Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67c15ac9-526d-319a-8f6a-b44467c52714.roa
File:                     67c15ac9-526d-319a-8f6a-b44467c52714.roa (raw, json)
Hash identifier:          KN50bRDQlR1oKfBX32CBX88PuU5VjMLX6NpyvCatCSI=
Subject key identifier:   8B:62:C2:43:CC:BC:F3:21:F4:EA:3F:8C:31:2B:C9:5A:2D:DE:EA:0D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC22B75B1DC51179DD000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67c15ac9-526d-319a-8f6a-b44467c52714.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        130.137.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c2:2b:75:b1:dc:51:17:9d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=92eb90cb-b336-4624-934d-ea6382490740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:d9:1c:29:3c:e7:af:fc:6d:4e:72:a8:b6:
                    85:5a:f1:80:3f:a3:0a:63:b1:f9:ce:85:be:61:f5:
                    47:7f:05:3c:74:dc:42:de:c7:36:95:40:8c:62:c5:
                    fc:5f:e3:77:3e:3f:d6:5c:d6:1c:81:67:2d:f9:c5:
                    1e:85:a7:77:fa:b3:1d:4d:41:5b:16:55:73:f5:7e:
                    6e:ae:f5:6f:6a:1f:9d:33:79:7d:a0:95:a4:66:06:
                    52:59:f5:8c:f8:29:5d:2e:69:5c:cd:49:2f:4e:d0:
                    15:0c:3e:64:5f:bc:7c:11:ce:f8:23:d8:39:63:73:
                    71:d6:40:21:41:80:fa:77:01:29:9c:90:63:73:dd:
                    0f:71:2a:ac:c6:ed:0d:39:60:74:f5:f2:42:c2:34:
                    af:99:67:ee:f1:0c:79:ae:ad:1a:15:7a:ff:75:a2:
                    91:0b:e3:46:b7:7c:6d:e5:9d:b9:58:3b:15:de:dc:
                    c3:b3:70:e8:c1:93:10:cc:15:ff:0a:7e:0e:17:51:
                    95:6a:58:91:2d:25:a6:75:87:e9:23:58:c3:ab:23:
                    77:85:8e:8e:6c:ac:81:e3:72:59:60:2c:d6:aa:a9:
                    d8:26:bc:02:05:91:4e:37:a5:bb:5c:a1:b2:5a:58:
                    19:3e:80:bd:e8:e1:e3:a8:22:e5:60:ab:d2:c2:43:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:C2:43:CC:BC:F3:21:F4:EA:3F:8C:31:2B:C9:5A:2D:DE:EA:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67c15ac9-526d-319a-8f6a-b44467c52714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c8:e8:81:04:b8:98:b6:3a:c6:a4:5d:2b:6e:48:48:d3:00:
         3c:67:e1:44:90:32:bb:64:c2:ec:ae:b7:4e:bf:86:91:66:1d:
         86:f0:de:5f:2d:dd:0e:68:1e:13:37:55:ef:19:ce:d5:2b:e1:
         ac:79:78:b3:4d:e4:b0:27:f4:16:ea:db:55:8c:51:a0:0c:e6:
         7f:1e:f3:b9:cd:7d:47:c0:82:c7:bd:40:b4:c1:1a:bc:c9:eb:
         a6:43:58:c8:e3:82:6d:e6:70:5d:09:d0:d1:70:5f:57:17:23:
         b0:4d:c5:ce:39:db:2e:bd:2d:54:67:b3:2f:5d:8e:95:0f:ea:
         ac:fa:c3:8a:e6:64:05:b9:11:4e:4f:2b:87:25:50:37:24:71:
         16:6c:a7:26:9e:71:e5:67:49:ff:4f:ee:0b:e2:c3:d9:c6:80:
         5a:61:fc:0a:51:8c:2a:e1:2f:5f:2e:78:6e:62:4f:4e:6e:22:
         17:bb:ad:0b:9d:8f:59:ef:4d:da:00:a4:77:c9:b9:ba:e1:bf:
         27:6b:c5:08:bc:a6:65:20:c9:20:5e:42:26:d3:5a:07:92:7b:
         70:88:69:4b:3f:5a:c5:b0:0c:42:9e:52:41:b8:2a:59:42:fe:
         8b:6d:40:b5:bd:ec:78:58:01:72:e8:7f:59:d9:39:6a:aa:55:
         18:1e:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:54:28 2025 by rpki-client