Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67692146-8b96-30d9-8258-e3d8bd7fdda7.roa
File:                     67692146-8b96-30d9-8258-e3d8bd7fdda7.roa (raw, json)
Hash identifier:          hHYIy9zoBICTGowc1+AnzqsHz8e+KKQotdQ6M6FHd2o=
Subject key identifier:   82:E5:82:EA:71:A8:B9:2D:DE:92:57:06:17:4E:12:25:27:7D:8B:57
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845698866A417562E95B81A3F00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67692146-8b96-30d9-8258-e3d8bd7fdda7.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        130.137.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:66:a4:17:56:2e:95:b8:1a:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=167da588-8a38-4c8e-8419-7c06f37a36e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:de:25:91:e7:34:a7:b8:51:ce:ae:95:47:
                    bf:c1:4d:f0:0b:ab:7d:b2:f5:c9:c6:b4:28:36:08:
                    fc:1b:dd:41:a6:db:88:67:17:6d:90:b9:6b:a7:ef:
                    25:39:22:a3:4f:f2:55:bd:b8:ee:93:db:f7:87:51:
                    3c:93:02:fd:61:b1:23:66:c3:04:90:af:f6:bb:15:
                    80:6c:f5:01:00:fd:59:d0:11:3a:44:d2:e7:74:ff:
                    72:36:2e:a4:a6:67:51:36:22:4b:ff:be:b7:25:dc:
                    af:ca:38:cb:6c:75:c7:57:37:3c:0e:89:20:ce:f0:
                    2e:d2:5f:55:e2:84:f8:f2:64:c9:ca:5c:70:a5:ad:
                    16:c9:a5:32:c5:28:0f:6f:64:0e:26:b6:9b:c9:e4:
                    06:a1:34:37:f4:3b:dc:19:ce:48:84:35:63:d1:15:
                    55:02:2b:d3:93:57:4f:5f:61:df:e4:ae:96:a1:0e:
                    29:9a:2d:4c:61:55:51:0f:6f:4e:e0:58:8c:f8:74:
                    80:97:6a:0a:fe:7f:63:2a:53:da:e5:7b:61:5e:23:
                    8a:23:a5:b9:76:06:80:98:d9:95:b1:41:02:3c:5d:
                    ad:15:ce:fe:04:90:6b:1f:66:a0:1b:92:e6:88:29:
                    b2:b5:5a:b2:53:e2:bb:44:3d:81:de:ea:71:48:ae:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E5:82:EA:71:A8:B9:2D:DE:92:57:06:17:4E:12:25:27:7D:8B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67692146-8b96-30d9-8258-e3d8bd7fdda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:fd:7c:58:7d:65:4d:44:ea:a0:4f:b7:cd:c5:f5:14:c6:
         17:73:df:84:45:94:fb:b6:63:c7:89:b6:ff:8d:91:82:3e:20:
         aa:94:37:e4:d1:36:65:19:6e:a1:1d:99:7c:f2:9c:da:2a:2d:
         4e:43:30:45:4d:58:23:31:84:25:d3:8d:43:40:f9:b3:f2:49:
         3e:fd:cf:6c:c9:06:d9:f8:4c:ef:b5:ec:05:e7:72:78:62:a2:
         7f:2f:41:4f:91:7a:8c:f9:d5:e2:14:02:63:ab:b8:fe:95:1a:
         6a:17:71:77:97:e7:ec:48:74:3d:4d:e3:87:b6:dd:c1:c3:3a:
         87:66:bb:f0:13:da:f2:80:99:77:d8:ca:12:5e:dc:3f:54:62:
         3e:12:7a:3b:8b:64:b7:f8:75:89:e6:cf:24:d4:49:42:a9:de:
         f9:ac:38:f5:06:f8:3a:70:ce:42:d9:f9:d9:58:9e:09:be:69:
         cb:3d:4b:a4:a6:83:02:d1:14:5e:da:d2:33:61:e5:60:9c:e7:
         f0:5d:73:ef:fc:a2:2e:20:82:25:6d:de:01:9f:59:a6:00:22:
         f5:80:7f:96:09:23:67:7c:39:b9:1d:28:8f:a1:3d:8d:f9:57:
         ab:b7:64:7b:10:6e:ba:5b:59:8e:01:83:20:05:c7:95:fa:cd:
         19:df:9e:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVpiGakF1YulbgaPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQwMjEzMDAzN1oXDTI0MDcwMTEzMDAzN1owLzEtMCsGA1UEAxMk
MTY3ZGE1ODgtOGEzOC00YzhlLTg0MTktN2MwNmYzN2EzNmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQHeJZHnNKe4Uc6ulUe/wU3wC6t9svXJxrQo
Ngj8G91BptuIZxdtkLlrp+8lOSKjT/JVvbjuk9v3h1E8kwL9YbEjZsMEkK/2uxWA
bPUBAP1Z0BE6RNLndP9yNi6kpmdRNiJL/763JdyvyjjLbHXHVzc8DokgzvAu0l9V
4oT48mTJylxwpa0WyaUyxSgPb2QOJrabyeQGoTQ39DvcGc5IhDVj0RVVAivTk1dP
X2Hf5K6WoQ4pmi1MYVVRD29O4FiM+HSAl2oK/n9jKlPa5XthXiOKI6W5dgaAmNmV
sUECPF2tFc7+BJBrH2agG5LmiCmytVqyU+K7RD2B3upxSK6HKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILlgupxqLkt3pJXBhdOEiUnfYtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjc2OTIxNDYtOGI5Ni0z
MGQ5LTgyNTgtZTNkOGJkN2ZkZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwf/XxYfWVNROqgT7fNxfUUxhdz34RFlPu2Y8eJtv+NkYI+IKqUN+TR
NmUZbqEdmXzynNoqLU5DMEVNWCMxhCXTjUNA+bPyST79z2zJBtn4TO+17AXncnhi
on8vQU+Reoz51eIUAmOruP6VGmoXcXeX5+xIdD1N44e23cHDOodmu/AT2vKAmXfY
yhJe3D9UYj4SejuLZLf4dYnmzyTUSUKp3vmsOPUG+DpwzkLZ+dlYngm+acs9S6Sm
gwLRFF7a0jNh5WCc5/Bdc+/8oi4ggiVt3gGfWaYAIvWAf5YJI2d8ObkdKI+hPY35
V6u3ZHsQbrpbWY4BgyAFx5X6zRnfngE=
-----END CERTIFICATE-----
Generated at Sat Apr 20 13:51:16 2024 by rpki-client on console-ams.rpki-client.org