Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
File:                     2e892f0a-0935-3e59-bd12-3f0547f44c55.roa (raw, json)
Hash identifier:          qcu0FmqTdA94Qjojooms6Q/OoYeOVzAMM9BB2colrOk=
Subject key identifier:   91:13:DA:87:86:3F:57:7B:3D:8E:58:53:93:0F:A9:2C:5B:D2:40:1F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858459E935F5D2D5A4CE755CCE000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        130.137.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5f:5d:2d:5a:4c:e7:55:cc:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=1a025c94-b139-45db-aa5f-6a4a39d78690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:f6:99:be:16:53:15:66:ab:e5:31:2d:a6:
                    da:7c:0f:a0:b8:18:10:5c:24:0d:8a:e2:f5:5d:bc:
                    92:fe:a1:1e:10:54:aa:ff:56:ba:7a:cd:47:89:26:
                    5d:a5:fc:2d:5a:52:6e:7a:2c:d9:ed:90:5d:dc:77:
                    93:ff:db:f5:3f:c6:94:61:00:3d:15:a1:fc:04:4c:
                    8e:f0:21:32:36:55:53:42:43:7d:9c:04:11:8f:6f:
                    1e:b4:41:70:23:50:d2:cd:ad:e8:6c:55:e1:2b:94:
                    d6:7b:4c:2a:4b:e1:04:88:45:38:ce:10:18:78:5c:
                    b1:0b:61:68:6a:87:25:07:0a:42:50:ce:0c:f9:a0:
                    69:3c:ea:7c:35:98:35:32:23:0e:dd:fa:21:ff:f5:
                    18:a2:3b:b1:72:2c:9e:d8:9b:1b:25:88:d9:03:40:
                    fb:96:1e:41:9b:7c:e8:95:f6:6d:38:38:96:9f:98:
                    51:f0:4f:a6:d7:fc:4f:11:88:01:f9:e1:bc:94:4f:
                    0d:4f:ce:c3:30:e0:8a:b4:91:6d:f6:23:43:90:9f:
                    9d:3f:f9:e0:5b:5b:91:0e:1a:47:bd:b3:6c:ef:82:
                    6a:4b:7c:cd:f7:a3:8e:82:b6:32:8d:31:c6:65:63:
                    50:d4:df:71:38:f6:78:19:5d:24:37:10:f2:6f:d4:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:13:DA:87:86:3F:57:7B:3D:8E:58:53:93:0F:A9:2C:5B:D2:40:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:cf:13:f5:fa:72:d6:0a:85:ce:34:24:88:90:ad:44:60:
         fe:bd:10:d3:8a:fe:86:bd:fa:5d:90:cd:40:78:79:07:c2:4d:
         00:e0:f1:52:ff:48:cd:4e:c5:64:ff:72:26:29:82:1c:d4:dd:
         5c:86:9b:02:ce:15:9b:51:ab:30:f0:6a:de:fa:72:ac:43:76:
         fc:47:64:b5:66:58:9e:1d:68:30:c8:12:b6:02:a3:9a:72:94:
         50:47:39:35:14:91:a1:f5:a5:ac:5e:41:86:83:f1:24:fd:17:
         3c:e7:76:5b:eb:58:b8:8c:d8:a0:7e:f8:f1:6b:80:ee:1f:cf:
         12:4c:bb:48:84:af:99:97:01:6b:c0:d5:02:d2:b3:e6:aa:5d:
         e3:00:e1:00:a0:4d:f2:1e:fb:80:f4:dc:fa:c7:da:21:78:ef:
         27:10:cf:f1:13:c4:0d:f1:5a:69:c2:ab:c7:b3:a4:68:14:4b:
         6b:f8:14:f8:bd:8f:d0:a8:48:84:e8:48:2e:99:b2:63:10:a4:
         57:3d:7a:5e:1d:93:46:3d:84:78:7c:18:b7:98:52:9f:8f:c1:
         0b:f8:09:cd:5a:f4:0e:38:1e:8e:7e:95:14:95:ae:74:77:7c:
         1b:dd:7d:46:28:47:65:82:ed:c7:28:a7:f9:e4:15:13:68:7c:
         0d:0d:7b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:57 2024 by rpki-client on console-fra.rpki-client.org