Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f71f39f-9ce0-3698-a102-9575bb6307c5.roa
File:                     5f71f39f-9ce0-3698-a102-9575bb6307c5.roa (raw, json)
Hash identifier:          pDfVxI9Xz+w10FypZOQQWKHDErSAq4FxFA69IbIpBfw=
Subject key identifier:   32:29:F6:8E:34:F0:DA:E6:A2:91:5F:03:E8:CF:3C:51:43:35:33:02
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584598FDF58EE16575242EC63D00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f71f39f-9ce0-3698-a102-9575bb6307c5.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        130.137.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f5:8e:e1:65:75:24:2e:c6:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=6c5c1198-b488-4bca-9ed7-84e9feec705c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:f2:0a:b6:b1:75:91:66:5d:99:69:5c:f9:
                    70:5c:0b:61:e7:9e:ee:b6:33:2a:24:52:21:33:f9:
                    a5:43:97:67:ab:8b:48:c4:57:50:57:d8:11:16:02:
                    21:e8:d2:13:f7:cc:e6:1d:c2:6e:97:c8:2f:df:51:
                    d5:1e:4d:56:cd:fe:4e:76:47:b3:94:53:06:7c:ab:
                    5a:37:46:ef:be:54:d6:e6:30:f7:37:ae:fd:dc:bd:
                    a7:41:41:d7:d4:e7:6a:44:02:4b:58:d8:a1:b5:1d:
                    30:9c:f2:30:99:ca:02:fc:8b:75:aa:a1:a6:93:80:
                    8e:26:dd:03:d0:e6:80:5e:53:03:6e:a7:09:2e:09:
                    51:96:2f:a2:97:2d:b9:dd:46:cf:18:02:f0:31:b6:
                    b8:1c:fa:c4:7a:d8:77:db:b3:2e:4c:6e:47:b6:7f:
                    6a:98:86:32:15:33:3f:73:75:f0:a0:2d:94:b5:db:
                    f0:fa:bb:87:69:77:12:1a:3d:00:8d:4d:b6:63:a8:
                    0e:4e:fe:ed:c0:5e:55:cb:3d:c8:02:9f:9e:36:36:
                    bf:04:d0:bd:06:c9:84:ce:cb:cc:48:a0:05:36:bd:
                    2d:b6:2d:40:ac:98:f6:61:fd:27:16:f9:9a:37:f3:
                    77:96:3a:c0:b2:06:46:fa:9b:d8:f2:25:d6:7e:cb:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:29:F6:8E:34:F0:DA:E6:A2:91:5F:03:E8:CF:3C:51:43:35:33:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f71f39f-9ce0-3698-a102-9575bb6307c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:c5:d5:5a:2b:5b:5e:50:d1:31:4b:23:ea:30:b3:44:96:
         a3:e5:91:27:1c:34:4e:51:47:d3:8a:7c:9a:ef:e0:2e:b9:ad:
         f5:b4:ec:b6:e4:db:bf:a6:8f:2b:2c:15:ab:1b:80:2e:c4:57:
         57:f5:81:37:5e:cc:93:24:13:86:69:0b:63:05:49:04:4c:23:
         8b:65:19:1f:24:f0:5c:4d:af:3e:c4:1d:51:18:35:85:ef:09:
         a2:ac:77:fc:d1:70:40:41:44:96:cc:18:eb:c4:58:b4:16:36:
         77:9c:2a:93:fe:0e:54:f1:c7:c3:32:59:cf:fc:d4:7b:5d:ae:
         fd:72:91:d5:3a:5b:91:d9:c6:64:75:e0:ca:42:95:40:08:69:
         05:bc:cf:b6:87:ba:ab:dd:11:4a:9a:66:67:8b:ff:d2:16:17:
         84:2c:24:68:55:d1:a9:37:29:79:25:62:77:96:9a:cc:51:11:
         e3:59:37:2f:5c:1a:b3:f5:b6:fa:5c:eb:4c:ca:b1:cf:72:86:
         be:68:42:d4:ff:86:e6:b6:0e:66:89:09:36:8f:0d:49:d1:d8:
         de:ef:61:4e:f1:b2:86:b2:db:82:70:2c:9c:89:2b:e7:6d:a5:
         ca:2e:58:40:5f:b7:22:46:70:41:33:86:aa:2b:18:14:11:80:
         f5:ef:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:06 2024 by rpki-client on console-fra.rpki-client.org