Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/593d6cdc-4fc6-31c6-9306-74d9370cf0a2.roa
File:                     593d6cdc-4fc6-31c6-9306-74d9370cf0a2.roa (raw, json)
Hash identifier:          RzjifWHkWPi6SXyCFAnDOXvbAu/+51EYfCNEpfhBX68=
Subject key identifier:   8E:DE:69:DC:A1:BE:DE:87:95:48:2B:5D:D5:33:47:1C:6E:61:47:65
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC494ECB8D3FAAF8EFE00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/593d6cdc-4fc6-31c6-9306-74d9370cf0a2.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        130.137.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c4:94:ec:b8:d3:fa:af:8e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=630291c8-d61e-4181-9aa7-3c82f951f273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:d8:83:9c:f2:f9:33:ed:d7:b0:ab:6e:1b:
                    14:b8:58:cd:28:ec:a7:c8:39:11:c7:09:e1:8b:3e:
                    9e:3b:72:cf:93:3d:bc:14:d5:f3:56:8f:58:1e:77:
                    65:0e:f3:a0:7c:00:83:58:90:34:d0:3d:ad:51:03:
                    26:ea:de:ce:47:a5:6a:fd:3b:ff:3d:13:dc:d0:42:
                    3e:09:60:58:11:65:be:a6:ac:92:89:84:cb:83:5d:
                    84:1e:c1:ba:d0:ab:72:2a:c1:73:2d:e2:2a:b5:c2:
                    48:43:fa:3e:d7:51:85:29:d5:c1:78:ca:11:a8:7f:
                    22:51:3c:91:6a:20:92:1f:59:49:28:45:11:8f:3c:
                    85:50:94:b5:1f:2a:08:21:f2:27:45:44:41:91:b9:
                    13:c1:ac:1e:c0:f7:04:cc:dd:ff:fc:4e:af:23:6d:
                    05:fe:72:c0:26:66:2a:0b:76:7d:2c:e5:62:48:b6:
                    a1:14:5d:c3:a1:07:dd:ec:32:bf:66:0c:31:73:d0:
                    48:1d:53:78:7e:b1:61:1a:6c:8d:e8:34:e7:92:2f:
                    3a:6b:4f:b5:f5:06:c4:57:5c:fe:b5:03:99:9e:c9:
                    f3:c6:3b:60:9a:f6:ec:46:fb:46:1c:1c:3a:07:a0:
                    03:18:8d:3b:20:6c:51:25:6f:b3:0c:72:a5:fd:91:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:69:DC:A1:BE:DE:87:95:48:2B:5D:D5:33:47:1C:6E:61:47:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/593d6cdc-4fc6-31c6-9306-74d9370cf0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:57:0b:e6:6c:84:36:ff:1e:fb:23:af:30:98:25:fc:21:bb:
         e9:61:06:57:eb:da:2b:8f:7d:10:e7:f7:99:b4:f9:71:3b:e0:
         b8:a5:2f:1d:67:a1:d8:d4:09:c2:98:67:a6:4b:f2:a5:ec:0a:
         8f:6a:8f:50:1d:73:d9:7d:44:8f:27:96:d8:62:8d:77:34:f4:
         ca:27:31:52:39:01:9e:ad:45:94:60:5d:58:ea:fa:5d:8d:bf:
         90:23:c9:45:f9:5f:40:fa:6b:99:66:09:0e:65:91:48:21:60:
         9b:fa:68:ef:2d:2e:8c:8b:09:27:f0:08:4e:e0:c6:fa:2d:45:
         fd:17:06:90:a1:c7:0d:b7:a3:4f:7e:99:e8:db:3f:47:9b:45:
         20:62:fb:4f:bc:54:63:45:de:62:10:b8:6b:f9:10:cc:d8:33:
         4d:d6:6f:3f:7d:03:d1:1d:b6:61:fb:51:50:35:55:c4:a3:8c:
         50:8d:95:db:41:ba:a1:8f:92:a0:80:25:61:38:07:dd:d6:76:
         47:e5:0c:46:43:08:5b:f9:c2:2a:3b:c2:d7:ea:eb:35:89:6f:
         35:46:c4:39:df:c5:26:34:dd:d2:51:13:48:7d:00:b1:68:87:
         f7:f6:7e:fb:5d:ce:43:46:ec:c8:2d:b2:21:a0:a2:e9:19:ca:
         c7:d6:31:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538SU7LjT+q+O/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
NjMwMjkxYzgtZDYxZS00MTgxLTlhYTctM2M4MmY5NTFmMjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3Yg5zy+TPt17CrbhsUuFjNKOynyDkRxwnh
iz6eO3LPkz28FNXzVo9YHndlDvOgfACDWJA00D2tUQMm6t7OR6Vq/Tv/PRPc0EI+
CWBYEWW+pqySiYTLg12EHsG60KtyKsFzLeIqtcJIQ/o+11GFKdXBeMoRqH8iUTyR
aiCSH1lJKEURjzyFUJS1HyoIIfInRURBkbkTwawewPcEzN3//E6vI20F/nLAJmYq
C3Z9LOViSLahFF3DoQfd7DK/Zgwxc9BIHVN4frFhGmyN6DTnki86a0+19QbEV1z+
tQOZnsnzxjtgmvbsRvtGHBw6B6ADGI07IGxRJW+zDHKl/ZGDqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7eadyhvt6HlUgrXdUzRxxuYUdlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTkzZDZjZGMtNGZjNi0z
MWM2LTkzMDYtNzRkOTM3MGNmMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVXC+ZshDb/HvsjrzCYJfwhu+lhBlfr2iuPfRDn95m0+XE74LilLx1n
odjUCcKYZ6ZL8qXsCo9qj1Adc9l9RI8nlthijXc09MonMVI5AZ6tRZRgXVjq+l2N
v5AjyUX5X0D6a5lmCQ5lkUghYJv6aO8tLoyLCSfwCE7gxvotRf0XBpChxw23o09+
mejbP0ebRSBi+0+8VGNF3mIQuGv5EMzYM03Wbz99A9EdtmH7UVA1VcSjjFCNldtB
uqGPkqCAJWE4B93WdkflDEZDCFv5wio7wtfq6zWJbzVGxDnfxSY03dJRE0h9ALFo
h/f2fvtdzkNG7MgtsiGgoukZysfWMTs=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:22:03 2025 by rpki-client