Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa
File:                     306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa (raw, json)
Hash identifier:          zyfKn6H/bDerA2QFV9JwBbxu1WweMkdoQpnaCGZLTAM=
Subject key identifier:   20:17:41:96:60:CC:C8:A8:AB:AE:8E:2D:6F:35:DF:5F:0D:B5:83:EE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC074550E919D9C3D9940
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        130.137.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c0:74:55:0e:91:9d:9c:3d:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=7324ca5b-954c-4cc0-b54f-341cb17fb7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:61:e7:1d:9f:ef:9a:c5:57:c1:89:c6:55:
                    26:c4:34:e8:97:c7:65:0e:11:25:38:b6:a9:82:9b:
                    d0:6c:67:4d:52:8b:10:94:c1:ca:85:9e:75:73:4a:
                    c5:3a:09:60:ad:c6:87:8c:66:e7:c5:ea:ac:4d:43:
                    f3:42:ca:68:7a:4f:9f:31:73:b7:37:42:ef:32:51:
                    2b:14:83:48:12:ea:c1:14:82:dd:79:76:a0:28:ee:
                    0c:3f:13:c4:31:53:6e:34:1f:d0:db:f0:40:56:af:
                    df:24:cc:bd:d4:cb:d5:72:12:4d:b4:0f:a3:5b:fd:
                    85:65:9a:64:4e:96:0c:94:7d:64:3b:4d:a9:4d:14:
                    c7:70:b1:d8:93:bf:e3:56:67:b5:ed:50:49:6a:02:
                    bd:0d:22:42:88:2b:98:67:fc:d4:df:d6:22:18:7c:
                    5c:3a:50:5c:cd:1d:2c:40:e6:8a:20:e4:61:b0:e1:
                    38:65:30:08:40:46:8c:a2:99:59:26:7f:15:4f:74:
                    ce:a4:68:f0:02:e0:49:c9:57:3e:78:cd:0b:2b:c0:
                    ef:56:90:75:78:a3:88:ca:86:41:27:f4:09:84:91:
                    11:f5:6a:cd:6b:86:0c:dc:a1:4f:e2:1b:33:49:1d:
                    60:a5:ca:63:5a:c1:2b:69:b8:d6:b0:e0:10:06:ea:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:17:41:96:60:CC:C8:A8:AB:AE:8E:2D:6F:35:DF:5F:0D:B5:83:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/306f9268-1bc8-3bfc-b5b9-7f7e23ece289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:66:c3:a1:3c:e6:92:4d:16:6c:10:dd:f7:59:ed:08:0a:
         76:5f:b3:f2:81:b8:88:65:43:41:61:a4:ad:fb:f1:9d:72:df:
         db:35:94:d1:e1:4b:aa:dd:73:ac:e6:8e:17:6c:35:f3:97:e4:
         64:59:9d:3f:28:51:4e:89:ff:76:ea:ba:aa:30:de:bc:b9:e5:
         00:84:24:6d:5d:b9:e4:b8:05:2e:01:2b:ac:62:4a:ee:c9:68:
         7c:da:a0:ea:23:37:17:36:cc:9b:e5:98:13:e6:ec:a1:2c:f1:
         3f:32:a4:21:d2:13:11:ee:29:33:6b:9c:b7:2e:b9:f1:7e:a0:
         a1:10:40:20:03:f2:ae:57:a2:11:5e:0a:15:c8:c0:df:09:3e:
         aa:a8:46:89:80:80:89:a9:5e:03:68:fe:b0:cd:32:29:11:4a:
         bd:71:93:39:6a:b6:3f:d9:3a:18:3e:57:8b:5f:4e:ae:c0:d0:
         d9:f9:e3:26:96:e5:ce:7b:a3:fd:76:4b:cc:82:ab:bb:2c:6b:
         f6:2a:ce:90:34:75:7e:c6:2f:ba:61:75:8d:5b:37:a7:22:4d:
         0d:a2:2e:55:e0:f3:90:80:58:06:a6:8f:8c:14:de:ae:ee:8d:
         8c:2d:d2:f4:91:2b:a4:16:32:47:1e:72:71:48:1a:e9:70:80:
         b9:fe:52:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538B0VQ6RnZw9mUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
NzMyNGNhNWItOTU0Yy00Y2MwLWI1NGYtMzQxY2IxN2ZiN2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisZh5x2f75rFV8GJxlUmxDTol8dlDhElOLap
gpvQbGdNUosQlMHKhZ51c0rFOglgrcaHjGbnxeqsTUPzQspoek+fMXO3N0LvMlEr
FINIEurBFILdeXagKO4MPxPEMVNuNB/Q2/BAVq/fJMy91MvVchJNtA+jW/2FZZpk
TpYMlH1kO02pTRTHcLHYk7/jVme17VBJagK9DSJCiCuYZ/zU39YiGHxcOlBczR0s
QOaKIORhsOE4ZTAIQEaMoplZJn8VT3TOpGjwAuBJyVc+eM0LK8DvVpB1eKOIyoZB
J/QJhJER9WrNa4YM3KFP4hszSR1gpcpjWsErabjWsOAQBuq2xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAXQZZgzMioq66OLW81318NtYPuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzA2ZjkyNjgtMWJjOC0z
YmZjLWI1YjktN2Y3ZTIzZWNlMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgombMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLnZsOhPOaSTRZsEN33We0ICnZfs/KBuIhlQ0FhpK378Z1y39s1lNHh
S6rdc6zmjhdsNfOX5GRZnT8oUU6J/3bquqow3ry55QCEJG1dueS4BS4BK6xiSu7J
aHzaoOojNxc2zJvlmBPm7KEs8T8ypCHSExHuKTNrnLcuufF+oKEQQCAD8q5XohFe
ChXIwN8JPqqoRomAgImpXgNo/rDNMikRSr1xkzlqtj/ZOhg+V4tfTq7A0Nn54yaW
5c57o/12S8yCq7ssa/YqzpA0dX7GL7phdY1bN6ciTQ2iLlXg85CAWAamj4wU3q7u
jYwt0vSRK6QWMkcecnFIGulwgLn+Uo8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:55 2025 by rpki-client