Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/9aa7958f-f196-3a7a-b81c-c403cd9be274.roa
File:                     9aa7958f-f196-3a7a-b81c-c403cd9be274.roa (raw, json)
Hash identifier:          rfehoLtZJuvPbjxEAE/vdOaWnq+yAbprowPR3Q4vkhA=
Subject key identifier:   6F:F0:8E:C5:05:CE:6C:E8:5C:78:5F:16:D7:2E:E9:C5:6B:78:8A:C0
Certificate issuer:       /CN=10aa04f0-7421-4813-bfda-269303d05d1d
Certificate serial:       010D0C9F4328584582A89D9D759910569A389760
Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/9aa7958f-f196-3a7a-b81c-c403cd9be274.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     77
IP address blocks:        204.9.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9d:9d:75:99:10:56:9a:38:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=8bcc3147-b514-4763-bffd-c8859add2908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:d9:8b:c1:0a:34:98:ef:bd:f3:84:3b:ef:
                    54:39:fb:53:e8:7d:f4:8a:11:ad:2b:d9:de:ea:a4:
                    84:03:99:41:71:89:2f:b8:38:e8:05:43:7b:24:5a:
                    dc:26:54:0a:d4:de:d7:1e:cf:90:30:b6:0e:13:4e:
                    6d:89:f5:f6:74:a5:39:b8:5d:c8:2b:a4:25:5b:21:
                    72:fc:4f:b3:03:7b:8d:c2:6c:59:8d:b1:51:7b:66:
                    45:51:5c:75:92:a7:f1:b8:2e:c4:05:78:25:d2:34:
                    d0:85:6f:bf:82:97:22:06:f1:f2:fd:ce:e2:8f:69:
                    e0:2d:a9:c8:2d:ad:e8:f9:48:52:03:02:70:dd:df:
                    76:c2:61:a3:63:2e:df:f0:82:be:58:52:ec:16:bb:
                    f4:89:b8:e1:44:cf:6d:72:52:f3:1f:0a:6c:4a:2e:
                    9c:fb:79:28:2f:8f:e5:c4:6a:2c:18:92:b7:40:3d:
                    2f:35:f4:d3:8a:3e:06:12:57:58:78:76:2b:92:e1:
                    7d:53:53:c1:8e:72:af:5f:b6:b5:eb:46:23:21:3c:
                    09:ef:dd:9a:f2:f4:df:ea:cd:7f:4a:cb:0a:f8:4a:
                    84:4c:bf:4e:f9:7e:ae:c1:31:74:45:e1:dc:f5:7d:
                    9e:12:c0:37:c3:59:3d:06:d2:51:74:a1:51:b5:31:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:8E:C5:05:CE:6C:E8:5C:78:5F:16:D7:2E:E9:C5:6B:78:8A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/9aa7958f-f196-3a7a-b81c-c403cd9be274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl

            X509v3 Authority Key Identifier:
                keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:4a:b9:eb:54:51:af:72:ff:59:1a:94:93:91:7b:70:4d:
         ac:d2:5d:7b:97:60:b2:88:65:f8:76:4d:3d:18:20:da:a7:33:
         61:97:51:54:29:28:5f:c9:78:cd:a9:68:6b:50:48:0e:cf:10:
         48:6d:df:ee:73:8f:92:ab:b5:ef:84:58:8f:ee:c8:dd:7a:4b:
         4b:e7:2e:44:3c:d3:ea:de:27:01:63:ab:cd:c8:64:43:c4:25:
         95:20:1b:74:93:c2:85:a5:3d:c8:ca:2b:b2:e9:67:7c:54:5c:
         ce:f9:a2:41:3b:18:84:71:ec:26:81:7a:bf:cc:f5:38:0e:fb:
         91:5a:4d:ce:86:90:0d:40:cb:4a:a1:08:ba:d9:25:f8:6d:80:
         b7:96:b7:57:00:26:32:c7:dc:4d:45:01:87:54:50:83:4b:d5:
         a3:6e:d0:ad:ad:4a:7c:9f:de:5c:e9:b2:b4:de:87:85:3d:df:
         f5:86:e1:8b:c2:f9:f0:63:fe:5d:fe:f6:f0:ee:77:86:ef:a5:
         75:10:df:22:3a:02:9a:61:47:95:c3:fd:be:3e:a3:2c:09:e8:
         2f:87:3c:67:7e:3f:97:e5:0c:67:99:ad:0d:84:8e:6b:e1:99:
         7f:66:dd:54:c4:d8:ec:2b:69:bf:4f:1c:b2:5f:f8:70:75:e1:
         6f:b1:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:30 2024 by rpki-client on console-fra.rpki-client.org