Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa
File:                     7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa (raw, json)
Hash identifier:          wqIgTv/PZlLGJ+/aq+CCtCfFIumUSGNCKG7xTy41fDY=
Subject key identifier:   51:7C:63:CC:0B:2E:FA:CF:B8:59:8D:EE:9F:41:8E:BD:97:40:61:3D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849CBCFA65BBD3ECE311514F780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a6:5b:bd:3e:ce:31:15:14:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=ec4665d3-09d8-4c2f-b079-c1c6f7bde6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e4:f6:a9:53:38:59:a4:c5:35:50:50:92:d4:
                    25:c2:8a:53:80:c1:7f:1c:bc:3b:c3:cc:d6:30:98:
                    a3:01:de:91:c7:9e:00:bc:91:37:73:ad:33:4d:4c:
                    0c:70:23:a4:7b:a0:16:0e:6f:3d:dc:3b:50:3f:bc:
                    b5:79:d7:19:46:61:87:29:5a:8f:fc:e1:a2:47:65:
                    e7:50:24:3a:63:4f:3e:64:9a:e4:90:ac:9d:f4:51:
                    ad:fe:76:d7:ee:8a:d2:f3:37:54:12:f1:21:16:6c:
                    62:4c:34:9f:1d:d5:cb:76:b7:ba:6b:2a:88:5b:f6:
                    29:d0:36:4a:d5:86:90:9a:18:d8:fd:e9:2f:0b:c5:
                    f6:d5:af:82:fe:fd:b8:bd:9b:6f:9e:c0:bf:33:0f:
                    18:dd:4f:b0:bc:59:f4:b2:9c:4c:ff:a9:f9:fc:9c:
                    3f:d9:93:96:cb:f1:5f:2e:10:a4:e4:4b:70:84:99:
                    02:1e:85:13:83:87:c8:b6:e0:7f:3d:39:46:1f:1d:
                    c3:fd:1a:d6:0e:27:d4:37:c7:8b:c3:b6:f9:a7:66:
                    19:15:47:10:77:93:3f:55:23:6c:3d:a5:d5:5b:f8:
                    7c:1f:73:00:a5:db:f1:1a:90:bc:ea:31:33:e1:d3:
                    d4:2d:0f:97:53:5f:20:81:e2:01:24:d9:35:cf:f2:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7C:63:CC:0B:2E:FA:CF:B8:59:8D:EE:9F:41:8E:BD:97:40:61:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:44:98:44:64:1e:88:70:90:43:ca:2b:f0:ae:3c:a9:a6:
         c3:42:ce:c7:3b:e0:da:ed:23:a5:ec:0f:a7:8a:24:9c:0e:57:
         cf:f7:ed:b7:fd:f7:e5:5e:c9:88:6c:f6:1b:f6:2c:9d:77:18:
         c1:ce:bd:2f:78:b1:53:42:69:92:92:79:2d:11:40:e6:cc:ca:
         15:ef:eb:c5:be:41:ef:2a:1f:ef:f2:a9:21:be:05:9a:b0:b0:
         36:39:31:16:59:76:d3:20:0a:d0:73:a7:cf:d6:55:de:f3:df:
         49:19:78:9a:87:50:01:c0:fa:da:47:ac:c9:5d:16:93:dc:d5:
         55:b6:e5:bd:23:40:9e:33:28:01:00:04:6d:1e:33:c1:e9:d3:
         d9:3c:16:12:7a:98:cc:f5:56:da:a2:42:f2:c6:61:99:78:5b:
         d6:64:d9:69:53:e3:0e:e5:c8:0f:28:bc:11:42:c1:44:47:69:
         32:26:4f:db:ae:5f:85:fd:c3:d1:c3:54:27:5e:aa:7c:26:6f:
         dc:ec:fc:55:c3:dd:2b:1e:04:6c:2c:fc:c0:24:03:93:ff:2a:
         2d:8e:45:b8:bc:4e:07:74:75:bb:29:03:8e:be:cf:aa:b3:10:
         58:ef:71:92:b6:6f:13:f5:05:bf:00:9c:93:d4:ec:38:af:3d:
         93:9a:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:20 2025 by rpki-client