Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/936e6cfb-5344-3d26-b418-c0defed2e64b.roa
File:                     936e6cfb-5344-3d26-b418-c0defed2e64b.roa (raw, json)
Hash identifier:          VYZzilM30OUR6y46RpVuxfajdYto43HTUhNLWDALzvg=
Subject key identifier:   93:43:F8:34:4E:C9:C5:1C:74:BF:27:AC:EF:5C:FA:AF:F2:C8:F5:E5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285844BC8FA6073C093B38016E7800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/936e6cfb-5344-3d26-b418-c0defed2e64b.roa
Signing time:             Wed 31 Jan 2024 14:00:30 +0000
ROA not before:           Wed 31 Jan 2024 14:00:30 +0000
ROA not after:            Tue 30 Apr 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        130.137.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bc:8f:a6:07:3c:09:3b:38:01:6e:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan 31 14:00:30 2024 GMT
            Not After : Apr 30 13:00:30 2024 GMT
        Subject: CN=f5a87534-eead-4155-9734-1d536e99f5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:f0:11:ff:69:70:d5:ee:1a:3b:fe:d7:9e:
                    62:52:88:48:9a:14:6b:9d:61:e8:dc:3e:05:f1:3b:
                    0a:3e:df:c4:24:f9:67:3f:ef:9c:d9:cf:c6:a9:ba:
                    bb:b7:1b:13:a6:ce:b2:5d:32:8b:7c:ec:40:b5:ce:
                    5a:75:1d:64:bd:e5:6b:5b:db:5d:44:69:f9:91:48:
                    4e:e6:b1:7a:4b:08:28:82:d6:4e:56:ca:b5:3a:0e:
                    0b:0a:63:dc:33:5f:53:25:c8:45:fc:1f:b7:a0:2d:
                    22:93:0a:2c:83:ec:02:cf:ee:12:7d:b1:09:81:48:
                    9d:47:3b:cc:34:e2:31:36:eb:ce:2b:bf:6f:dc:b4:
                    d6:90:0d:3a:ac:b1:99:00:0c:1a:db:04:70:5c:41:
                    0f:4b:04:03:bd:19:4d:70:7c:49:08:93:98:af:30:
                    47:26:a6:6c:7e:3a:5d:b8:03:b4:d9:5a:25:40:18:
                    8b:31:be:c1:07:44:de:c2:5e:2b:90:a6:29:67:06:
                    5f:46:ac:2d:31:12:74:be:29:b6:f2:d5:1d:b4:f3:
                    df:81:de:7a:a1:10:69:14:cf:a0:08:c8:1d:b6:3b:
                    e1:cb:3b:35:10:6c:09:6e:39:e9:ad:b6:de:26:4c:
                    94:71:7d:5a:41:63:fb:06:ab:d4:32:ca:aa:88:34:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:43:F8:34:4E:C9:C5:1C:74:BF:27:AC:EF:5C:FA:AF:F2:C8:F5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/936e6cfb-5344-3d26-b418-c0defed2e64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:16:9f:20:85:a3:1b:a2:60:89:10:87:dd:ae:68:5c:cf:
         93:6f:ff:fa:52:96:c5:8f:a8:0a:a9:71:41:b4:28:f5:ec:11:
         95:25:a7:d5:97:10:e1:91:a5:3a:0d:ef:7f:bb:f4:12:8f:62:
         31:4d:ed:41:0e:9a:3e:26:46:f0:1f:70:a6:28:b3:1e:8a:16:
         0e:4f:3f:19:3c:2e:77:c1:f3:d7:5a:57:d8:aa:d5:94:7b:f0:
         37:ac:3a:07:e8:c0:9f:5f:75:f7:37:1c:e0:b6:cf:59:7d:f6:
         ae:6a:49:d2:d4:85:32:d8:c5:d9:85:1d:e1:7b:f4:35:fd:55:
         f3:d3:49:a9:0f:63:8e:b8:f1:07:15:94:35:41:04:44:dd:22:
         f3:5b:5a:b4:63:1a:53:7f:96:79:69:83:27:06:72:7b:ce:9e:
         06:dc:41:5a:49:c0:19:e1:dc:3a:ef:17:f5:ce:1f:8c:0f:bd:
         bc:73:84:10:ea:ab:69:a2:7e:f0:a6:27:bf:82:ff:e5:42:ea:
         69:6c:2a:3e:0c:0d:c0:f3:09:cb:68:f7:da:7d:2f:2a:b0:39:
         72:22:9b:ff:c7:17:80:36:1b:7b:6b:31:db:29:92:8e:df:13:
         82:87:03:4b:67:60:20:cb:6b:6e:66:e8:f0:41:06:8f:e8:1b:
         63:c8:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:53 2024 by rpki-client on console-fra.rpki-client.org