Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
File:                     237ed539-e7c4-3afc-8222-c0b4292ef524.roa (raw, json)
Hash identifier:          M1jmGe7uwlQcEDMinxHmlBlZMWZihzNAPK8fkkUGZmQ=
Subject key identifier:   8E:51:0F:26:2B:EA:9C:C2:FD:56:D5:02:A1:F7:4A:A2:AC:F3:48:67
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F7150F082914B370BEB5A880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        130.137.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0f:08:29:14:b3:70:be:b5:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=2f064807-6c3e-4019-a297-065ed0d64934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:97:50:ea:65:68:da:a6:80:41:9e:8a:27:
                    ea:8c:de:0f:eb:98:54:4d:5d:38:94:32:39:ef:3d:
                    0b:f1:f8:dc:19:67:14:0b:7b:c5:ce:20:a7:f9:f8:
                    11:3a:e1:fb:b0:e9:42:8f:b9:02:ef:f2:ac:72:67:
                    72:29:d2:60:d1:6b:be:f6:34:57:93:63:bf:54:2e:
                    b2:18:93:9e:7c:1f:8b:4a:3c:4b:06:6b:2a:66:8f:
                    3e:e5:66:0c:0f:71:62:6b:fc:fe:c0:85:04:b8:27:
                    dd:ad:da:e3:48:7f:5b:64:10:d3:c3:af:0e:c1:30:
                    31:e2:be:26:48:55:e0:06:82:b3:7c:fe:e2:9e:87:
                    3c:80:43:85:94:8b:cb:59:0a:a8:e5:3e:a8:7b:b0:
                    d8:cd:b5:dc:3c:ca:6a:d3:a2:f4:d5:a0:1d:d8:2f:
                    7b:ac:f7:d0:a7:de:5b:1b:fe:ad:c7:d8:dc:88:6f:
                    b1:6c:61:29:08:48:36:e7:e9:ec:5c:2a:fe:a1:88:
                    6c:c7:af:82:ab:e6:df:e6:e4:e4:45:11:bf:bc:bf:
                    ba:cf:2f:13:4f:9b:f0:91:64:f9:96:c5:12:b6:76:
                    2e:91:81:de:e1:f7:64:49:eb:9b:36:8f:5a:f3:e6:
                    fc:32:61:87:3b:14:35:03:7f:1f:70:c1:22:f9:94:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:51:0F:26:2B:EA:9C:C2:FD:56:D5:02:A1:F7:4A:A2:AC:F3:48:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:53:d4:eb:ce:51:52:8b:33:69:c5:e9:2a:5f:59:5e:b7:83:
         16:fc:ae:00:5d:64:9b:75:6e:89:25:0d:f8:e5:f0:32:9e:85:
         58:64:5f:f9:ed:49:ae:6c:2a:36:de:14:fc:88:0e:d2:45:35:
         b9:a8:47:5a:3a:55:12:48:d8:82:71:0a:c8:00:43:a2:1b:87:
         a2:9a:d3:e7:87:28:38:41:c4:3d:26:f9:77:c3:76:83:3a:cb:
         a3:37:c7:8e:31:3b:f3:aa:b9:85:2c:96:60:c5:a7:fc:85:30:
         3c:ab:d1:d8:6b:1c:90:6e:29:f5:c7:06:be:ce:9e:08:62:17:
         4d:b7:92:96:ea:0f:ec:be:93:35:f1:b5:8d:70:8b:4b:4a:98:
         f5:e6:8f:8d:06:c0:9a:5b:c0:57:85:0f:fb:33:34:de:70:d0:
         17:68:31:52:b0:84:d1:21:09:65:ee:81:fd:66:96:4c:ce:ca:
         7f:a7:a0:bc:27:b9:13:ca:ab:2e:31:da:9d:86:c7:56:0c:d5:
         74:1c:c3:ed:b9:34:e6:4d:3a:64:72:00:0b:de:24:56:19:62:
         72:70:62:97:db:b4:5f:58:e5:61:cd:eb:a8:04:92:c8:47:f2:
         50:dc:73:93:17:47:65:95:d8:44:3e:59:b9:e7:6f:96:43:85:
         c9:3b:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:16 2025 by rpki-client