Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5ac3b27b-0051-3a3f-9f35-36cdfb1dee9e.roa
File:                     5ac3b27b-0051-3a3f-9f35-36cdfb1dee9e.roa (raw, json)
Hash identifier:          TO5VGQ7Y8ErakTXFblsWJWgYbo90nE2ddG3MhsUhg58=
Subject key identifier:   26:B4:1F:7B:CB:C9:3E:B3:7A:82:03:93:3B:B5:87:81:08:EE:45:E9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A0C054A946A6F47E203F15680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5ac3b27b-0051-3a3f-9f35-36cdfb1dee9e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        130.137.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4a:94:6a:6f:47:e2:03:f1:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b4171835-58f4-494a-a728-9711639f828b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:5c:ae:49:0a:d6:18:02:d2:43:85:83:c1:
                    3b:cd:5f:ea:4f:e1:06:b2:05:cf:83:ac:72:55:d1:
                    78:a1:8a:20:c1:17:79:17:64:11:7b:4e:d6:ae:71:
                    2a:1c:f8:ee:63:bd:12:85:83:27:5d:db:98:83:60:
                    e2:89:9e:7a:e2:d4:25:f8:ca:fd:d9:73:6e:3b:d0:
                    de:1c:f6:c6:be:2f:40:b5:26:a0:e2:fd:20:d9:09:
                    6f:f7:30:46:eb:2f:3e:b9:8f:44:b9:73:62:1a:0e:
                    8b:ce:fd:cb:83:d0:d5:bd:fc:fd:8c:77:ea:4a:33:
                    8e:44:43:9b:28:38:93:0f:01:7d:aa:d2:54:ed:a5:
                    c6:86:de:41:60:3e:eb:b5:c2:fa:c2:3a:50:37:ee:
                    27:57:22:0e:69:df:07:fd:03:14:71:ab:f7:07:29:
                    0d:a2:4a:c8:ac:5e:48:19:e0:44:47:72:e2:08:5e:
                    1e:3e:a5:32:65:df:16:8f:e1:af:d9:4e:3e:19:62:
                    a5:f4:7d:e2:b0:47:be:ac:b8:7f:c5:cc:e7:1f:af:
                    87:5f:5f:f2:7f:6a:64:28:50:8f:2a:96:a4:26:63:
                    02:71:d6:47:bd:06:e9:19:19:a5:88:f8:99:4a:84:
                    b8:e3:bd:ea:64:cc:ef:d7:cf:06:4e:8b:e2:aa:bf:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:1F:7B:CB:C9:3E:B3:7A:82:03:93:3B:B5:87:81:08:EE:45:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5ac3b27b-0051-3a3f-9f35-36cdfb1dee9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:2b:44:28:3c:c5:02:52:53:fc:34:2d:f1:5d:fb:32:6a:
         0d:58:64:4b:de:43:39:13:89:8f:d7:3c:4b:0b:7b:3a:c2:19:
         52:67:65:b4:81:81:e8:6f:97:35:5f:b4:79:a0:a7:d3:fd:fb:
         9e:6b:84:d2:61:74:3b:66:12:13:64:05:21:41:5d:50:40:ac:
         ef:f6:e3:f2:08:60:1f:61:a6:7e:56:7a:e2:93:c0:1c:f6:fb:
         6c:d8:b4:d1:05:68:72:99:da:43:6a:33:c2:09:b9:37:eb:fb:
         0b:ac:9f:fe:38:ef:2f:8e:f4:26:0a:81:c4:11:d5:d5:27:91:
         a0:6f:ef:f1:83:3b:a8:4a:98:f5:cf:83:32:fb:ae:c7:ed:b0:
         ca:a9:cb:f3:04:f5:1e:79:82:55:80:de:57:12:a4:af:c1:3e:
         81:82:0c:7c:29:21:27:64:d5:d9:20:b4:80:9b:2f:11:a3:63:
         0c:37:a5:9f:40:cf:ef:71:f4:10:2a:1c:c4:ac:26:74:04:00:
         35:cf:12:66:a1:3f:8e:47:c9:94:ac:a3:a7:74:81:28:c2:7f:
         40:d2:54:31:ba:75:36:bd:b0:86:f3:c6:08:0b:49:65:c3:45:
         35:c8:97:99:f5:5b:b3:21:af:62:a7:53:29:ad:c0:ae:9b:d3:
         1c:f3:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:03 2025 by rpki-client