Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa
File:                     2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa (raw, json)
Hash identifier:          BwSilzKIM08KNXNRj1zw+FELwqeIU6+eKeFPhbmABRg=
Subject key identifier:   81:8C:25:12:D0:7E:8F:75:85:CF:82:F5:C5:A9:4E:6C:E0:33:A7:99
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A0C05572C48A1133636704B80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        130.137.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:57:2c:48:a1:13:36:36:70:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4322873d-3863-44d1-8dfc-0009efee147b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:b6:7d:5b:3e:72:cd:30:32:ca:49:a1:43:
                    63:a9:76:a0:63:6f:2e:f3:8d:9d:d7:fb:db:a4:b0:
                    c0:2b:8c:09:ba:0c:52:e0:6f:18:ed:ed:99:db:2f:
                    29:78:8c:2e:5a:41:f0:c1:1a:c5:dd:64:cd:97:bd:
                    ee:a9:c7:66:98:8b:ca:81:4b:02:23:d9:fd:73:1b:
                    bc:67:38:01:27:fa:ab:19:95:dd:a1:bc:d8:fe:0c:
                    7d:64:5b:f6:81:27:5c:27:73:f9:ef:30:39:e2:fd:
                    d3:8f:c7:d5:96:0c:b5:a2:d6:d5:de:5c:95:6b:2c:
                    fe:eb:c4:ee:93:ca:f2:59:27:31:fd:cf:00:f9:e8:
                    d6:70:2d:f1:40:58:f6:04:24:e8:da:ec:d0:ec:14:
                    a1:72:63:3a:0e:2a:79:36:1e:d0:65:a2:b4:7d:87:
                    47:58:ab:60:72:d1:da:73:49:d1:c8:fa:5e:a4:a5:
                    89:e7:f7:5e:8a:7f:a3:94:50:fd:5a:01:5c:40:47:
                    8e:2e:91:33:1a:97:c0:27:d3:61:a9:63:21:fc:8d:
                    ca:22:6c:44:3e:24:24:4d:35:9a:25:e1:2a:1e:f9:
                    7b:e1:b7:b4:d4:e2:1f:95:ba:eb:66:e8:57:cf:55:
                    e3:77:9c:f4:0b:71:4b:65:67:d5:9f:7d:a9:f7:48:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:25:12:D0:7E:8F:75:85:CF:82:F5:C5:A9:4E:6C:E0:33:A7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d2b8bb6-d43a-3c81-8c0d-57af871ea96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:c0:c4:bf:84:fc:b8:42:57:09:8f:29:da:3c:bf:bf:64:
         bb:8e:38:ae:c7:29:82:91:f4:8c:78:2f:64:85:d3:d2:01:8c:
         a0:15:bb:e6:5c:94:66:74:9e:7c:d7:df:c9:7a:6b:c1:69:59:
         0c:e6:ea:d1:ab:e1:f0:a6:c1:87:10:3a:b0:a7:ab:e7:0e:5d:
         c2:9e:16:fb:24:3f:e6:00:fc:20:ce:1c:b3:fd:59:b3:5e:db:
         88:de:16:6e:f8:dc:d9:4c:52:fb:20:56:96:85:36:06:55:95:
         36:0d:7b:e0:c6:3a:43:b4:60:24:6f:93:a3:14:ab:ec:40:97:
         8f:59:93:27:74:4f:cd:66:c1:14:5a:0f:3b:da:77:7a:c0:1e:
         71:9f:bf:11:f4:47:5f:da:15:fa:49:f4:ae:38:83:59:b9:a2:
         66:12:ec:d9:53:e5:4a:d3:c8:2c:26:84:14:1b:9b:a1:32:5e:
         a3:f6:c7:70:b1:b6:20:a1:2d:43:10:72:9a:3f:5a:c6:e6:91:
         d9:40:19:ce:f9:36:9d:17:49:4b:c8:8f:21:14:7f:ff:69:92:
         cf:66:f8:c5:a2:aa:5b:98:82:92:0c:79:ea:19:b5:33:4a:a0:
         84:08:4c:e9:51:ef:4a:73:38:22:2a:a1:ad:85:15:99:12:4e:
         e6:ad:9a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVcsSKETNjZwS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NDMyMjg3M2QtMzg2My00NGQxLThkZmMtMDAwOWVmZWUxNDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeC2fVs+cs0wMspJoUNjqXagY28u842d1/vb
pLDAK4wJugxS4G8Y7e2Z2y8peIwuWkHwwRrF3WTNl73uqcdmmIvKgUsCI9n9cxu8
ZzgBJ/qrGZXdobzY/gx9ZFv2gSdcJ3P57zA54v3Tj8fVlgy1otbV3lyVayz+68Tu
k8ryWScx/c8A+ejWcC3xQFj2BCTo2uzQ7BShcmM6Dip5Nh7QZaK0fYdHWKtgctHa
c0nRyPpepKWJ5/dein+jlFD9WgFcQEeOLpEzGpfAJ9NhqWMh/I3KImxEPiQkTTWa
JeEqHvl74be01OIflbrrZuhXz1Xjd5z0C3FLZWfVn32p90g4bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGMJRLQfo91hc+C9cWpTmzgM6eZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmQyYjhiYjYtZDQzYS0z
YzgxLThjMGQtNTdhZjg3MWVhOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwjwMS/hPy4QlcJjynaPL+/ZLuOOK7HKYKR9Ix4L2SF09IBjKAVu+Zc
lGZ0nnzX38l6a8FpWQzm6tGr4fCmwYcQOrCnq+cOXcKeFvskP+YA/CDOHLP9WbNe
24jeFm743NlMUvsgVpaFNgZVlTYNe+DGOkO0YCRvk6MUq+xAl49Zkyd0T81mwRRa
Dzvad3rAHnGfvxH0R1/aFfpJ9K44g1m5omYS7NlT5UrTyCwmhBQbm6EyXqP2x3Cx
tiChLUMQcpo/WsbmkdlAGc75Np0XSUvIjyEUf/9pks9m+MWiqluYgpIMeeoZtTNK
oIQITOlR70pzOCIqoa2FFZkSTuatmgE=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:59 2025 by rpki-client