Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e6cb3531-09c9-3cbd-a238-35438e5e65c1.roa
File:                     e6cb3531-09c9-3cbd-a238-35438e5e65c1.roa (raw, json)
Hash identifier:          GN+9WKPlSSLrJ0hlaGtWoad2m0eR0urYa5K6X5IHsCI=
Subject key identifier:   CD:9B:15:B7:B8:C6:AF:05:54:87:BA:D5:1D:3D:89:D7:A8:35:73:DA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584569886578D698CBA6A2C2A1C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e6cb3531-09c9-3cbd-a238-35438e5e65c1.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        130.137.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:65:78:d6:98:cb:a6:a2:c2:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=e391afd9-8201-4cf7-b9f7-f36d2e637a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:7f:11:21:90:4f:60:ba:d5:9f:e7:f8:36:
                    d0:2d:e0:a8:eb:c0:b7:67:6c:e9:a8:53:1b:61:72:
                    38:fe:df:84:e7:15:6d:db:0c:5b:a1:25:85:8b:8b:
                    44:1d:aa:98:bc:97:b9:9b:35:8e:f5:f2:39:9e:74:
                    54:b8:4a:2c:c9:6b:26:95:be:6d:36:88:38:54:22:
                    cd:5b:e9:c5:69:7f:8c:6b:bc:04:01:4e:19:c5:fb:
                    2c:47:a2:29:73:ec:f6:19:2f:16:77:15:32:15:0a:
                    48:d0:c3:d3:1a:fc:36:b4:cf:5c:ce:0e:2c:dd:ba:
                    98:26:0d:c9:be:ab:44:64:e5:42:64:79:83:5a:2c:
                    5b:e0:36:dd:e2:8a:a7:5a:57:01:c4:30:54:97:e0:
                    43:a2:da:c8:e8:56:18:9a:9f:67:c3:36:01:dd:f5:
                    02:3d:5b:11:fe:6d:d6:42:42:10:a4:a0:f3:a9:09:
                    e4:af:85:7c:5d:a8:ab:d3:1a:22:31:4f:16:6d:23:
                    64:ae:22:e4:d4:74:b0:89:89:08:cb:3e:a3:2e:a3:
                    78:49:df:13:13:dc:4a:4f:fe:ae:93:f5:7f:01:a7:
                    8a:4c:ec:07:68:06:fd:ff:c1:b2:be:6a:66:fb:9d:
                    46:c4:e6:2d:17:99:77:4a:b2:e2:0f:e8:99:cf:9d:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9B:15:B7:B8:C6:AF:05:54:87:BA:D5:1D:3D:89:D7:A8:35:73:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e6cb3531-09c9-3cbd-a238-35438e5e65c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:e4:99:ac:cd:9b:60:f4:e1:e0:1b:7c:d4:2b:f8:62:43:
         7d:40:32:4c:87:4e:1b:15:20:97:f9:37:91:3c:c0:08:d4:42:
         51:67:02:d3:f0:64:cf:4e:ed:a0:8e:19:f8:26:90:af:b2:b4:
         2f:8f:10:25:a4:b7:9c:bf:20:76:0e:63:22:25:07:ac:43:01:
         79:38:03:46:20:14:1a:07:1c:73:31:f5:49:9f:98:54:8c:2a:
         9c:0a:6b:56:09:59:a1:c4:69:34:d3:32:b0:f5:d5:6f:ef:de:
         e7:ed:65:3a:7a:6a:3c:b9:c9:f8:72:a3:c6:1a:7f:d7:8c:e1:
         00:47:3a:08:a3:ae:26:7e:8c:57:f6:51:f7:75:6c:b2:2f:6d:
         bd:82:8d:f1:92:70:ac:6f:2e:62:4f:47:2e:48:d3:84:21:ea:
         af:69:68:9f:4b:45:8e:84:fd:92:6f:47:00:ed:01:83:86:03:
         d3:38:96:a9:02:c8:d0:34:30:19:d1:8c:f0:97:dd:ff:2a:c3:
         5e:ca:2a:07:cf:fb:c4:e4:c1:81:eb:85:d4:03:38:00:89:3e:
         98:d4:29:5d:80:5e:e6:a5:45:8e:9e:29:8a:27:df:ee:57:74:
         75:cc:40:b2:2f:12:83:85:bd:42:bc:2c:c2:b0:c2:bd:47:df:
         be:4a:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:55:58 2024 by rpki-client on console-fra.rpki-client.org