Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa
File:                     6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa (raw, json)
Hash identifier:          SDnhhKGr+CdzxMQtCDqBF5qNGSCxVlv1GZ6bQLMNEMc=
Subject key identifier:   F4:7C:5A:81:44:FA:73:38:CE:61:D2:EA:13:23:59:9D:56:37:51:1D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC473494E70355EC3FF40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        130.137.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c4:73:49:4e:70:35:5e:c3:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=cb3c69c5-04ff-43d7-a6eb-6784f924cb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a0:84:ea:19:7d:ce:29:fe:db:c9:a5:9f:00:
                    f2:98:dc:68:92:7f:ad:3f:fd:2b:ad:2e:8a:77:6e:
                    36:38:8e:6c:01:78:a3:0d:93:9c:29:55:0f:51:6d:
                    94:37:71:ff:6a:04:fe:42:62:ca:45:10:b2:95:9e:
                    c2:8d:3a:8f:5c:ba:36:6b:69:66:21:f4:65:c6:da:
                    fd:77:6a:56:75:70:82:53:b3:25:1a:90:84:37:10:
                    c4:bc:2a:2a:f1:44:9b:be:86:04:7e:d7:3a:17:37:
                    59:d2:a7:12:c4:72:33:08:7a:f0:12:5a:27:f4:2e:
                    29:95:ef:30:77:32:19:4a:70:41:07:33:3c:35:dd:
                    34:84:a4:a2:c3:80:18:6a:ee:28:ca:89:b6:cc:69:
                    22:a2:33:2d:2b:93:09:32:b6:f4:90:25:dd:b8:43:
                    c3:6b:be:ab:34:72:8c:a0:68:39:46:d5:11:ef:4d:
                    67:aa:83:19:33:86:71:1b:85:fc:78:f4:3f:ee:17:
                    9f:bd:5a:a2:ea:bb:f5:0f:9e:9b:18:11:73:48:ff:
                    f9:ed:e6:48:03:42:4e:84:af:ac:f5:3d:1e:dd:47:
                    59:60:3a:a7:52:d0:cc:50:21:d1:37:f4:c4:1d:ca:
                    3b:18:bf:a5:96:6f:94:28:6f:d9:b1:98:89:eb:c2:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:5A:81:44:FA:73:38:CE:61:D2:EA:13:23:59:9D:56:37:51:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:68:a6:a1:34:b1:b9:cc:1f:8f:78:6c:de:c4:8d:55:ee:
         f7:96:3c:a2:76:71:77:ff:fe:3a:75:b3:1f:af:95:d2:17:c8:
         18:bf:3a:99:60:cb:60:f9:ca:8e:32:5e:c5:14:ac:41:e3:5e:
         e5:2b:27:e7:a0:7f:d5:77:e6:91:bb:9f:d4:fe:4d:9a:fe:b7:
         48:55:87:86:95:a2:f0:1d:cd:71:4e:04:9b:4f:96:dd:75:ca:
         a0:af:cb:98:7e:c7:fa:df:2b:47:2f:94:4f:34:08:47:c8:31:
         52:d0:24:e9:db:38:43:3f:5a:02:bd:a5:fa:cb:7d:bb:8c:31:
         f7:b4:79:da:37:dd:88:13:97:d9:06:93:a7:d8:82:4e:d6:fa:
         cf:18:c3:c8:82:1e:83:2c:89:49:0f:c5:e8:af:2b:bb:75:3b:
         51:99:ee:6a:19:d8:f2:34:36:a4:51:67:5c:35:57:e9:7c:0e:
         02:79:ab:97:16:70:54:18:d9:29:d9:cf:29:c9:12:30:69:9f:
         89:33:3d:de:6d:56:24:7a:31:14:f8:3f:46:b8:8e:ba:15:d7:
         1c:99:52:7f:70:e5:5f:81:77:df:6c:d4:c2:53:59:68:2f:fc:
         52:5a:3f:43:ad:1d:47:ef:71:49:b3:96:ac:07:1a:c1:4f:72:
         f8:5e:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:05 2025 by rpki-client