Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1291031d-5994-3788-b462-daa0ea672438.roa
File:                     1291031d-5994-3788-b462-daa0ea672438.roa (raw, json)
Hash identifier:          BcBwkkP5KIuerxuAZ/h1KUy2+8O+KUj6P2E/lrugyMY=
Subject key identifier:   8D:29:08:B5:18:A7:B6:AB:E1:A0:E4:AF:A1:3F:39:C5:60:94:5F:1F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845698864C19A3674CE269B2E40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1291031d-5994-3788-b462-daa0ea672438.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        130.137.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:64:c1:9a:36:74:ce:26:9b:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=3e3d6826-2c98-4dd7-ab45-8d1c5dbdab54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:ce:ec:05:b3:e2:65:48:d5:cc:87:8c:a0:
                    d6:1e:a1:28:5d:15:bf:64:dd:78:48:23:97:09:84:
                    3e:c2:11:94:4b:0e:b1:6a:41:c5:f1:55:49:79:71:
                    c1:f6:26:8b:21:2d:7e:5d:32:87:9d:a3:21:ae:69:
                    be:f0:a4:b3:4c:c4:19:d8:d9:b9:75:5d:d2:51:35:
                    f4:df:d1:62:18:f2:5b:b1:7f:e8:ce:e6:31:e3:40:
                    23:b1:7e:10:ad:9d:a8:5d:c9:03:73:e3:e4:33:c4:
                    da:92:3b:ee:a2:5d:a1:f1:5b:96:83:f4:11:0a:ff:
                    7d:d9:25:5c:2e:39:d7:2b:33:e6:08:e0:3b:42:7a:
                    d0:df:01:0a:ed:b9:2a:da:9d:a8:15:57:1d:39:df:
                    33:ba:99:cb:89:2b:61:35:34:81:28:ac:2b:29:a7:
                    ec:d5:7c:47:86:af:54:97:67:0f:1d:5e:f9:4d:8d:
                    07:61:cd:f5:a0:4b:47:ac:6b:7a:01:9e:3a:4b:6f:
                    88:0a:8d:6a:af:45:a7:10:21:54:36:22:4b:25:fc:
                    f8:9b:72:27:8c:1f:ce:da:7a:f7:1b:13:72:0e:cb:
                    c6:e3:c7:93:a7:0b:34:16:bd:3d:31:63:95:d7:4b:
                    b1:1d:09:f1:5e:be:83:ef:a2:d0:f2:36:1a:a8:3f:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:08:B5:18:A7:B6:AB:E1:A0:E4:AF:A1:3F:39:C5:60:94:5F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1291031d-5994-3788-b462-daa0ea672438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:0c:b6:cd:74:a2:fc:1b:3f:84:0e:0d:3a:d2:93:9d:0f:
         58:b6:54:c5:ed:b5:3f:c2:bc:52:bd:dd:cd:ea:5b:be:fb:04:
         4d:d9:0e:1c:2e:db:51:22:a5:17:84:32:ae:ee:00:36:c0:c8:
         d9:c4:b5:ad:e3:7b:18:fc:63:36:e0:40:93:96:4f:fa:59:ce:
         02:48:b0:30:2e:b4:f9:c8:9d:fc:30:e1:13:98:be:b1:28:db:
         ed:3a:2a:83:58:6e:87:b8:57:6d:5d:dc:e1:6d:7e:dc:c8:f7:
         b9:a0:5e:f2:01:51:ff:d3:bf:27:23:6d:9d:41:ad:5d:ec:15:
         ab:9a:79:cf:bf:6f:fd:aa:e6:cb:cf:a0:ce:54:cd:c1:c8:de:
         b2:a0:1b:1c:34:3a:27:ee:9c:6e:b9:74:70:d6:ae:fe:b0:cb:
         ed:29:39:e4:40:b5:a6:5d:fd:c2:8a:07:16:a4:ad:3a:5c:e0:
         8c:4a:87:6b:17:0d:09:51:17:6e:2f:6d:67:67:91:c4:f1:47:
         ca:39:9c:bf:7a:e9:12:bb:fc:31:28:6f:dc:af:8f:c7:15:02:
         f4:eb:72:c7:a6:a0:27:43:f8:66:1e:f7:d7:05:41:4a:32:90:
         93:8a:1f:f5:7c:4d:11:eb:39:bd:46:d7:2b:c1:a2:68:ca:8a:
         ed:d7:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:53 2024 by rpki-client on console-fra.rpki-client.org