Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa
File:                     72be9948-9cba-369c-abf7-d341e95269bd.roa (raw, json)
Hash identifier:          4+0AxLvlVURsxhvnYBFklXaBZR7a7fAAK8gMFe/VAlo=
Subject key identifier:   1D:BE:5E:B6:B4:AD:9C:98:9F:CF:5E:0D:99:2A:BA:C6:92:F9:F8:E9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858477230E2E8FFBF7ED59AB3AED8
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     8987
IP address blocks:        130.137.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e2:e8:ff:bf:7e:d5:9a:b3:ae:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=50500b4d-4f0f-4dc0-ac0b-142cc8e89800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c5:90:9a:8d:0d:c4:e0:7e:ff:54:64:54:05:
                    6f:45:0d:b5:d8:6c:79:1e:ce:37:23:87:f8:86:58:
                    cf:35:4a:7b:5a:91:be:51:af:3a:0f:79:29:30:4f:
                    ad:28:b2:d3:08:7d:4e:74:f0:52:21:4a:72:28:95:
                    6c:1d:a4:5b:a9:78:59:03:89:cf:d3:4f:9b:35:91:
                    4a:56:74:8a:fb:a2:6b:1a:ca:ca:fe:00:9f:b5:34:
                    4e:b1:70:57:c0:3c:8e:98:28:25:73:f4:e3:63:77:
                    da:67:1b:42:2e:8b:48:df:4f:7e:8c:27:a3:5d:31:
                    c9:7a:80:6b:59:2a:01:07:5d:75:45:a1:b7:96:12:
                    54:1e:96:4a:f2:5d:9a:96:ad:d8:5f:cb:18:f4:92:
                    32:1b:e9:4b:4b:d5:eb:70:5a:c2:65:cb:9f:0d:2b:
                    eb:fc:25:87:b7:be:5a:18:5f:cf:7a:e5:bc:07:e3:
                    ab:e1:a3:f0:42:56:9d:4e:35:8a:0d:98:c6:d6:04:
                    a6:97:e8:6a:cb:87:75:fa:a2:b8:30:a2:dc:37:88:
                    13:1a:90:2a:07:dd:03:66:b9:b9:3b:49:94:b6:41:
                    ad:53:81:fa:37:48:50:56:c2:fd:41:06:82:10:d0:
                    c7:4c:d1:a1:d9:87:33:1f:ee:1c:cd:84:f4:7c:14:
                    45:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:5E:B6:B4:AD:9C:98:9F:CF:5E:0D:99:2A:BA:C6:92:F9:F8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cc:c7:30:1e:76:2f:78:02:a2:5e:68:32:5e:de:66:70:b5:
         68:f4:3a:a3:61:a1:26:2a:ed:df:8a:7b:6f:8b:4b:ed:a6:9d:
         f6:33:74:36:0a:a7:f8:f8:e4:c0:ce:32:3f:e3:5c:a3:4d:f1:
         c7:f7:63:ce:95:a7:77:a9:ab:2e:30:a4:de:eb:d1:36:81:19:
         12:c5:84:15:95:3a:ea:7d:01:d4:41:0d:2e:3a:7b:dc:6a:25:
         fb:1f:51:60:1c:8a:b5:14:fb:92:97:cc:e2:53:18:fe:d1:1a:
         6f:4b:6c:14:e0:aa:34:43:87:93:e4:13:bc:0a:91:cf:a0:77:
         58:3a:0e:d3:74:3a:97:66:e0:d6:2a:ce:f8:a8:4c:db:9d:f5:
         3b:1c:f3:b7:51:7a:2d:61:6f:b5:71:be:e5:50:ba:25:32:c0:
         2f:d7:3e:4b:ee:26:70:a7:ec:f1:e2:f6:62:d9:8d:46:09:0e:
         e5:b6:06:2d:78:bd:49:14:08:85:00:82:d7:75:0f:76:f4:66:
         af:38:c9:80:db:fa:18:db:ec:cd:16:a2:7a:38:76:75:8c:a2:
         03:d2:84:c9:7d:ba:bc:bd:46:1e:4b:f6:ab:33:e6:f6:53:61:
         6a:cc:cf:d2:5c:92:43:ed:55:7b:ff:96:00:17:35:ff:45:f1:
         96:5c:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:47 2024 by rpki-client on console-fra.rpki-client.org