Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
File:                     bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa (raw, json)
Hash identifier:          D/9eT9lgVpXmU7i3Kn9uSc8zo4s+ewc4Y0bRVleCxkc=
Subject key identifier:   EA:E1:BC:7B:64:B7:B5:16:CD:AA:81:A1:59:F2:65:65:98:70:A5:A0
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F43285845B8970597F8BD371509068600
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa
Signing time:             Tue 30 Apr 2024 20:39:06 +0000
ROA not before:           Tue 30 Apr 2024 20:39:06 +0000
ROA not after:            Mon 29 Jul 2024 20:39:06 +0000
asID:                     36511
IP address blocks:        137.83.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b8:97:05:97:f8:bd:37:15:09:06:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Apr 30 20:39:06 2024 GMT
            Not After : Jul 29 20:39:06 2024 GMT
        Subject: CN=bc2b1db6-0531-4e98-a1fd-a95f3216c052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:66:07:ec:06:31:b9:a3:e0:05:8f:b4:2f:
                    51:2d:89:c9:68:d1:c4:25:4f:2e:87:8d:ae:2b:5c:
                    66:ad:14:39:55:9a:13:f1:aa:4d:12:64:fd:74:a2:
                    37:d4:d7:10:5a:ac:66:a3:88:40:20:6d:d7:1d:67:
                    c7:4f:7f:74:83:ca:80:9c:e8:28:e8:8a:a9:d3:60:
                    fc:76:a3:07:04:60:7d:5b:d8:ae:75:30:cb:42:dc:
                    41:d2:72:0c:b9:b4:b6:5d:f4:49:d7:91:19:fe:a9:
                    ad:2e:1a:51:6e:ce:a4:b1:8d:57:dd:d7:36:18:09:
                    c2:3c:7a:eb:f3:ed:54:87:bc:21:b5:9c:0d:35:6b:
                    1d:d6:03:b3:55:b0:e2:3a:74:b0:7f:98:d9:4c:e0:
                    c8:62:7c:d5:a5:e0:d7:67:2a:9d:8b:7f:08:aa:04:
                    53:37:a1:bf:82:56:72:9a:c2:52:26:6e:ec:d6:5b:
                    dc:1a:e5:65:bc:cc:b5:b1:4d:f9:85:6f:34:b5:ef:
                    ef:75:5b:68:98:d0:54:e4:c5:5f:0b:c6:b1:20:59:
                    ff:bb:13:8e:28:95:6d:11:26:a0:d7:ae:69:e2:cc:
                    bd:3e:36:ae:c2:d3:44:a4:3b:c8:ba:af:ee:77:f2:
                    c5:cb:b8:ea:7c:9d:97:16:d5:a2:75:c4:d6:3d:67:
                    20:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:BC:7B:64:B7:B5:16:CD:AA:81:A1:59:F2:65:65:98:70:A5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/bb7fb158-cc7e-3f64-812a-6488d3fb6c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:bd:6b:d4:e9:69:70:fb:40:42:09:cb:56:b1:a1:f4:85:
         52:a9:4d:1e:36:e3:d6:13:fc:6a:b1:a4:58:2c:1e:3f:3f:ab:
         56:46:9e:86:f4:7d:6d:a3:1e:cc:75:36:23:39:cf:e2:72:27:
         29:69:d4:41:d4:1d:4c:e8:24:07:9e:28:64:b2:c5:8a:e1:db:
         b1:32:00:58:7d:a1:f4:38:ce:60:6d:73:4f:97:48:d6:3c:b8:
         d5:c3:f4:97:60:89:0e:1c:6c:0b:a6:d8:2a:02:ec:65:ab:9d:
         34:37:04:68:fc:5a:37:58:93:09:a2:42:05:86:d1:6f:df:aa:
         27:09:7d:dd:2c:18:1c:19:ca:d2:d1:9f:47:94:79:3f:82:83:
         94:d8:7c:e4:68:fc:cd:82:5a:81:e3:8f:f9:ac:6a:3c:66:d4:
         69:d3:b1:c3:b9:30:17:a1:32:11:66:b9:fc:be:f1:17:23:a9:
         ad:0c:25:f0:fb:7b:0b:e9:00:66:9b:fb:5c:4f:73:59:38:a9:
         ca:5b:17:05:06:31:22:f5:2d:26:e0:41:e8:5b:01:a1:fa:0f:
         de:b6:7b:9d:fc:9d:54:60:d6:cc:53:89:66:e2:96:11:51:87:
         43:d6:f9:a9:6d:b2:c5:2b:7f:c8:0b:29:a6:bd:f0:72:b6:22:
         d6:9a:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 16:38:36 2024 by rpki-client on console-fra.rpki-client.org