Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97809c89-4d17-3040-b7d2-edcf64f0d320.roa
File:                     97809c89-4d17-3040-b7d2-edcf64f0d320.roa (raw, json)
Hash identifier:          DqYPNQOQywPlD0/bRN3tVQ6UojBYPVJQjfE0LopQuU4=
Subject key identifier:   E8:A5:E2:9B:6C:59:B4:92:51:F3:48:8B:D6:F8:71:DD:BF:DF:4D:FF
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584598FDF5F673DEF18EF14C9500
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97809c89-4d17-3040-b7d2-edcf64f0d320.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        130.137.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f5:f6:73:de:f1:8e:f1:4c:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=601fb22b-99af-4291-84bc-576bd7f65382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fc:7d:51:f8:c9:4c:1f:00:2c:35:2f:b3:17:
                    ed:49:ae:f6:1e:b9:c5:8b:f9:43:2b:33:90:99:b7:
                    16:d7:74:47:ea:cf:c4:16:1a:4b:61:99:ca:bf:43:
                    98:19:1b:46:a4:79:f8:b3:2f:92:98:25:a8:8d:10:
                    02:c1:a9:6c:64:ef:75:02:51:34:f4:4e:59:a8:df:
                    83:8b:34:2b:1d:16:24:f6:00:e9:85:88:d2:b1:da:
                    14:3c:e6:9f:79:9b:a1:74:ff:d4:15:1c:e1:0d:38:
                    52:e9:e5:67:ef:4e:27:ee:7c:e0:a2:00:d0:d9:d0:
                    6b:29:da:03:4c:cf:01:c3:d0:a9:f3:5b:75:92:e1:
                    d2:99:73:75:bb:5e:e8:b7:f7:7d:ba:0d:ad:3f:1a:
                    89:d6:fa:04:49:1a:d9:99:06:c0:dd:de:4f:d3:c0:
                    47:9b:34:83:e2:82:17:e9:04:7a:d6:0a:ec:05:ad:
                    59:5c:a9:92:ab:12:05:3d:bb:85:2f:1b:7a:84:e4:
                    fd:63:7b:c0:05:7d:97:57:79:02:8d:41:5e:99:31:
                    36:54:6b:93:b6:e5:9d:8f:0a:a3:15:64:35:f6:18:
                    10:72:16:27:4c:f3:e6:b0:a5:fc:fe:f6:9e:2c:21:
                    ae:1f:81:e5:dc:b2:63:15:e4:a6:75:3d:6d:60:26:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:E2:9B:6C:59:B4:92:51:F3:48:8B:D6:F8:71:DD:BF:DF:4D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97809c89-4d17-3040-b7d2-edcf64f0d320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:00:9f:6a:3e:9f:c4:60:19:15:0b:7e:8d:e5:39:5f:fb:
         ce:a8:f1:48:cb:ef:ec:d6:02:ac:cc:bc:68:af:dd:f7:a9:5e:
         05:f5:07:e6:68:7c:71:ae:6f:8f:f0:59:71:24:76:b0:7c:57:
         c5:55:04:f1:29:ae:7f:fa:20:04:e8:7c:5b:4c:99:59:58:b6:
         78:02:46:b2:a3:5c:00:43:f0:2f:93:c5:f1:b8:95:cf:b3:2c:
         23:d9:3b:22:48:01:0f:c2:4a:a8:e1:96:a8:6e:fc:60:93:ab:
         db:e1:ef:a0:29:e4:68:40:ed:4d:77:20:4d:a2:17:bf:5b:b2:
         d2:27:ff:84:f1:48:c7:a3:5c:1b:46:b9:6f:16:f6:35:9c:68:
         12:07:35:4e:51:81:2b:6a:23:d7:93:4d:a5:0b:63:05:b6:27:
         f4:4f:0c:e3:6e:f4:04:a7:09:a6:ec:20:4b:59:f4:9f:32:f5:
         54:10:ea:78:b7:af:73:76:19:6e:06:a2:48:7b:cb:96:01:3d:
         82:c6:2e:17:64:0d:f3:d3:99:95:36:05:59:16:32:d9:49:bf:
         a0:65:95:93:0a:08:c8:e0:13:41:40:8a:cd:29:c5:11:5a:a2:
         9e:ff:29:9d:a8:cf:14:04:e6:19:b5:99:06:c2:68:05:fc:3d:
         1d:14:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:06:00 2024 by rpki-client on console-ams.rpki-client.org