Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa
File:                     53484dda-0bc6-350c-be01-5a462cf2fd84.roa (raw, json)
Hash identifier:          CXYUFBZ0Fr2EseEqnfx0eTdqAjKRIyBFP0YpT/sQMdk=
Subject key identifier:   97:98:2A:9B:5C:B5:1C:A8:5F:29:A6:3F:25:F1:AF:4E:97:26:22:CF
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858456CF3DFF2CA391712F7E58A80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa
Signing time:             Wed 03 Apr 2024 18:24:45 +0000
ROA not before:           Wed 03 Apr 2024 18:24:45 +0000
ROA not after:            Tue 02 Jul 2024 18:24:45 +0000
asID:                     16509
IP address blocks:        130.137.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:f3:df:f2:ca:39:17:12:f7:e5:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  3 18:24:45 2024 GMT
            Not After : Jul  2 18:24:45 2024 GMT
        Subject: CN=9687384d-95fe-4773-996a-d0f1549f93ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:c7:78:3a:bd:61:f1:be:0a:41:e0:a1:73:
                    0b:05:5c:5c:0d:b9:3f:2d:c6:32:d3:36:e1:f3:1e:
                    06:ce:c0:c5:ea:1e:a8:f5:de:76:7d:96:6f:f6:ad:
                    b6:51:3c:3c:62:a0:6c:94:20:04:6b:22:f4:fd:55:
                    df:7b:9b:fb:f4:e3:2a:a8:41:c1:63:dc:59:20:36:
                    9b:80:38:f4:d0:c7:38:c8:67:02:84:35:7e:34:c7:
                    44:e5:63:a7:09:5a:fa:2d:bd:d7:22:df:f1:bf:25:
                    15:4b:2e:7b:5b:54:47:34:92:1e:92:ea:80:21:18:
                    df:8e:43:a0:1c:8b:46:c9:3d:27:a6:fc:67:ef:da:
                    c9:87:c0:02:ee:73:37:bb:b5:5f:b0:5e:46:51:9f:
                    00:3b:3e:4c:3e:20:cf:7e:a4:32:14:d8:1e:3b:59:
                    0c:37:98:5c:e2:72:2e:41:35:61:51:bd:ca:eb:35:
                    73:42:8e:05:2d:8d:ea:59:ed:6f:28:e0:45:30:7f:
                    99:2e:2d:dc:03:ee:c7:9f:62:d2:ee:99:03:d6:90:
                    61:44:99:dc:15:89:0c:4b:ec:3b:bb:00:db:70:94:
                    3c:e7:44:94:27:66:0f:56:52:c6:15:ba:8e:13:eb:
                    93:df:6e:a5:43:8f:2c:b1:14:62:10:06:36:ad:16:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:2A:9B:5C:B5:1C:A8:5F:29:A6:3F:25:F1:AF:4E:97:26:22:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:94:2a:69:18:ea:f6:de:5a:cf:91:b2:e6:ed:38:cf:bd:
         be:27:34:8c:0b:43:79:cb:cb:3b:cc:b8:89:9a:fe:ca:c8:17:
         27:a8:dd:55:01:92:bf:58:da:c9:16:e1:22:df:3a:88:5f:2d:
         28:f5:b6:58:80:1e:28:29:2a:84:ee:57:34:49:0f:73:54:ce:
         57:a3:8e:c7:aa:6a:e2:f2:84:8b:ce:07:ba:a1:ae:4b:93:88:
         5d:25:64:e4:3a:1a:04:f1:5d:48:1c:b2:a2:82:b0:c0:3b:fc:
         fd:82:3a:29:43:d8:fa:3a:43:25:83:14:bf:85:78:ab:40:cc:
         67:c1:60:92:53:63:ed:c1:a8:28:77:15:c9:0b:44:99:7a:d4:
         be:70:f7:b3:e6:af:73:61:c4:73:dd:4c:e8:b6:fd:2c:e7:e4:
         70:71:51:d7:f2:f1:9e:53:18:6c:a5:39:94:07:e9:1c:5a:e6:
         b4:ae:39:3b:10:8a:f4:9c:fe:84:15:60:bf:60:69:b7:24:92:
         c1:f7:8e:95:14:61:f4:86:e2:35:53:56:ce:ad:7b:e2:4b:99:
         b9:69:5c:a2:a1:1f:e8:cd:15:3b:6c:c4:c0:35:51:46:dd:14:
         62:43:06:57:47:72:72:95:c7:7e:bb:74:8a:46:42:51:d8:d3:
         ea:c1:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:07 2024 by rpki-client on console-ams.rpki-client.org