Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/992fc342-db3a-3a07-90a9-c1ccd510f651.roa
File:                     992fc342-db3a-3a07-90a9-c1ccd510f651.roa (raw, json)
Hash identifier:          4QFbQH3n8FFDY4toEWD+tPtLAvsP4hNS3GyaPg1wEAc=
Subject key identifier:   88:02:02:44:A6:F8:CE:41:8F:F6:4F:B3:B0:1C:C2:DA:75:5E:EC:B9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845AF536F44A8E2F9FA5D8E7000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/992fc342-db3a-3a07-90a9-c1ccd510f651.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        130.137.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6f:44:a8:e2:f9:fa:5d:8e:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=86ce38e8-0c94-4053-8a00-13dd0c7d51bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:2c:c7:1e:df:b8:e6:29:74:ea:cc:26:df:
                    14:50:fc:15:b7:c7:8f:05:48:72:68:34:49:93:13:
                    14:80:6b:18:06:e2:f2:90:03:54:29:2b:7c:65:f6:
                    da:fe:bc:d0:16:b0:88:ed:71:81:2a:5e:bb:2b:38:
                    60:f5:3d:56:0f:eb:51:55:0d:21:8a:01:60:48:7c:
                    b3:3d:a3:7d:83:b0:53:3a:08:b3:84:e2:09:95:f6:
                    f8:5f:1f:c8:c8:80:61:91:35:77:0a:6c:89:91:80:
                    1b:c9:06:d7:a6:b5:23:9e:02:1d:d1:dd:96:1b:cd:
                    13:91:76:eb:9f:ed:bc:64:31:12:a5:82:3a:35:70:
                    e6:8b:a9:bc:18:e0:14:69:1f:3c:88:32:0d:eb:9b:
                    1a:f0:3b:3c:cb:36:b5:17:66:b4:9c:76:74:31:65:
                    cb:63:62:c7:30:0b:66:ef:0f:af:02:c0:af:e9:a2:
                    9a:be:e1:34:3a:ac:1f:b9:d0:2c:5b:f7:3f:fa:f2:
                    c8:e8:11:33:42:30:f5:c5:0c:14:e3:3a:b0:34:8d:
                    60:a2:9a:81:8e:3d:a6:01:a7:c3:20:52:f6:a8:43:
                    38:5d:c8:ab:3e:d1:8b:b6:0e:db:d6:49:f5:14:a3:
                    ee:54:19:6d:a9:9e:c8:37:8c:66:f7:7d:5f:b3:54:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:02:44:A6:F8:CE:41:8F:F6:4F:B3:B0:1C:C2:DA:75:5E:EC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/992fc342-db3a-3a07-90a9-c1ccd510f651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:d8:05:79:cb:af:b0:e5:bd:2e:f8:1c:17:28:8b:b5:61:
         5d:f6:fa:c3:ba:a6:9b:25:40:54:56:f7:fd:73:a1:54:b5:0a:
         d3:ac:74:eb:fa:ea:7c:89:f1:e7:f8:ea:a3:c6:8b:bd:12:51:
         36:27:56:5c:f8:c4:07:e2:d6:c1:60:e2:66:03:13:24:35:64:
         59:62:fc:05:98:18:60:4e:08:7a:5b:51:d4:1f:4d:84:19:f2:
         32:3e:79:2e:0e:58:f8:c1:21:f1:43:1d:8c:57:7a:1f:da:d3:
         bf:db:03:ac:76:5b:54:22:16:9f:a8:19:e4:cc:05:91:83:a5:
         45:64:30:3d:0d:52:27:b4:b1:37:ed:d7:cf:f8:25:be:81:a7:
         11:a2:cf:ac:04:d8:63:ac:4a:68:df:14:0e:c1:a4:20:bb:03:
         57:8a:ee:4b:57:0b:9e:12:95:2c:59:c6:fe:6a:6c:9f:06:66:
         a8:dd:a5:e4:2d:71:ec:73:83:70:f7:c2:f6:9c:5b:68:50:96:
         f2:6e:77:c6:fc:24:fe:1a:ea:59:0a:1a:b3:f9:6d:af:7e:e8:
         16:76:e2:f4:0f:b3:0c:d9:a9:16:08:c8:f3:a4:c3:09:5a:d9:
         88:89:a4:02:5d:bf:6c:e3:d3:a1:2b:0a:57:52:5a:a0:03:ad:
         28:0f:65:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWvU29EqOL5+l2OcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQyNzEzMDAzNFoXDTI0MDcyNjEzMDAzNFowLzEtMCsGA1UEAxMk
ODZjZTM4ZTgtMGM5NC00MDUzLThhMDAtMTNkZDBjN2Q1MWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCQsxx7fuOYpdOrMJt8UUPwVt8ePBUhyaDRJ
kxMUgGsYBuLykANUKSt8Zfba/rzQFrCI7XGBKl67Kzhg9T1WD+tRVQ0higFgSHyz
PaN9g7BTOgizhOIJlfb4Xx/IyIBhkTV3CmyJkYAbyQbXprUjngId0d2WG80TkXbr
n+28ZDESpYI6NXDmi6m8GOAUaR88iDIN65sa8Ds8yza1F2a0nHZ0MWXLY2LHMAtm
7w+vAsCv6aKavuE0OqwfudAsW/c/+vLI6BEzQjD1xQwU4zqwNI1gopqBjj2mAafD
IFL2qEM4XcirPtGLtg7b1kn1FKPuVBltqZ7IN4xm931fs1Q8dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgCAkSm+M5Bj/ZPs7Acwtp1Xuy5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTkyZmMzNDItZGIzYS0z
YTA3LTkwYTktYzFjY2Q1MTBmNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrV2AV5y6+w5b0u+BwXKIu1YV32+sO6ppslQFRW9/1zoVS1CtOsdOv6
6nyJ8ef46qPGi70SUTYnVlz4xAfi1sFg4mYDEyQ1ZFli/AWYGGBOCHpbUdQfTYQZ
8jI+eS4OWPjBIfFDHYxXeh/a07/bA6x2W1QiFp+oGeTMBZGDpUVkMD0NUie0sTft
18/4Jb6BpxGiz6wE2GOsSmjfFA7BpCC7A1eK7ktXC54SlSxZxv5qbJ8GZqjdpeQt
cexzg3D3wvacW2hQlvJud8b8JP4a6lkKGrP5ba9+6BZ24vQPswzZqRYIyPOkwwla
2YiJpAJdv2zj06ErCldSWqADrSgPZdQ=
-----END CERTIFICATE-----
Generated at Thu May 2 03:30:08 2024 by rpki-client on console-ams.rpki-client.org