Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa
File:                     473c7c36-4556-38c3-9405-8bc9ecfdf684.roa (raw, json)
Hash identifier:          o+AyzBEgUAmBzrdzru4/w9zNpSdqkQMCssaODEsLId0=
Subject key identifier:   63:02:94:F0:17:B4:1B:5E:FA:A8:ED:0F:14:8C:96:7A:8E:5A:3B:8B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858459E93605579C2B14B4256F800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        130.137.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:60:55:79:c2:b1:4b:42:56:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=c6f9e0fe-4f60-4047-bee1-8c0cedb3188b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:f4:fb:c1:4e:94:c5:7b:cc:05:83:2c:4c:
                    f2:28:b0:11:f3:53:1f:53:1f:c4:df:07:dc:40:be:
                    18:c1:5c:5f:6e:19:7f:fe:e5:48:b7:f0:6c:f7:62:
                    a3:a9:ac:fa:7c:d4:2b:fa:38:b0:de:52:da:2e:f3:
                    aa:2e:30:48:3d:3f:c4:5d:00:ce:de:da:55:1b:67:
                    ab:cd:16:70:52:df:73:ff:c8:39:2d:34:a0:87:24:
                    14:9a:5d:2a:d0:81:b5:06:91:2f:40:e5:ef:af:33:
                    df:93:02:c2:42:50:f3:af:03:81:4f:d2:57:08:30:
                    9d:bb:7c:4f:06:cc:f8:e1:07:9d:85:0c:79:a7:8f:
                    08:9f:76:7b:3b:e1:74:7d:a8:4a:63:bd:e7:b8:c3:
                    41:15:0c:63:55:9b:a3:9e:98:35:40:f6:93:43:8f:
                    97:ec:00:27:e6:60:04:f8:3e:74:ea:c7:83:ba:92:
                    85:12:b5:6f:3f:6c:f9:b3:f1:52:7b:e2:ff:06:b2:
                    81:44:bb:bd:3c:1d:0c:e8:6c:90:a7:37:61:38:2f:
                    73:4f:fa:11:ad:97:91:6a:f0:50:1e:09:6c:6b:5a:
                    1a:9a:7e:97:9a:53:6e:28:7e:ce:16:a2:ca:4e:4d:
                    8f:0b:a0:50:bd:51:49:ed:a4:32:6e:37:75:1a:57:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:94:F0:17:B4:1B:5E:FA:A8:ED:0F:14:8C:96:7A:8E:5A:3B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:2e:8b:e9:04:bb:de:b1:ca:19:b4:81:d6:90:12:9a:66:
         46:00:f9:7f:1b:7b:0a:4d:7f:b1:ec:ef:73:f1:69:da:5b:9f:
         55:5f:85:00:68:ed:f6:a7:f2:bb:21:73:ba:09:50:33:40:1e:
         0e:ed:0b:bb:a7:e3:5c:36:c0:2d:39:43:b7:c5:89:d2:67:31:
         89:f8:eb:b1:ac:8f:54:22:81:1c:e8:da:31:bf:46:f7:42:de:
         55:27:f7:e9:2d:e7:2f:6c:cb:e0:bf:9c:73:37:28:23:cb:45:
         3f:0a:4b:f8:80:87:e7:a1:bb:90:d5:11:bc:13:8b:d9:db:06:
         38:17:aa:e2:e0:3f:c7:fb:81:73:aa:cb:df:01:f6:81:c6:d2:
         8d:2f:27:84:6f:eb:83:61:46:cd:8b:0b:89:23:3a:4d:e6:3c:
         c2:9e:c9:60:6f:8c:e0:66:a0:86:9e:dc:4d:49:38:1e:b8:75:
         18:21:cf:9a:e3:51:ab:6c:2a:09:57:29:9c:8b:32:6c:23:79:
         a7:83:21:75:10:56:b2:f0:bb:50:5d:98:07:3c:a6:b3:da:3d:
         75:90:17:23:f2:99:83:a5:6c:c2:65:56:bc:75:01:92:07:70:
         1a:4e:c3:13:24:d0:02:e4:68:f5:93:8c:01:a3:bb:2d:c9:ea:
         0e:ea:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:46:56 2024 by rpki-client on console-fra.rpki-client.org