Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa
File:                     91b4f611-70ec-3d76-a42a-76c6bf794529.roa (raw, json)
Hash identifier:          2N3XZbzbOJNjG9nQV/2+vatNnSaMww8kGEN8ou+EjeA=
Subject key identifier:   BA:89:C5:AB:44:48:F0:81:41:B6:E5:8B:03:A7:C4:67:FB:8A:42:E6
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858477396567ADCE5C7281C2833C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     8987
IP address blocks:        130.137.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:56:7a:dc:e5:c7:28:1c:28:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=63e9af7f-595b-4e5a-a26e-6a7b4fd503f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:80:59:0c:83:8f:fd:2d:3e:78:33:08:9b:
                    cf:4b:a4:42:b5:c2:05:1d:cf:3d:2b:05:e0:eb:30:
                    b2:eb:82:2b:83:37:22:97:0a:36:c7:7b:21:23:4c:
                    3e:41:2d:32:75:42:bc:b4:ef:02:fe:09:7d:48:4e:
                    51:73:7f:aa:03:83:30:0f:61:71:8e:53:c3:ed:1b:
                    a7:fb:b1:9f:84:77:9e:bb:36:6b:40:44:42:cf:be:
                    5e:78:a4:ed:00:58:6b:43:7a:3a:1a:09:52:f3:be:
                    0f:11:f2:27:14:e6:80:c1:4e:6c:ab:45:6f:68:23:
                    1a:40:d5:f1:f8:b6:9e:57:48:8d:cf:5e:92:a7:73:
                    1b:be:b2:f2:b7:d6:f7:29:fa:49:f7:b1:ff:69:f8:
                    2f:8d:98:92:f4:e2:99:48:70:c5:38:de:05:97:2b:
                    7a:e8:ab:33:16:9c:a9:3b:8c:0c:9f:e8:4c:5a:cb:
                    3a:8e:15:fa:6d:2d:00:c1:69:17:f6:de:89:97:50:
                    c2:16:d2:b1:b5:47:b2:45:5e:a2:3f:a3:d6:5d:04:
                    b1:66:7a:0d:08:7f:a6:bd:99:70:76:22:51:14:d2:
                    53:6a:51:2f:5b:75:92:6e:b6:04:4b:8e:a3:6c:09:
                    9f:3b:46:f6:ca:5f:ae:40:50:6c:8e:3f:98:c5:72:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:C5:AB:44:48:F0:81:41:B6:E5:8B:03:A7:C4:67:FB:8A:42:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:81:2c:71:af:4f:7d:8b:b2:b3:94:c3:fa:bb:0e:85:9b:a5:
         43:e1:2f:f6:0c:6c:d7:78:a5:3e:6e:f7:86:aa:16:aa:9a:44:
         58:ca:ea:1a:ea:c2:42:b4:16:7a:d5:bb:5f:95:29:3f:4f:d5:
         84:79:ae:a7:8a:03:05:a1:50:75:c1:e9:8a:33:0d:a3:a6:ba:
         2a:1d:75:ca:83:8b:99:ad:d0:20:12:b7:6a:64:38:b9:7a:38:
         a6:3b:ca:63:ac:0d:d0:35:91:9b:92:f5:a1:6b:ad:1e:45:bf:
         f3:f1:cf:0f:91:a9:18:04:84:f8:b2:31:c6:88:ad:ee:40:6c:
         47:2a:dd:59:f0:c1:01:53:f4:dd:6d:7d:0b:9c:cc:3f:8a:00:
         12:b8:a8:07:82:71:a5:d4:80:b8:32:09:1d:f3:c3:8b:ca:22:
         3d:ab:42:eb:0b:91:d6:94:51:27:e4:d6:d5:8d:c7:96:42:4e:
         8a:2e:45:40:88:99:61:df:1c:6b:f9:60:2a:a1:b9:a4:95:fa:
         c8:53:77:d3:50:20:05:91:e0:b5:40:47:5f:1c:42:b6:90:be:
         b6:a6:47:29:c5:5d:69:f2:2a:2d:98:3b:3f:a9:f9:99:df:2d:
         c4:65:6c:ec:97:3f:8c:8d:2a:8c:19:af:d5:6f:28:3e:d9:3a:
         ee:d0:27:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzllZ63OXHKBwoM8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjNlOWFmN2YtNTk1Yi00ZTVhLWEyNmUtNmE3YjRmZDUwM2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht+AWQyDj/0tPngzCJvPS6RCtcIFHc89KwXg
6zCy64Irgzcilwo2x3shI0w+QS0ydUK8tO8C/gl9SE5Rc3+qA4MwD2FxjlPD7Run
+7GfhHeeuzZrQERCz75eeKTtAFhrQ3o6GglS874PEfInFOaAwU5sq0VvaCMaQNXx
+LaeV0iNz16Sp3MbvrLyt9b3KfpJ97H/afgvjZiS9OKZSHDFON4Flyt66KszFpyp
O4wMn+hMWss6jhX6bS0AwWkX9t6Jl1DCFtKxtUeyRV6iP6PWXQSxZnoNCH+mvZlw
diJRFNJTalEvW3WSbrYES46jbAmfO0b2yl+uQFBsjj+YxXLCFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqJxatESPCBQbbliwOnxGf7ikLmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTFiNGY2MTEtNzBlYy0z
ZDc2LWE0MmEtNzZjNmJmNzk0NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKBLHGvT32LsrOUw/q7DoWbpUPhL/YMbNd4pT5u94aqFqqaRFjK6hrq
wkK0FnrVu1+VKT9P1YR5rqeKAwWhUHXB6YozDaOmuioddcqDi5mt0CASt2pkOLl6
OKY7ymOsDdA1kZuS9aFrrR5Fv/Pxzw+RqRgEhPiyMcaIre5AbEcq3VnwwQFT9N1t
fQuczD+KABK4qAeCcaXUgLgyCR3zw4vKIj2rQusLkdaUUSfk1tWNx5ZCToouRUCI
mWHfHGv5YCqhuaSV+shTd9NQIAWR4LVAR18cQraQvramRynFXWnyKi2YOz+p+Znf
LcRlbOyXP4yNKowZr9VvKD7ZOu7QJ/M=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:22 2024 by rpki-client on console-ams.rpki-client.org