Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa
File:                     d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa (raw, json)
Hash identifier:          bWBUF3pUdbnuC+9+koZOC3k6P3A7qiUY7yHSGh1CdHU=
Subject key identifier:   C9:64:3B:96:98:FA:92:DA:69:67:91:EF:22:9B:35:CA:32:1D:01:8D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584589A317B166B250AE806FC800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        130.137.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:17:b1:66:b2:50:ae:80:6f:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=7aeb8bd3-e58a-4797-b5dd-956915394568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9c:d6:6e:e0:bf:c3:70:7c:bb:61:65:7d:88:
                    0c:03:48:de:9b:64:a3:47:62:5e:60:03:a2:30:4e:
                    2e:70:4b:6e:a6:3a:09:d2:fd:95:23:e2:19:43:5b:
                    22:1e:84:b5:bb:e3:7b:58:58:6f:54:02:54:59:9e:
                    80:3f:58:49:ae:77:c6:e9:b4:a7:aa:12:3d:1a:13:
                    8d:07:f4:4f:e5:40:4b:a5:19:97:44:b6:b2:fe:d4:
                    a9:6b:8d:3a:05:ec:27:70:bc:ba:eb:c9:6e:8b:d4:
                    43:c5:2f:b6:ce:f0:72:56:8d:40:da:a4:05:a6:dc:
                    27:31:c1:c9:fa:76:ed:21:61:f6:6f:2c:11:a8:35:
                    84:58:1e:74:f4:f9:47:bb:2c:74:e4:74:cf:7b:33:
                    be:c3:9c:49:35:c6:6f:25:ef:48:63:2d:03:e4:fd:
                    44:73:db:df:11:b7:a4:98:2c:d7:6e:11:51:67:af:
                    7f:81:f1:c4:03:4d:d6:10:96:bf:c5:4d:33:5f:63:
                    13:f5:05:3b:c6:89:ed:e0:23:1b:e4:f4:59:86:24:
                    b9:4c:93:1e:3d:82:40:5f:ac:1c:ae:3e:b4:35:ff:
                    f3:9f:cf:fe:11:a0:42:f2:0e:1f:0e:e3:85:80:d0:
                    47:35:f1:95:94:b0:25:68:c7:57:81:0d:58:9e:bb:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:3B:96:98:FA:92:DA:69:67:91:EF:22:9B:35:CA:32:1D:01:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:42:42:91:ab:db:b6:94:39:9a:4e:54:2f:f4:fa:43:36:3c:
         b3:bf:e2:a0:2a:16:50:e1:80:8b:40:00:a8:7e:42:10:c6:27:
         77:d5:62:02:99:5c:7b:1f:de:68:66:78:c0:47:08:28:11:cc:
         53:ac:6e:74:36:58:ef:58:8c:6f:5b:53:de:73:93:84:d9:41:
         72:a8:c4:d2:30:34:0f:eb:aa:6f:78:0e:a4:78:81:ae:cd:e9:
         76:53:2c:a8:dd:be:81:5a:1f:bc:6d:01:04:6e:00:ab:a7:d5:
         0a:d5:e9:4d:6b:2a:c3:c0:32:5e:7a:09:c7:13:93:83:5e:44:
         64:9a:01:a7:96:f5:cb:6f:4e:87:2c:e8:55:7f:2a:bf:be:a4:
         03:fa:8f:14:a1:fc:23:2e:26:b9:79:43:62:3e:e9:10:1d:6c:
         ea:29:67:b7:02:04:a7:d9:33:d0:32:9f:36:ba:7a:0a:49:26:
         02:4b:9f:79:ac:a3:50:6b:92:52:a2:ff:9f:e9:11:07:09:32:
         34:54:a9:3a:0c:82:0c:62:d5:60:91:3c:d1:1a:5c:71:21:de:
         92:bd:c6:3a:ff:87:e6:4e:86:94:37:e0:4a:d9:27:9d:5e:fd:
         01:c7:e3:b4:43:db:d8:6d:43:00:c9:fe:05:ad:b5:7c:96:fc:
         98:e0:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:17:10 2024 by rpki-client on console-fra.rpki-client.org