Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1edad276-70ee-3cba-b8ad-a393eb1588c6.roa
File:                     1edad276-70ee-3cba-b8ad-a393eb1588c6.roa (raw, json)
Hash identifier:          80YbpIIC++muMnRKOlA2RaVWMnsbeORR1PhGz8uSqfM=
Subject key identifier:   EE:B6:2C:F5:C7:2B:8F:55:83:B8:4B:80:BD:18:E8:A2:D6:CE:9A:22
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FCAA711C4DB6A3156804C340
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1edad276-70ee-3cba-b8ad-a393eb1588c6.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        130.137.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:71:1c:4d:b6:a3:15:68:04:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=70738cdf-c033-47d9-b134-f1e51e348658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:82:62:3c:e8:2e:dc:8b:3c:02:08:0c:e3:
                    cd:7d:a9:b3:ae:fc:d6:b3:aa:1e:62:66:68:93:ef:
                    87:af:92:1c:e4:71:83:c6:8a:85:f5:84:81:a6:18:
                    73:91:19:39:f8:cb:8d:2d:28:3d:f0:8b:73:08:95:
                    f1:d2:40:fd:3b:7a:f4:e4:90:86:c5:d1:09:2f:40:
                    a9:5b:c3:02:8c:6b:cc:8f:ce:79:7c:0f:a0:5b:70:
                    58:a1:77:b0:0a:74:3c:e2:7d:d1:22:c6:4e:e7:4e:
                    54:73:08:93:2b:88:08:43:b5:49:ea:bf:a0:36:ca:
                    6a:1d:4a:27:c6:8e:e4:e4:e7:a3:fb:ec:db:2e:a4:
                    0a:c8:de:d5:70:c1:14:e0:fb:5f:a0:5b:9a:bc:e9:
                    1a:e9:57:24:21:95:24:d4:92:59:26:6b:23:4a:de:
                    94:19:d9:c0:9c:83:d5:6e:51:bf:9e:cc:57:91:0e:
                    aa:da:21:60:1a:6f:2d:1c:02:44:77:ed:b9:70:71:
                    d9:0a:0a:63:2b:32:f3:09:3b:4a:8d:2a:29:0e:ff:
                    cf:d7:2f:67:43:85:9a:53:54:af:e1:96:77:dc:7f:
                    f0:d9:da:1e:87:5e:d5:40:97:f8:c7:da:49:2d:98:
                    0d:4b:42:de:95:34:e2:60:3a:43:3d:b2:aa:c0:37:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B6:2C:F5:C7:2B:8F:55:83:B8:4B:80:BD:18:E8:A2:D6:CE:9A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1edad276-70ee-3cba-b8ad-a393eb1588c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:0c:4b:33:03:d4:f1:72:38:35:d9:12:77:a0:ea:b4:25:
         ae:82:6d:18:07:d4:1c:4d:ed:c5:ed:08:66:84:bf:ea:43:c5:
         fe:04:56:07:d5:c1:63:ac:a9:59:b6:eb:ce:59:11:0c:d4:d6:
         19:01:f6:68:44:3a:53:15:74:51:36:3e:4d:a2:d0:2a:01:d1:
         b4:24:d9:d4:92:4d:42:bd:ca:54:e9:89:40:df:f9:b5:ae:b5:
         af:11:3b:86:5a:09:18:f7:af:3d:31:16:71:5e:89:ae:76:e9:
         b5:51:b6:7a:12:8e:05:de:02:f0:0b:78:28:ae:db:27:16:a6:
         03:54:0f:2a:64:5c:16:57:47:8f:47:54:03:e4:97:5a:e0:ea:
         99:4e:8f:c6:f3:3a:63:2c:27:15:ee:0a:53:3b:8f:a2:a2:5a:
         0f:50:6a:a2:d7:b6:8b:14:b0:aa:59:4a:52:39:b9:00:11:f9:
         cd:c2:fb:4d:34:97:2a:dc:94:3e:e2:eb:4e:05:17:16:78:5c:
         2e:9c:92:c4:a2:3b:f4:0e:ec:a7:ac:53:7d:4b:99:c4:71:ed:
         13:68:46:47:77:b7:a3:84:1a:1d:37:15:91:2e:39:d7:3e:f0:
         74:43:8f:d5:4b:26:5f:e9:44:a2:d1:3a:a0:e7:a0:dc:82:16:
         74:7d:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:08 2025 by rpki-client