Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40d076bd-39f5-34c5-88af-695d1fb972d3.roa
File:                     40d076bd-39f5-34c5-88af-695d1fb972d3.roa (raw, json)
Hash identifier:          rgQ+2tnMaW/UmlwepTy4rw83N0UFDzYcFfNUKYmfX6k=
Subject key identifier:   A4:D3:CF:B1:C5:C7:F2:ED:5E:7F:1E:6A:4A:3C:01:F1:49:4D:F6:D1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904DB524B5446E9B6328380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40d076bd-39f5-34c5-88af-695d1fb972d3.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:db:52:4b:54:46:e9:b6:32:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=b2fdb3b4-b1c3-415c-97cf-80b52f92d2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:ce:27:9e:ca:ba:78:73:02:7a:8b:65:ad:
                    66:36:04:82:22:46:5c:04:32:4f:68:29:da:b8:c7:
                    ce:98:e1:2e:3c:e6:e1:a8:33:c7:7b:73:1d:d6:3a:
                    01:9a:23:07:56:4f:10:0e:78:7e:e8:a1:50:0f:17:
                    ef:2a:36:ee:6f:46:07:5f:0b:c2:71:58:f3:d0:70:
                    06:20:21:7c:a3:7f:92:95:3e:50:e8:7c:ae:77:36:
                    74:6e:96:27:81:1d:8f:c4:78:0b:fd:3c:19:30:27:
                    66:4a:11:1e:d7:48:09:14:ac:3c:aa:fe:1f:f1:cb:
                    46:b4:56:52:24:e2:b8:28:3a:6b:de:19:5d:8e:f5:
                    bc:2e:65:76:10:90:e2:e9:35:6c:c3:d1:6e:8d:d1:
                    bc:af:93:6e:61:86:f4:43:96:a5:8d:5d:9b:c3:e1:
                    1b:ba:f4:81:b3:49:62:c9:9c:79:df:4f:e9:58:34:
                    5d:d1:8c:6d:da:12:bc:62:a4:39:2a:5d:9c:97:bc:
                    55:2e:5d:b6:6b:c6:ac:ad:85:e9:a4:28:57:5c:89:
                    99:13:3a:6c:1d:50:7c:59:c9:aa:2d:a0:40:79:60:
                    b0:56:6e:d5:98:7d:ee:40:db:82:1c:fb:31:63:50:
                    8e:ee:b3:5f:5a:78:2b:c6:af:76:b8:9d:4e:95:ae:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:CF:B1:C5:C7:F2:ED:5E:7F:1E:6A:4A:3C:01:F1:49:4D:F6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40d076bd-39f5-34c5-88af-695d1fb972d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:46:0b:65:cb:a4:ea:c6:1d:84:4f:84:c8:df:97:9d:ed:45:
         41:a9:c3:d1:c1:f4:d3:ad:db:db:3b:3d:5b:4e:96:e6:11:c9:
         24:db:27:38:9a:21:57:84:95:ed:ee:c5:cc:fc:a3:ec:61:78:
         6e:b0:95:d2:e9:02:25:fd:2d:75:77:41:ee:c5:68:85:2e:ac:
         2e:87:1e:9a:7b:34:39:7d:45:56:63:af:c9:57:59:52:9f:c7:
         ac:cf:3e:ad:dd:4e:92:3d:cc:78:61:b8:65:0d:e3:7c:62:1b:
         04:d9:53:9b:b2:a6:19:08:ae:83:69:ec:c3:5f:83:ee:a2:30:
         3e:c1:2b:4b:1a:cf:22:28:c4:76:ec:8f:1a:f2:22:6a:1a:90:
         f6:9a:2a:5e:a4:0b:c0:a8:de:14:b1:7e:19:d2:ed:6e:94:ef:
         11:a1:c8:1c:35:c1:46:1d:ec:f2:01:6e:2d:39:45:fd:91:0e:
         f8:ff:90:91:55:8f:b0:24:5c:1d:ab:c6:f6:c2:1a:47:6c:25:
         01:1f:a3:04:f1:df:2d:9f:a4:9e:97:f7:21:33:62:26:02:3b:
         e1:ff:7a:fa:c6:cf:3a:1e:fd:c5:36:21:a2:7f:58:93:0f:c4:
         78:75:1e:e3:e3:fe:b5:6e:b8:c3:d3:30:b9:62:23:03:4b:4b:
         6f:7f:ba:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBNtSS1RG6bYyg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
YjJmZGIzYjQtYjFjMy00MTVjLTk3Y2YtODBiNTJmOTJkMmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV/OJ57KunhzAnqLZa1mNgSCIkZcBDJPaCna
uMfOmOEuPObhqDPHe3Md1joBmiMHVk8QDnh+6KFQDxfvKjbub0YHXwvCcVjz0HAG
ICF8o3+SlT5Q6HyudzZ0bpYngR2PxHgL/TwZMCdmShEe10gJFKw8qv4f8ctGtFZS
JOK4KDpr3hldjvW8LmV2EJDi6TVsw9FujdG8r5NuYYb0Q5aljV2bw+EbuvSBs0li
yZx530/pWDRd0Yxt2hK8YqQ5Kl2cl7xVLl22a8asrYXppChXXImZEzpsHVB8Wcmq
LaBAeWCwVm7VmH3uQNuCHPsxY1CO7rNfWngrxq92uJ1Ola4tWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTTz7HFx/LtXn8eako8AfFJTfbRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDBkMDc2YmQtMzlmNS0z
NGM1LTg4YWYtNjk1ZDFmYjk3MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBGC2XLpOrGHYRPhMjfl53tRUGpw9HB9NOt29s7PVtOluYRySTbJzia
IVeEle3uxcz8o+xheG6wldLpAiX9LXV3Qe7FaIUurC6HHpp7NDl9RVZjr8lXWVKf
x6zPPq3dTpI9zHhhuGUN43xiGwTZU5uyphkIroNp7MNfg+6iMD7BK0sazyIoxHbs
jxryImoakPaaKl6kC8Co3hSxfhnS7W6U7xGhyBw1wUYd7PIBbi05Rf2RDvj/kJFV
j7AkXB2rxvbCGkdsJQEfowTx3y2fpJ6X9yEzYiYCO+H/evrGzzoe/cU2IaJ/WJMP
xHh1HuPj/rVuuMPTMLliIwNLS29/urA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:01 2025 by rpki-client