Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19bd3e94-99cf-3a0b-8685-4c5140cd2d8c.roa
File:                     19bd3e94-99cf-3a0b-8685-4c5140cd2d8c.roa (raw, json)
Hash identifier:          k605fo/zQCCsVxMRZA65NDNsQqiiIAa4WOZ3BCqxxw4=
Subject key identifier:   46:D4:61:A1:F5:5E:DD:51:F5:97:22:C7:54:7B:DE:F0:FD:02:34:D1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844B85F9B1A7E57C3329B3FBC00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19bd3e94-99cf-3a0b-8685-4c5140cd2d8c.roa
Signing time:             Tue 30 Jan 2024 02:00:25 +0000
ROA not before:           Tue 30 Jan 2024 02:00:25 +0000
ROA not after:            Mon 29 Apr 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        130.137.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b8:5f:9b:1a:7e:57:c3:32:9b:3f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan 30 02:00:25 2024 GMT
            Not After : Apr 29 01:00:25 2024 GMT
        Subject: CN=74fc4232-180d-404b-9842-7b6e957ce629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4b:8b:f5:06:72:95:36:60:53:21:90:c4:6f:
                    65:75:da:8e:2e:84:bf:97:1e:1f:e8:8e:4e:07:53:
                    00:58:36:a9:f2:6c:f8:47:99:9a:13:82:42:bc:ce:
                    a7:b3:aa:90:0b:78:7a:7a:a7:49:2e:09:87:13:fd:
                    40:8a:a8:8b:03:11:1a:e1:8b:05:1c:6a:cd:06:e8:
                    43:81:72:c0:f4:04:32:87:09:3d:e6:7a:ae:a0:a6:
                    9d:a0:3e:69:f0:8b:aa:5f:b6:85:94:e4:c8:99:8e:
                    7e:08:10:6d:4e:8c:42:cd:1a:21:3d:00:e4:a5:22:
                    2b:54:ef:b8:e0:16:d2:40:28:2e:3a:3a:46:69:ad:
                    b1:8a:6a:14:99:91:ee:47:77:09:58:5c:34:89:41:
                    d2:62:d3:b9:44:f1:e5:7f:30:80:9b:38:22:17:ed:
                    6a:12:56:6c:82:42:37:07:b4:e2:52:bb:c3:6d:ba:
                    d1:9d:2c:ad:e6:88:db:72:29:37:59:fa:73:88:a4:
                    e7:f6:0f:ef:51:77:5e:97:5c:ff:ac:6a:d6:b9:d1:
                    79:00:aa:d9:52:53:10:02:6a:ed:04:a2:cd:a2:4d:
                    ee:d4:63:6e:d8:8e:d1:dc:0e:5a:5c:d0:a7:51:9e:
                    b8:01:e6:67:fe:36:b2:d7:3c:c4:f7:f2:a7:8c:2b:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:61:A1:F5:5E:DD:51:F5:97:22:C7:54:7B:DE:F0:FD:02:34:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19bd3e94-99cf-3a0b-8685-4c5140cd2d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:28:1b:b1:8b:f0:94:29:01:6a:a8:6b:31:12:84:ca:57:
         77:00:05:1a:0b:54:0b:f1:f2:52:62:56:ac:78:6b:d9:9e:94:
         7b:1f:6a:5f:7f:85:3e:ac:32:e6:55:07:fb:69:c8:a4:77:53:
         91:d7:c8:6c:0f:fb:7d:84:be:a2:ab:b9:21:57:98:95:a9:22:
         af:1a:5c:ee:76:8a:63:ba:e8:c2:c3:1d:76:4f:94:26:a4:d7:
         c4:ab:6a:c6:4f:ce:7d:36:6f:dc:73:6e:05:6e:d4:c8:f8:a9:
         6a:6c:fd:c6:59:b4:39:ab:19:47:e0:77:9a:35:2f:ec:b6:a7:
         9a:d2:bc:3c:ba:06:cb:8a:55:42:fa:6e:71:da:61:7f:d7:5f:
         60:74:c1:30:4c:ca:bd:14:a7:52:06:50:66:62:e6:a8:f1:7b:
         aa:5e:58:12:36:e6:14:2a:74:28:3e:c3:06:94:f2:47:2d:0d:
         06:d1:91:99:10:14:1a:c4:0a:bc:bc:15:97:78:bd:3d:98:f6:
         14:45:1e:7c:08:47:97:7f:84:d9:1c:10:34:06:cf:0a:bc:e7:
         c6:df:bb:d9:39:26:8e:38:0a:b8:f0:71:8c:a4:bb:0f:38:ec:
         70:22:df:9f:12:5d:30:ce:39:fd:c8:73:05:48:6c:02:9c:67:
         ce:6a:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 15:03:51 2024 by rpki-client on console-ams.rpki-client.org