Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a476596-81d0-3278-ba69-aeed7427a7cf.roa
File:                     6a476596-81d0-3278-ba69-aeed7427a7cf.roa (raw, json)
Hash identifier:          C4guEAmr/1eyYJbTh0mDzwRGcl6poaWoLLJhYhzg6bY=
Subject key identifier:   BD:84:36:1F:87:7F:69:C6:F6:D0:DD:59:F5:98:3D:88:92:0E:EE:BE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849CBCFA61AB4423F2758A91540
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a476596-81d0-3278-ba69-aeed7427a7cf.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a6:1a:b4:42:3f:27:58:a9:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=8889697a-f8b1-48e9-937f-7b63499c01b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:c5:a2:88:a0:a3:41:e9:27:82:8e:61:6a:
                    61:35:ea:a0:1a:04:f9:79:a8:56:29:9f:fa:8e:52:
                    f8:46:64:6e:7b:02:64:52:0f:78:59:8b:3d:76:ab:
                    04:30:a9:80:1f:41:6d:27:c8:5d:2f:27:a3:e6:47:
                    4f:09:8e:2f:7b:e9:0c:b4:a9:31:1f:24:5b:37:74:
                    ee:bd:af:10:ea:0d:0a:5d:ec:fd:cb:15:f5:74:14:
                    9a:74:c2:4e:ea:58:ca:da:63:ae:38:98:57:0c:54:
                    13:c6:a9:09:41:9e:2c:a9:6d:26:6a:f2:ba:03:86:
                    74:30:19:19:ea:e4:77:07:eb:6c:42:31:c4:0c:48:
                    80:d1:4f:79:cf:d9:6d:49:c0:dd:d7:af:8e:dc:ae:
                    c8:09:25:66:58:81:b6:3c:78:86:60:e0:86:12:eb:
                    4d:c6:6e:5d:65:f1:a7:cd:8c:c7:d3:5e:c9:32:53:
                    5d:24:66:63:4d:1b:c0:b8:40:6a:42:ef:51:13:db:
                    a6:c7:37:c0:a0:89:f8:93:f0:5f:68:cf:db:91:9a:
                    e0:7d:8c:cf:ab:73:a5:45:b0:74:d6:32:a2:39:6c:
                    41:77:2d:78:67:82:91:da:08:33:ce:aa:6e:ce:59:
                    e6:7c:f5:6b:1b:82:7e:d2:3e:5d:23:1d:f0:4b:44:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:36:1F:87:7F:69:C6:F6:D0:DD:59:F5:98:3D:88:92:0E:EE:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a476596-81d0-3278-ba69-aeed7427a7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:60:56:8e:bf:88:44:a9:57:01:37:48:43:e8:1f:ca:44:5b:
         c1:3a:8c:c4:bc:75:b2:6d:ad:41:8c:07:6e:1c:94:63:ce:7a:
         fd:0a:ea:b7:b0:f8:f3:f4:44:1a:51:0d:61:b6:ba:39:a2:04:
         96:0c:75:90:f7:46:e7:43:60:37:bd:94:d3:47:ae:31:dc:96:
         f7:12:bf:28:87:52:1e:73:c1:7a:c3:13:c5:91:b4:c2:68:04:
         c2:03:55:35:81:77:17:31:c1:9f:6c:b0:d3:b6:fe:48:a4:d9:
         6f:08:e0:b5:66:d5:ff:38:a8:77:b4:48:1b:47:fe:6b:a8:4a:
         38:04:f7:f9:78:8b:6e:85:ea:7b:37:e8:f4:0a:0c:e0:c5:92:
         e9:b3:7b:7c:74:9e:20:aa:0b:d6:13:d4:ee:54:0a:26:14:57:
         15:f8:f2:8c:70:7d:aa:9c:eb:57:98:0d:37:8c:45:e9:3a:47:
         89:bc:87:c3:7f:3d:b1:69:47:35:c9:59:70:67:41:9e:76:84:
         4e:a0:c5:25:a1:ff:9c:b5:f4:83:42:06:97:fd:33:44:96:94:
         44:fa:51:70:36:f9:d8:21:7f:4a:cd:64:a1:6d:21:42:a4:ad:
         82:41:5b:54:bf:8f:f3:b5:f0:1c:c9:27:b1:d6:24:4c:32:de:
         f4:79:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:46:57 2025 by rpki-client