Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/71571d9d-29b3-39c2-a12c-149856476098.roa
File:                     71571d9d-29b3-39c2-a12c-149856476098.roa (raw, json)
Hash identifier:          O8Tqj7wtjWArKOH6/wBVY5KDIHDvObUy3Rp8W6OHNm4=
Subject key identifier:   58:06:A8:97:C6:7B:A0:DC:6D:69:F4:B0:5D:9E:3F:BB:2F:6B:B4:CB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849D594E5029D10F2181F2D1EA0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/71571d9d-29b3-39c2-a12c-149856476098.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        130.137.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e5:02:9d:10:f2:18:1f:2d:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=56da3851-8231-4a8f-886b-b62ff6b3f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:2e:36:92:34:49:70:fc:cd:48:bf:9f:08:
                    b0:73:7f:af:9b:f8:70:bf:f0:dc:60:21:be:d5:c3:
                    1a:4c:5f:69:ca:5b:d3:a6:b6:26:99:4f:40:fd:33:
                    f9:72:53:06:ef:86:71:eb:42:d7:6a:da:51:bb:c0:
                    7d:e2:b4:18:b4:7f:bf:04:67:38:af:25:6d:8f:c1:
                    10:b8:c2:dd:47:e5:9a:f9:39:e7:b5:65:69:b5:68:
                    84:32:09:56:d2:3c:88:24:47:ee:91:44:cd:94:5e:
                    cd:eb:a3:34:d1:00:ae:8b:63:00:34:36:16:57:12:
                    c0:29:21:92:17:54:20:c5:de:71:96:7a:35:8a:6a:
                    36:44:2c:e5:f7:02:52:17:ab:e0:03:fc:69:77:38:
                    4f:9b:4f:d7:9e:77:ea:bd:3c:70:ae:bd:57:e0:68:
                    0a:ae:d8:99:f9:11:f0:1b:7c:ec:25:85:83:a0:21:
                    4b:61:c7:cf:5e:10:7c:2e:77:62:b4:58:d6:b8:f0:
                    5e:7f:5f:2c:60:af:40:2d:b1:ac:78:2c:6b:e4:e9:
                    bc:82:1b:c9:ab:d1:75:14:c3:75:6a:af:4e:f0:d8:
                    3d:5a:37:0a:f6:b5:61:f4:da:79:d2:f0:cd:f8:9b:
                    1d:55:1a:4f:07:bf:39:63:a3:5a:ef:60:e3:8a:5b:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:06:A8:97:C6:7B:A0:DC:6D:69:F4:B0:5D:9E:3F:BB:2F:6B:B4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/71571d9d-29b3-39c2-a12c-149856476098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:77:c7:9c:6b:34:39:ea:c7:b2:bf:dc:e1:c6:6f:f6:d8:
         ab:44:22:10:fe:14:00:fb:8c:33:57:f7:17:1b:02:7f:0e:31:
         f2:c0:12:89:eb:44:1c:ce:25:d4:24:bc:ec:c3:f9:b1:e3:f3:
         8e:51:3c:e5:fd:42:1c:45:a6:d4:d9:04:68:1a:98:18:bf:ee:
         45:a8:7a:7c:59:0a:6a:a4:b2:b2:de:d1:35:41:30:79:06:41:
         f4:31:27:b2:5c:e3:03:58:33:11:4b:84:cb:b8:42:a9:ea:80:
         eb:b7:e9:b4:19:d4:2d:fd:3f:0c:15:7a:b9:52:07:ea:21:58:
         25:06:90:24:86:a5:e6:0f:2d:91:09:b6:1c:d1:1c:a0:82:e7:
         e6:dc:7b:79:3d:85:fe:cb:59:01:7f:e8:59:6f:08:50:7c:99:
         b5:25:48:38:84:e3:ff:94:5c:87:c6:a9:e9:ee:21:97:24:3b:
         02:e2:8f:ad:b5:b1:c0:a1:24:ce:e1:bb:4c:a2:75:53:0b:fb:
         24:0f:d3:69:ec:35:59:4c:3a:b9:88:d9:97:62:a7:2a:3f:c6:
         4e:44:b4:75:fc:de:cb:b5:28:33:12:9d:42:cf:f4:66:8a:d9:
         2f:0f:e2:17:53:bc:a6:41:31:d5:4a:c2:1d:87:e9:ca:37:2e:
         4c:1e:d1:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOUCnRDyGB8tHqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
NTZkYTM4NTEtODIzMS00YThmLTg4NmItYjYyZmY2YjNmMjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoUuNpI0SXD8zUi/nwiwc3+vm/hwv/DcYCG+
1cMaTF9pylvTprYmmU9A/TP5clMG74Zx60LXatpRu8B94rQYtH+/BGc4ryVtj8EQ
uMLdR+Wa+TnntWVptWiEMglW0jyIJEfukUTNlF7N66M00QCui2MANDYWVxLAKSGS
F1Qgxd5xlno1imo2RCzl9wJSF6vgA/xpdzhPm0/XnnfqvTxwrr1X4GgKrtiZ+RHw
G3zsJYWDoCFLYcfPXhB8LnditFjWuPBef18sYK9ALbGseCxr5Om8ghvJq9F1FMN1
aq9O8Ng9WjcK9rVh9Np50vDN+JsdVRpPB785Y6Na72Djilsn7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgGqJfGe6DcbWn0sF2eP7sva7TLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzE1NzFkOWQtMjliMy0z
OWMyLWExMmMtMTQ5ODU2NDc2MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBGd8ecazQ56seyv9zhxm/22KtEIhD+FAD7jDNX9xcbAn8OMfLAEonr
RBzOJdQkvOzD+bHj845RPOX9QhxFptTZBGgamBi/7kWoenxZCmqksrLe0TVBMHkG
QfQxJ7Jc4wNYMxFLhMu4QqnqgOu36bQZ1C39PwwVerlSB+ohWCUGkCSGpeYPLZEJ
thzRHKCC5+bce3k9hf7LWQF/6FlvCFB8mbUlSDiE4/+UXIfGqenuIZckOwLij621
scChJM7hu0yidVML+yQP02nsNVlMOrmI2Zdipyo/xk5EtHX83su1KDMSnULP9GaK
2S8P4hdTvKZBMdVKwh2H6co3Lkwe0c0=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:20:22 2025 by rpki-client