Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5c04921d-9717-31f4-a404-40bab469d115.roa
File:                     5c04921d-9717-31f4-a404-40bab469d115.roa (raw, json)
Hash identifier:          YO+5dG4N5g/b93ok6xfLevYXITUbcp80/aFC3DnVXGQ=
Subject key identifier:   FE:C8:72:48:DF:82:88:1A:7B:D7:95:59:7A:C6:31:5C:83:1E:05:23
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858456AED95CBB78733FAB465DFC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5c04921d-9717-31f4-a404-40bab469d115.roa
Signing time:             Wed 03 Apr 2024 01:00:26 +0000
ROA not before:           Wed 03 Apr 2024 01:00:26 +0000
ROA not after:            Tue 02 Jul 2024 01:00:26 +0000
asID:                     21664
IP address blocks:        130.137.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:ed:95:cb:b7:87:33:fa:b4:65:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  3 01:00:26 2024 GMT
            Not After : Jul  2 01:00:26 2024 GMT
        Subject: CN=85bfcaeb-8675-4940-ab69-ffe6e263326f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:12:bf:dc:11:95:c9:41:3c:da:ec:bc:30:
                    66:c7:b6:e5:fc:c7:9d:7a:cd:04:22:01:21:53:31:
                    97:be:6e:58:c5:ea:f7:8d:14:42:9f:db:ef:63:b5:
                    b5:76:f6:39:2c:4f:db:a1:02:9d:fb:eb:31:d7:b1:
                    74:07:a7:db:a3:c9:9b:64:06:6b:1c:83:38:9b:fd:
                    41:ea:5c:af:9d:70:df:78:f5:39:fc:5d:48:30:81:
                    08:b7:65:95:5a:4b:43:c3:21:33:aa:fa:c8:52:72:
                    eb:d3:3d:9a:16:d8:57:49:52:fb:ca:bc:22:43:f8:
                    5a:18:43:2a:dc:af:a8:a3:d4:91:a0:11:e6:ea:0f:
                    f0:fb:28:fe:04:30:a1:ac:40:58:4d:91:63:d3:bc:
                    4a:38:07:62:6e:e9:15:50:26:09:83:da:7b:b5:fc:
                    72:a8:46:04:71:d1:74:0e:71:6e:85:cd:05:93:19:
                    da:eb:56:ef:a3:f4:06:25:38:55:81:91:bd:b8:ae:
                    d3:6c:f8:72:c4:6e:06:db:c8:52:45:89:8f:b9:e9:
                    1a:4c:0d:db:47:a0:88:8e:32:c5:dc:67:fc:b8:4e:
                    0f:8c:1f:6d:bc:02:8c:a7:8a:a1:78:07:a1:18:a7:
                    9f:76:24:00:dd:90:ff:23:4a:59:55:2e:97:0c:20:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:72:48:DF:82:88:1A:7B:D7:95:59:7A:C6:31:5C:83:1E:05:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5c04921d-9717-31f4-a404-40bab469d115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:d6:64:1d:23:46:93:43:f0:3d:da:26:5f:40:74:6d:69:
         5e:e9:6c:08:c7:92:6c:b4:46:ac:81:7e:fb:92:bc:1e:be:4a:
         87:c4:71:6e:87:fc:3f:9c:7d:80:f3:e8:8f:fa:6f:32:7c:42:
         f7:ce:cd:51:3e:60:11:57:12:b2:78:ca:32:63:08:da:4c:ef:
         64:14:b0:a2:99:f0:af:75:22:6d:c9:bd:f3:b5:bb:2e:08:07:
         0a:8a:5f:19:24:f7:45:aa:3f:e6:00:64:ee:2a:5e:6b:f8:a2:
         07:53:0f:6d:31:1f:ed:51:73:00:0a:c3:6e:83:5c:56:9e:94:
         a5:2e:12:3d:e7:c2:c4:6e:80:38:15:69:30:13:a8:c1:ed:e4:
         ca:fe:16:08:37:df:57:ff:ba:a3:05:57:c5:da:8f:88:2a:f0:
         85:0d:9e:16:df:93:3f:e5:e8:9c:b1:b8:22:a8:cb:ed:7e:fc:
         32:9f:3e:a2:5e:46:43:ca:fd:7c:b7:26:5c:7a:6b:c2:de:69:
         92:50:04:1d:0c:52:cc:64:d8:ce:23:fc:97:dd:00:a4:44:c9:
         c6:aa:9e:56:ac:0d:1d:9e:e4:e8:7b:d0:ab:97:0a:a2:b2:f1:
         05:af:d6:f3:c0:78:58:02:92:0e:13:5e:c6:32:db:61:c7:c9:
         44:a8:50:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVq7ZXLt4cz+rRl38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQwMzAxMDAyNloXDTI0MDcwMjAxMDAyNlowLzEtMCsGA1UEAxMk
ODViZmNhZWItODY3NS00OTQwLWFiNjktZmZlNmUyNjMzMjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpYSv9wRlclBPNrsvDBmx7bl/Medes0EIgEh
UzGXvm5Yxer3jRRCn9vvY7W1dvY5LE/boQKd++sx17F0B6fbo8mbZAZrHIM4m/1B
6lyvnXDfePU5/F1IMIEIt2WVWktDwyEzqvrIUnLr0z2aFthXSVL7yrwiQ/haGEMq
3K+oo9SRoBHm6g/w+yj+BDChrEBYTZFj07xKOAdibukVUCYJg9p7tfxyqEYEcdF0
DnFuhc0Fkxna61bvo/QGJThVgZG9uK7TbPhyxG4G28hSRYmPuekaTA3bR6CIjjLF
3Gf8uE4PjB9tvAKMp4qheAehGKefdiQA3ZD/I0pZVS6XDCDF9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7Ickjfgogae9eVWXrGMVyDHgUjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWMwNDkyMWQtOTcxNy0z
MWY0LWE0MDQtNDBiYWI0NjlkMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYK1mQdI0aTQ/A92iZfQHRtaV7pbAjHkmy0RqyBfvuSvB6+SofEcW6H
/D+cfYDz6I/6bzJ8QvfOzVE+YBFXErJ4yjJjCNpM72QUsKKZ8K91Im3JvfO1uy4I
BwqKXxkk90WqP+YAZO4qXmv4ogdTD20xH+1RcwAKw26DXFaelKUuEj3nwsRugDgV
aTATqMHt5Mr+Fgg331f/uqMFV8Xaj4gq8IUNnhbfkz/l6JyxuCKoy+1+/DKfPqJe
RkPK/Xy3Jlx6a8LeaZJQBB0MUsxk2M4j/JfdAKREycaqnlasDR2e5Oh70KuXCqKy
8QWv1vPAeFgCkg4TXsYy22HHyUSoUGE=
-----END CERTIFICATE-----
Generated at Mon May 6 02:02:59 2024 by rpki-client on console-fra.rpki-client.org