     f37450b9-11a7-349c-ae99-5d21f3a6281a.roa (raw, json)
Hash identifier:          XBjpOIUlMgmpRMYETk7Ol2UBPVTOQJnuEOoPHq3QhNk=
Subject key identifier:   6E:9F:BC:46:76:92:05:40:32:8E:16:5A:B2:05:F1:F1:95:E5:0B:DC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285847299B2192DF2C94909950D780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f37450b9-11a7-349c-ae99-5d21f3a6281a.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        130.137.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:21:92:df:2c:94:90:99:50:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=9ab99e06-19ca-4c82-9145-93b7b8e08f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:0d:25:51:5d:7b:11:3a:b5:54:33:31:26:
                    5e:ae:af:be:ab:a5:20:b6:69:fc:40:3c:ba:94:5e:
                    8f:73:e9:59:5b:6f:d4:f8:99:f1:b4:b5:74:2f:97:
                    63:d1:1d:fa:a3:8f:d6:32:80:5c:d0:5f:9c:dc:15:
                    4e:d8:7b:bd:79:47:05:56:5b:b7:d2:00:1d:a6:af:
                    9a:dc:64:f5:f0:12:77:1e:4c:f8:91:5b:c7:9d:6b:
                    aa:73:18:5a:04:f4:35:34:44:fe:8d:e6:66:47:34:
                    64:54:25:7d:ff:d3:df:c0:f4:e3:94:a8:f0:59:21:
                    d5:2e:66:c9:d3:89:dd:01:24:31:dc:b9:17:e5:51:
                    dc:11:64:7a:b0:5a:fb:0b:56:3c:62:94:8c:a9:28:
                    b1:32:db:f9:51:11:14:5f:5d:00:19:73:57:ef:ac:
                    67:17:b9:25:31:79:71:93:0d:58:98:30:f8:56:e8:
                    63:72:1c:50:66:8b:1e:1a:c5:74:5d:fe:94:42:99:
                    68:ff:5d:11:52:12:66:a2:b1:d3:ef:93:5a:42:65:
                    22:94:ef:e2:4e:a0:29:96:39:56:19:0c:e2:45:a9:
                    21:4a:31:2f:43:4b:72:e6:2c:20:65:d1:a9:a9:1d:
                    d7:50:f6:45:ee:d4:a1:b1:dd:6c:8b:13:5d:cf:17:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:BC:46:76:92:05:40:32:8E:16:5A:B2:05:F1:F1:95:E5:0B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f37450b9-11a7-349c-ae99-5d21f3a6281a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:fc:ae:5a:0e:1a:fc:28:0b:36:d8:7b:d1:43:88:5c:94:
         31:95:a4:2f:92:1b:44:4c:d7:45:4e:3a:76:2e:ff:b2:53:a7:
         d8:ab:34:75:3d:d7:30:8e:4a:51:cd:c6:5d:16:f7:05:3c:f7:
         2e:74:91:61:87:3b:44:9c:8d:6a:15:a0:32:47:a3:41:92:75:
         b5:06:39:34:eb:cc:28:3b:0b:6c:08:5a:cb:03:9c:fe:f3:d2:
         4c:97:9b:8b:2a:d3:ac:68:b0:ce:e5:10:9d:88:97:17:37:3a:
         73:b9:d5:12:e9:08:85:25:10:1d:a6:53:16:6c:7a:8f:04:6e:
         13:76:bc:b2:23:7d:90:55:62:6c:45:af:a5:b4:3e:24:77:ba:
         5a:ae:df:28:4f:af:c6:2b:09:fb:a1:37:1a:3a:2b:26:71:19:
         d4:3c:aa:ca:4f:a0:4c:4e:26:c4:7e:f6:23:04:d9:2b:08:1d:
         e6:67:28:38:a8:74:46:ff:a9:2f:1b:e4:47:cd:e5:2e:bc:74:
         92:07:97:74:da:ad:c6:8b:1b:4a:e8:c9:f8:9e:78:ba:d1:17:
         bd:15:ca:19:66:d7:2a:43:cb:6b:60:27:8b:67:21:bb:e3:14:
         a3:60:64:ea:4f:51:93:ac:b4:a9:b6:64:c8:99:00:e4:54:3c:
         c8:52:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org