Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
File:                     dc2aa532-33c3-3951-89be-12330759cf39.roa (raw, json)
Hash identifier:          WLDSewJXhFNWMCWg5ld5m55o2vqHl7PQIIiy8DSrGVQ=
Subject key identifier:   E1:A7:E1:69:14:21:76:6A:F4:AD:24:07:75:CF:E5:9B:CF:21:9F:94
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285845B38367A38B5847F2BA93D780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     8987
IP address blocks:        130.137.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:67:a3:8b:58:47:f2:ba:93:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=3d07aaf0-141d-419e-b628-78934e8c88b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:f9:8f:77:06:d3:23:97:d0:e9:2b:f7:a3:
                    8b:57:73:99:21:24:3d:89:43:41:76:89:c1:f7:d1:
                    0c:9e:25:9a:75:f1:65:a3:95:ec:21:05:62:0f:4e:
                    73:3a:d1:0d:5d:68:1e:73:e8:08:cc:5b:aa:bc:2f:
                    5c:a4:82:f3:45:5e:4f:c7:af:a6:bb:b7:11:d4:79:
                    f5:e8:9e:ed:98:4a:1c:d5:89:bc:69:0a:bf:38:b7:
                    1c:34:6b:57:54:84:3f:d2:e9:a3:3b:92:a7:85:fb:
                    a1:79:33:eb:5c:3e:85:a2:e9:85:2a:c4:32:c5:66:
                    03:5d:c9:b5:56:25:b5:a9:b2:59:67:16:0a:bf:2f:
                    b1:5d:1a:3b:a4:9e:1d:8b:0b:04:e9:26:c0:3b:82:
                    2b:d6:47:97:0a:f6:ad:df:f9:0a:84:c8:16:6d:aa:
                    cb:09:74:56:a2:4d:72:58:19:fb:b2:2b:7d:be:86:
                    47:b3:cb:72:80:d1:dc:c7:29:7f:1a:20:21:20:56:
                    86:ca:3d:be:e5:a8:29:dc:a5:88:b0:53:26:57:d6:
                    be:96:43:eb:6d:47:45:fd:bf:62:b0:39:89:db:3e:
                    9d:6d:3c:f3:06:ee:f5:49:38:33:04:51:0d:1e:1e:
                    20:90:ca:4a:eb:fe:c0:89:e3:27:9f:c1:22:9a:7b:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:E1:69:14:21:76:6A:F4:AD:24:07:75:CF:E5:9B:CF:21:9F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:99:e3:c6:47:42:16:9b:34:dc:3e:1e:d0:ca:e6:82:91:c6:
         a5:f8:58:aa:a0:32:5b:44:cf:ab:a7:26:44:94:96:a8:e0:10:
         26:0a:6a:76:62:99:46:b2:75:a8:63:44:cf:69:9a:de:04:9c:
         84:21:71:f8:8f:04:80:77:1a:f4:3a:7a:04:3e:25:1e:c7:fc:
         4d:5e:04:07:a0:e4:d6:f4:1a:2f:5c:23:8f:bb:40:b1:63:67:
         62:eb:50:f8:86:b4:d4:64:0e:86:01:f1:dd:fc:4c:96:72:ba:
         f2:04:ac:42:1a:82:88:de:da:7e:c4:75:03:48:99:5c:32:4e:
         61:54:a9:21:fe:96:04:30:a9:ef:0d:08:90:07:41:77:c6:0c:
         a5:84:f3:2b:4c:cf:16:44:1f:5b:88:98:63:25:3e:f2:85:e3:
         06:20:16:b9:85:6e:90:53:35:fb:7b:a3:01:9a:c7:5d:63:4a:
         5b:4c:4f:f0:e4:70:60:58:1b:26:3a:94:de:ec:79:15:be:cf:
         b7:96:78:d6:36:fe:6f:95:90:d0:cb:48:21:7d:6e:ae:d6:55:
         29:0d:9f:14:e7:fd:f6:37:25:01:11:67:76:8b:d5:ae:b8:7e:
         fb:ef:12:b5:c6:07:ce:2f:ca:61:37:41:17:66:77:34:66:f2:
         b2:4b:3e:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2eji1hH8rqT14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
M2QwN2FhZjAtMTQxZC00MTllLWI2MjgtNzg5MzRlOGM4OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw/5j3cG0yOX0Okr96OLV3OZISQ9iUNBdonB
99EMniWadfFlo5XsIQViD05zOtENXWgec+gIzFuqvC9cpILzRV5Px6+mu7cR1Hn1
6J7tmEoc1Ym8aQq/OLccNGtXVIQ/0umjO5KnhfuheTPrXD6FoumFKsQyxWYDXcm1
ViW1qbJZZxYKvy+xXRo7pJ4diwsE6SbAO4Ir1keXCvat3/kKhMgWbarLCXRWok1y
WBn7sit9voZHs8tygNHcxyl/GiAhIFaGyj2+5agp3KWIsFMmV9a+lkPrbUdF/b9i
sDmJ2z6dbTzzBu71STgzBFENHh4gkMpK6/7AieMnn8Eimntw/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGn4WkUIXZq9K0kB3XP5ZvPIZ+UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGMyYWE1MzItMzNjMy0z
OTUxLTg5YmUtMTIzMzA3NTljZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeZ48ZHQhabNNw+HtDK5oKRxqX4WKqgMltEz6unJkSUlqjgECYKanZi
mUaydahjRM9pmt4EnIQhcfiPBIB3GvQ6egQ+JR7H/E1eBAeg5Nb0Gi9cI4+7QLFj
Z2LrUPiGtNRkDoYB8d38TJZyuvIErEIagoje2n7EdQNImVwyTmFUqSH+lgQwqe8N
CJAHQXfGDKWE8ytMzxZEH1uImGMlPvKF4wYgFrmFbpBTNft7owGax11jSltMT/Dk
cGBYGyY6lN7seRW+z7eWeNY2/m+VkNDLSCF9bq7WVSkNnxTn/fY3JQERZ3aL1a64
fvvvErXGB84vymE3QRdmdzRm8rJLPt8=
-----END CERTIFICATE-----
Generated at Mon May 6 02:03:00 2024 by rpki-client on console-fra.rpki-client.org