Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa
File:                     2ac6c5b1-6113-336e-9800-aec40e75f251.roa (raw, json)
Hash identifier:          I2H+QNnvpJEcAYcgqTXEaCJ8m9gUlisgnr6d2FcGF10=
Subject key identifier:   5E:6E:4C:8F:9C:A1:54:05:FA:E9:3A:BE:3F:47:B0:E3:57:07:59:9D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584793B11A2AACF4D47A23DE0280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     8987
IP address blocks:        130.137.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:1a:2a:ac:f4:d4:7a:23:de:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=08097809-fe31-4b34-adb3-e93997ad87db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4f:1f:e7:b5:e4:bb:0e:b2:25:12:e8:04:b8:
                    40:91:34:6e:9a:b2:cd:b6:32:3b:85:7b:02:50:49:
                    c7:cf:3f:90:a2:a3:c5:67:44:fe:34:80:85:28:f6:
                    42:bd:03:91:32:22:c2:21:97:21:c5:4b:40:ce:ab:
                    04:4e:88:c5:39:ab:ab:ca:f0:f4:fd:3f:c3:97:ee:
                    5d:6c:2a:fe:ef:9b:ca:ac:e1:ba:70:56:99:9f:99:
                    15:fe:b7:a2:ec:fc:59:6a:fe:e3:58:dd:53:11:55:
                    6c:a4:4f:e4:a9:c5:28:6c:00:f6:6b:a8:f7:b3:50:
                    7c:04:9c:2c:8d:31:1a:99:05:46:a9:ec:fe:2a:a6:
                    68:42:cf:6d:15:1c:ea:7d:bd:0b:76:b4:1a:96:22:
                    52:7e:83:94:a5:e1:23:60:92:95:f1:30:1d:fa:9c:
                    8f:f0:ef:19:d5:2f:03:42:c1:05:01:ad:6e:42:a8:
                    19:d7:ce:4e:a4:78:02:5d:6d:40:23:75:3e:f1:05:
                    5c:ef:0f:7e:9f:1f:cf:df:55:84:2b:fb:bd:e4:0c:
                    d4:94:18:4e:d9:89:7f:6f:7c:e8:0f:ee:b4:1c:cd:
                    20:51:18:8c:a8:53:06:e1:e6:b4:fa:1b:7c:47:7d:
                    72:dd:19:74:be:3c:a0:50:b4:04:e6:f2:17:3f:20:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6E:4C:8F:9C:A1:54:05:FA:E9:3A:BE:3F:47:B0:E3:57:07:59:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:7f:47:b4:e7:ec:20:da:c2:94:7f:3a:a4:4d:51:9c:d2:
         ef:50:0e:2c:03:82:4c:70:d9:cb:35:15:36:78:1e:f5:f2:ad:
         be:34:4c:a2:fb:e3:28:82:9a:27:35:47:77:9b:d6:77:38:ca:
         e2:90:be:0c:06:2d:e0:52:ca:9b:6c:95:52:54:31:41:fe:57:
         c8:d2:c2:ce:7b:d1:97:85:41:9b:80:01:c8:94:cf:c0:d8:65:
         32:5b:48:40:a4:a7:e7:dc:86:b2:35:4d:57:02:c1:73:db:f8:
         ec:c6:e0:e8:77:2a:e8:fa:bf:d9:e5:9c:a5:ef:0b:4c:ff:61:
         46:83:8a:64:31:b6:1e:19:20:70:2b:c2:15:e6:cc:dc:c2:12:
         a8:c7:4a:9c:23:6e:f8:cb:ea:52:4c:9b:bc:1b:b3:6e:d6:c5:
         66:8d:fb:f8:7f:2a:43:d4:a4:c3:35:63:65:96:11:fd:20:63:
         4e:29:cd:42:20:ca:43:96:5d:38:9b:35:cb:a6:04:27:4e:ff:
         ac:04:ff:1d:c4:ce:f2:df:33:83:a6:e3:07:9c:ae:ba:c9:05:
         82:ec:e4:45:b2:15:a0:5c:3a:8c:b7:8f:4d:76:cc:9e:00:87:
         c6:2c:0f:d8:09:e4:c7:d9:4d:f9:aa:89:82:9e:d9:a8:6e:cf:
         9d:28:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:49 2024 by rpki-client on console-ams.rpki-client.org