Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa
File:                     493c73b8-e93a-392d-a47e-c686238919bb.roa (raw, json)
Hash identifier:          B8A+ZzREgHTW2LnZ0dqrkH0ZlUBj/LUYizKaS0umxCY=
Subject key identifier:   63:8B:9E:CB:FE:8E:9E:28:83:A0:C1:30:A9:D0:BC:95:33:74:6B:E5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844D5AFCF7C613EDBE5436198DA
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa
Signing time:             Fri 09 Feb 2024 14:00:30 +0000
ROA not before:           Fri 09 Feb 2024 14:00:30 +0000
ROA not after:            Thu 09 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        130.137.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d5:af:cf:7c:61:3e:db:e5:43:61:98:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb  9 14:00:30 2024 GMT
            Not After : May  9 13:00:30 2024 GMT
        Subject: CN=180b29c9-3bd9-45ac-9105-bc6cfc2b3806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:42:7f:45:4a:7e:09:5d:51:4a:ab:f7:cb:
                    e9:0d:68:08:ec:da:65:3e:92:8e:1c:1e:aa:3e:62:
                    f7:6b:f8:9e:87:46:cc:5e:2d:5c:63:37:7a:98:b9:
                    7a:e1:f4:41:13:22:7e:d2:a7:36:2c:87:fc:cb:e4:
                    e0:83:6e:1c:48:f3:59:e3:ff:ba:b7:be:bc:ff:a6:
                    99:5d:2a:de:d4:37:6f:37:16:ca:e7:e4:9a:43:c8:
                    6d:ea:d2:1e:b7:98:84:ca:7d:46:cf:07:1a:57:1d:
                    f8:cd:c1:ee:ea:19:83:97:6e:ff:2c:d2:40:79:ac:
                    3b:ae:be:1d:99:a5:a2:19:86:64:47:35:41:fc:89:
                    89:f3:e4:2b:a6:53:14:d2:5a:b1:34:5b:ec:ef:88:
                    a3:fe:45:15:43:a7:43:33:49:4a:52:de:81:ec:88:
                    6f:ac:48:2e:30:70:e5:b0:52:21:97:86:16:d6:15:
                    7b:78:21:f5:f2:a9:b0:7a:f1:93:15:cf:cf:ea:75:
                    15:95:fc:1a:3b:5b:6e:01:29:55:75:df:2d:b8:aa:
                    53:e8:c5:ff:da:1c:91:6a:c1:75:35:01:8f:a4:c3:
                    11:09:d3:95:c1:1c:8d:09:8d:ad:50:98:57:57:49:
                    7a:81:0a:16:63:2a:85:a4:42:48:22:5a:fc:36:ea:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:9E:CB:FE:8E:9E:28:83:A0:C1:30:A9:D0:BC:95:33:74:6B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:10:b7:23:2d:08:2e:59:71:af:dc:89:23:a5:2d:6f:01:
         99:25:a3:e3:a3:05:dc:9f:b9:b5:dc:13:1f:40:07:57:eb:e8:
         66:2e:ab:aa:13:49:d4:48:c8:fa:43:c7:a0:63:9d:93:94:d3:
         83:13:22:02:1e:74:0c:ef:67:65:07:54:d1:13:f0:f4:2a:82:
         29:68:45:9d:ea:c0:c5:bc:77:fc:0b:f8:58:33:6d:45:a4:43:
         5d:9e:1c:0d:07:66:db:f9:61:ee:5d:68:f0:ea:f0:65:b1:63:
         49:99:60:07:75:dc:5c:7c:96:c5:b7:d2:a0:1f:9f:07:4b:0f:
         ab:cb:b3:f8:02:0d:35:94:4d:a5:67:5a:83:38:22:c0:aa:0d:
         b9:d6:99:58:d9:fe:49:38:5e:51:fc:19:1b:ae:4a:e5:17:dc:
         71:a7:e9:b9:81:1b:6c:bd:87:8a:cf:54:97:8d:6a:eb:aa:20:
         19:d8:cb:2d:59:f9:9b:50:13:8d:f1:9e:ba:6e:8d:75:a4:3e:
         a6:f2:c0:77:00:2f:bc:4b:a6:3b:09:19:01:ba:8c:9f:0a:7b:
         8e:0c:b3:f1:62:88:eb:44:28:9d:dc:66:ae:0b:ba:15:cc:9a:
         56:3e:ac:44:9c:ce:66:f8:97:46:42:19:a1:75:35:ff:9b:a3:
         fd:de:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:52 2024 by rpki-client on console-fra.rpki-client.org