Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa
File:                     9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa (raw, json)
Hash identifier:          Dgzgg5QMolfbCMON9dlyhGfXJ6UKnA+kZdzTjD4+V64=
Subject key identifier:   41:5B:97:3B:8F:33:A6:64:73:FB:56:61:1B:D8:A8:26:0E:2B:58:D3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858475EA61C0E7A1C393C0F050F00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     16509
IP address blocks:        130.137.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:1c:0e:7a:1c:39:3c:0f:05:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=f6fcbebc-3a24-44c4-b189-09dc834f3d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:35:9a:78:4a:61:ad:82:b5:48:fa:20:fd:
                    02:62:00:c9:8c:c0:e0:e8:fb:b6:63:07:c5:49:ab:
                    1f:a3:89:77:fe:89:83:28:22:81:5e:f4:a0:2e:03:
                    03:c4:57:72:30:10:e2:93:9d:02:20:e0:d5:06:bb:
                    ea:70:f5:bf:81:c8:c6:40:d7:43:b8:48:c2:8c:4c:
                    d1:eb:1d:1e:61:89:fa:7d:98:94:e1:e8:21:19:35:
                    d5:16:61:c3:b6:af:8e:c5:f3:bc:42:d5:97:57:a9:
                    03:f9:1f:56:a4:e0:fd:75:7a:07:1c:d4:76:5d:d0:
                    e0:d8:53:96:e0:83:4b:c3:0b:a0:5e:8d:18:a1:45:
                    d5:48:2f:c0:05:78:d3:cb:e9:45:c9:67:2c:1e:d5:
                    38:45:8b:15:29:3d:f5:a9:28:c3:cd:72:82:0c:9e:
                    95:86:45:77:f8:a6:29:1d:7d:7e:f9:39:3a:d9:69:
                    92:60:b5:c2:c8:54:43:8d:12:bb:65:b4:05:0c:02:
                    5d:95:29:44:6b:e3:53:19:2b:e1:44:20:d4:b4:e6:
                    ce:eb:7c:75:b6:b0:b8:a9:53:c4:4a:e8:e4:c1:a6:
                    53:9b:2c:02:0b:7f:46:36:10:e3:79:f9:4a:de:24:
                    07:f4:26:19:f7:f7:24:75:28:88:84:d3:00:a8:d3:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:97:3B:8F:33:A6:64:73:FB:56:61:1B:D8:A8:26:0E:2B:58:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:37:8f:67:68:85:43:b8:8d:ef:7c:81:82:ed:7b:5e:ae:
         eb:ab:10:c6:24:c1:23:6e:ae:b3:b6:94:5f:cb:f6:d5:d8:bd:
         f4:b8:34:13:f8:ac:8e:48:5d:e4:aa:f1:f8:6d:cf:8b:08:3e:
         01:49:75:a8:ce:f6:bb:28:c9:e8:63:b3:70:b3:dd:ff:a6:8e:
         4b:97:d0:b9:c8:3f:72:38:8f:66:e3:36:3d:5c:30:1c:5a:a6:
         cb:c5:53:f6:a1:d3:04:10:42:56:25:9e:05:a1:ff:ff:ed:cd:
         dd:d1:16:a8:af:d0:07:a5:1f:e1:b7:79:15:8c:47:ea:6f:28:
         ce:38:3b:71:79:e9:81:c9:dc:c0:7f:55:8f:b5:3d:3c:a9:07:
         b7:5d:41:58:7a:6c:14:21:c4:e9:df:cd:c2:31:4a:f2:f3:7d:
         24:e6:76:df:26:42:e0:89:b5:26:e0:4b:a0:e5:a5:38:bd:cd:
         46:f4:3f:c9:68:0f:eb:36:49:a4:6a:b5:a3:57:18:98:2e:fd:
         c4:de:e2:9f:fd:98:5f:e9:23:d5:63:91:14:02:1e:a2:a9:98:
         82:6a:f7:15:e1:a3:72:29:db:31:c5:f6:0e:ed:39:52:a0:62:
         e1:29:98:d4:b6:88:3c:ae:fd:7e:3c:15:10:27:e4:fc:97:36:
         6f:64:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:50 2024 by rpki-client on console-ams.rpki-client.org