Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa
File:                     03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa (raw, json)
Hash identifier:          2sjGw545P4tu0f9ZETCNiAxl6awMN0SQQwZeUahQ2GE=
Subject key identifier:   F3:E7:E8:78:D5:F4:17:DA:CF:DF:3F:43:32:8E:D3:83:E1:41:D5:84
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC28820777025F8C95B00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        130.137.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c2:88:20:77:70:25:f8:c9:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=370d33ca-8cf6-4f7c-873b-191988676129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:4f:7f:1c:69:3d:bb:23:32:87:08:03:e8:
                    fb:c1:c1:30:7a:94:ac:6a:1d:d6:b1:32:f2:c0:d3:
                    c8:db:d9:06:30:b6:44:6b:59:e1:ac:04:1d:5b:94:
                    93:3a:3d:49:8f:f4:cb:c3:a9:05:b7:c3:ce:1f:68:
                    69:9f:82:39:2c:b5:a2:67:2c:ca:22:e6:56:d6:42:
                    91:ee:b5:04:05:bf:e8:52:d1:16:d9:6f:b0:1d:cf:
                    93:2f:44:49:c9:96:1f:01:f9:6a:ac:88:b4:ec:0c:
                    cd:9f:07:1a:60:17:dd:9c:47:34:26:e6:b2:e6:c2:
                    c1:51:fe:43:4e:25:02:4c:6e:1d:06:73:bc:69:15:
                    b6:9a:e9:d4:a4:e8:d6:c7:26:79:c3:25:e4:e4:7c:
                    c0:08:bf:f9:5d:81:f2:60:8d:a9:9d:c1:af:65:ce:
                    d0:1a:0e:0b:3e:d8:81:aa:38:0d:f2:91:f1:31:ea:
                    23:eb:d3:96:6f:b6:42:d1:b0:61:26:05:11:9b:59:
                    8d:aa:f6:28:5e:fa:73:87:98:68:7a:21:9d:f9:ac:
                    5e:e2:19:dc:34:15:f1:78:4f:08:6a:f6:a6:aa:ac:
                    99:d5:60:bd:6c:a7:bc:2d:cc:7c:00:19:ce:07:65:
                    ba:bc:35:52:e8:b7:bd:02:29:a7:6b:c9:70:90:db:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E7:E8:78:D5:F4:17:DA:CF:DF:3F:43:32:8E:D3:83:E1:41:D5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3f:07:c7:af:e4:55:64:bc:c3:56:69:e9:5b:aa:8b:22:81:
         25:89:b9:02:8a:ca:17:c5:97:e2:bb:fe:74:a0:74:40:14:ed:
         df:a4:56:ef:21:5d:3b:2d:b2:3f:16:da:38:2c:d2:ae:c1:d0:
         c5:28:40:c7:52:8a:03:bd:a3:e4:05:16:88:6c:45:63:12:bb:
         ee:bd:10:c0:90:f0:a1:09:5d:4c:ad:9c:72:3b:6f:27:1a:8b:
         91:4b:45:22:a7:ec:e0:ce:d0:b2:e7:4e:7a:c0:30:58:42:86:
         06:b2:3e:69:5f:a3:04:41:23:99:6b:c5:21:b0:92:db:2c:7c:
         eb:3c:8c:63:5f:71:4f:9e:a8:02:96:e7:44:f4:20:28:58:1b:
         65:d7:4d:f8:ae:73:b0:48:4f:25:33:df:37:f9:b4:cc:46:35:
         2f:aa:34:33:7b:b0:14:4d:ec:ed:52:d3:6e:52:0d:41:23:e8:
         05:1e:26:18:fe:d7:a1:af:59:1f:64:8e:07:85:93:d5:f8:b1:
         d0:75:27:d8:75:29:da:5c:04:90:02:37:ee:5b:bc:69:da:6a:
         38:de:54:99:8d:84:cf:e4:e1:50:da:7c:59:35:c9:f2:86:6c:
         7f:a2:c4:ed:fd:38:bc:1b:60:02:c0:e7:7f:79:68:cb:b3:62:
         b3:a9:95:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538KIIHdwJfjJWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
MzcwZDMzY2EtOGNmNi00ZjdjLTg3M2ItMTkxOTg4Njc2MTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsZPfxxpPbsjMocIA+j7wcEwepSsah3WsTLy
wNPI29kGMLZEa1nhrAQdW5STOj1Jj/TLw6kFt8POH2hpn4I5LLWiZyzKIuZW1kKR
7rUEBb/oUtEW2W+wHc+TL0RJyZYfAflqrIi07AzNnwcaYBfdnEc0Juay5sLBUf5D
TiUCTG4dBnO8aRW2munUpOjWxyZ5wyXk5HzACL/5XYHyYI2pncGvZc7QGg4LPtiB
qjgN8pHxMeoj69OWb7ZC0bBhJgURm1mNqvYoXvpzh5hoeiGd+axe4hncNBXxeE8I
avamqqyZ1WC9bKe8Lcx8ABnOB2W6vDVS6Le9Aimna8lwkNt/aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPn6HjV9Bfaz98/QzKO04PhQdWEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDNhMGQ4Y2QtZTM1My0z
NThmLWJkNGYtZmVmYTlmMjRiMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc/B8ev5FVkvMNWaelbqosigSWJuQKKyhfFl+K7/nSgdEAU7d+kVu8h
XTstsj8W2jgs0q7B0MUoQMdSigO9o+QFFohsRWMSu+69EMCQ8KEJXUytnHI7byca
i5FLRSKn7ODO0LLnTnrAMFhChgayPmlfowRBI5lrxSGwktssfOs8jGNfcU+eqAKW
50T0IChYG2XXTfiuc7BITyUz3zf5tMxGNS+qNDN7sBRN7O1S025SDUEj6AUeJhj+
16GvWR9kjgeFk9X4sdB1J9h1KdpcBJACN+5bvGnaajjeVJmNhM/k4VDafFk1yfKG
bH+ixO39OLwbYALA5395aMuzYrOplVE=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:25 2025 by rpki-client