Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/365716ff-e766-3c41-a7e7-04934618eebb.roa
File:                     365716ff-e766-3c41-a7e7-04934618eebb.roa (raw, json)
Hash identifier:          Z9JNMG/ZSYpYL8RlDa277DkxA65fid+Oe9i6j71Eo8E=
Subject key identifier:   F4:7F:45:4C:A0:66:50:2E:FB:05:9B:51:C7:B4:30:6B:5C:99:A1:13
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849A61F3B7203958693A29AB3E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/365716ff-e766-3c41-a7e7-04934618eebb.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        130.137.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3b:72:03:95:86:93:a2:9a:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=832718a6-38e4-45d6-9acd-8bca379ce6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:ce:b8:c1:92:a8:f4:a8:c5:da:74:db:a7:
                    04:c0:42:29:11:ed:73:56:d6:6e:e2:4b:e2:3a:e6:
                    ea:ef:20:50:7a:1b:12:ae:ef:3e:86:c0:43:eb:71:
                    20:82:3e:b6:29:21:bd:0a:b1:3c:6f:f3:e5:ec:72:
                    03:0f:7a:fa:b2:b9:63:23:91:45:76:d6:2c:10:03:
                    1f:6a:02:d1:07:b9:cb:0d:1e:ad:43:61:16:f5:bd:
                    b9:d6:1d:f0:d5:11:a6:9a:64:24:05:be:a4:64:04:
                    4f:d4:9e:2d:9c:6c:18:fc:0c:33:2e:dc:cf:b4:9b:
                    85:31:5f:0c:39:e1:27:90:28:6f:21:d3:18:bd:dc:
                    c4:c0:6e:30:87:d1:59:0a:fb:e8:09:29:90:9b:27:
                    d4:6c:72:7a:85:35:2c:dc:3e:33:39:c5:1e:e8:99:
                    09:f4:39:62:77:f9:26:69:d9:22:62:bd:67:64:6d:
                    6c:10:b8:bc:d0:1d:24:12:be:f7:a5:dc:7c:13:e7:
                    45:ad:06:a2:68:e5:78:0e:3b:5b:3a:b1:ed:98:8b:
                    0e:ee:0c:78:1f:72:09:eb:ec:de:0f:81:22:24:b9:
                    6c:3f:6a:15:4c:2b:83:d2:a5:89:d1:5e:63:2a:4c:
                    53:62:88:20:b6:52:2f:bb:db:84:ca:f0:63:6f:3b:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:45:4C:A0:66:50:2E:FB:05:9B:51:C7:B4:30:6B:5C:99:A1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/365716ff-e766-3c41-a7e7-04934618eebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:5b:34:db:85:29:06:ed:8a:64:29:75:c1:d6:48:ab:4b:
         d8:67:f4:77:9d:da:ed:39:2d:3d:8a:b6:e3:e5:1f:d4:a2:8f:
         e3:29:94:d7:5a:cd:f5:ad:57:59:22:56:ff:09:71:53:2b:36:
         a2:c6:39:02:e1:4a:bf:e5:9a:54:86:46:03:0a:7e:a5:0d:a1:
         b2:b3:4d:e3:bc:43:1b:c8:82:0a:3f:bf:5d:18:b5:88:da:99:
         36:2e:ae:63:48:23:95:b4:2b:bb:07:35:3d:d6:8d:b3:54:29:
         e4:e6:ab:67:93:ed:07:4a:35:9b:27:fa:12:7e:56:21:27:0a:
         05:76:bc:48:d9:65:93:63:17:43:ac:97:66:d2:c6:d4:16:6a:
         c6:0c:06:a8:66:36:4a:1c:b1:bf:37:ab:02:9e:11:1c:5c:4b:
         24:ec:84:53:37:c8:d7:59:8d:bf:46:a4:17:61:55:17:1e:1a:
         66:d4:b1:2c:af:43:dc:b1:db:8b:77:e6:01:6f:78:37:4e:70:
         39:4b:d0:56:f1:3d:d2:e4:f3:61:b0:7f:47:d7:c2:5c:e9:99:
         09:fd:c6:04:24:bb:7b:28:cd:03:97:a7:ce:49:b3:c7:1e:3b:
         fc:66:a3:1b:28:d2:10:eb:dd:2e:3e:21:c6:f5:01:85:34:4f:
         7d:ad:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:48:41 2025 by rpki-client