Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc014274-5329-31d5-817f-4be53e76febb.roa
File:                     cc014274-5329-31d5-817f-4be53e76febb.roa (raw, json)
Hash identifier:          13TKvsUJkRmOvcOOwpIO/MbKHdDZ2lkvj9Fo13N71bE=
Subject key identifier:   0C:D8:D4:31:DB:96:7F:A2:E5:7E:E8:FD:22:D7:9B:A6:39:D2:83:05
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858459633439F845FA1738839D200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc014274-5329-31d5-817f-4be53e76febb.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        130.137.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:43:9f:84:5f:a1:73:88:39:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=a09c2409-3dd4-44fb-9d7e-e95973c07419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:87:c0:ec:e7:38:30:69:1a:6e:90:32:f6:
                    40:45:e8:d1:02:f1:67:00:d8:cb:b3:65:14:f8:ac:
                    03:2c:c7:f8:42:02:e3:8b:b8:fe:4b:2f:23:c7:17:
                    11:9a:c0:5a:45:3c:6e:a0:40:f7:82:c3:fa:20:29:
                    c3:80:88:c8:9c:91:e1:d5:8d:c0:a3:de:0e:f6:3f:
                    d0:4e:15:78:fa:54:44:19:30:81:09:bd:c9:4b:27:
                    ab:b2:a7:df:e7:81:58:45:6a:a1:c2:85:93:08:8b:
                    af:d5:0f:31:d5:cd:73:dd:55:f5:22:da:37:78:2a:
                    6f:6c:18:c9:47:5e:01:f7:93:2c:4c:02:37:1a:f9:
                    5f:83:f2:02:d5:b9:d7:8b:ae:4b:cd:dc:9b:a3:22:
                    fe:8f:ef:6d:53:f8:38:47:f4:9b:16:91:67:55:57:
                    ff:d6:2b:e5:1b:cc:f1:ad:04:b7:12:9d:77:d1:c6:
                    22:b8:dc:c2:89:49:1e:5a:bf:55:4b:6c:a2:48:5c:
                    26:7c:92:8c:f0:b2:7b:60:da:cb:44:e0:a6:63:c8:
                    bc:4b:f2:dd:95:dc:57:f1:33:32:c7:f6:fb:06:38:
                    93:d3:d1:90:79:8d:ca:06:0b:47:eb:69:f7:40:78:
                    06:bb:49:dd:a8:22:cf:d2:5b:b1:2d:38:43:72:17:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:D4:31:DB:96:7F:A2:E5:7E:E8:FD:22:D7:9B:A6:39:D2:83:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc014274-5329-31d5-817f-4be53e76febb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:db:57:e0:67:5f:6b:6d:2e:df:54:3c:52:16:1b:06:65:
         bf:9a:7e:82:b5:0b:61:29:ea:d2:b7:ae:71:f2:77:68:93:d4:
         1a:6a:62:ae:b3:54:c9:38:40:db:98:2c:39:ee:bb:ad:de:89:
         62:ad:51:dc:ae:39:e8:49:11:2b:75:e3:89:9a:67:16:5a:2f:
         4d:19:18:30:98:75:c0:d7:bf:e5:71:da:3d:42:81:17:36:91:
         84:53:1e:e9:e2:45:d4:69:af:1c:fc:69:a5:4d:78:cb:a4:cd:
         f6:4f:ac:5d:26:17:ef:38:70:27:12:21:69:b4:5e:c7:92:ab:
         64:48:c8:da:07:00:ad:70:c0:98:fa:62:f1:b5:9c:99:1f:0e:
         fc:1b:0e:f9:d8:66:8d:e2:6b:9d:b9:14:7a:f5:94:1c:8e:0f:
         a2:b7:d5:4e:ca:ae:ee:4f:78:18:be:70:ae:86:5f:ff:7b:a9:
         7c:b2:ff:a1:74:90:e7:97:54:cc:d5:10:6b:87:f1:36:d3:ba:
         b8:82:f3:ea:8f:2d:28:a5:99:e2:d2:33:85:1f:a3:d6:67:19:
         27:ca:2b:23:1f:2c:14:27:7d:e3:d3:65:bf:ce:9c:2f:95:9f:
         f9:52:58:d6:08:46:36:08:85:c8:fc:11:2d:f3:9e:a7:34:e9:
         d5:0f:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:54 2024 by rpki-client on console-fra.rpki-client.org