Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9627691f-4a12-31a5-bd3a-6d378f8c4307.roa
File:                     9627691f-4a12-31a5-bd3a-6d378f8c4307.roa (raw, json)
Hash identifier:          yLlKtH68xvIjNV+kxKNgwjSWa6unnK1P9vEAuKqpDwM=
Subject key identifier:   B2:FB:19:DD:CB:E0:F0:F2:E4:5B:7A:57:2D:86:CF:C4:C0:6D:E8:FC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FCAA6AAAB074CB199A380BC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9627691f-4a12-31a5-bd3a-6d378f8c4307.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        130.137.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:6a:aa:b0:74:cb:19:9a:38:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=cd349dbe-be5c-43d2-8a6e-a9bd17264956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:6a:85:fd:99:0c:00:1c:4e:5a:ac:e5:1b:
                    a9:7b:e4:7c:f8:30:ad:7c:b9:73:9d:05:58:d7:a8:
                    15:c1:61:1c:e8:7b:12:e8:b1:ad:55:a1:21:bd:96:
                    bc:19:95:03:7d:fe:58:09:7e:55:12:17:75:06:09:
                    42:fb:17:01:c6:cc:38:91:68:9f:43:8d:66:61:4a:
                    f0:b8:6d:ee:ea:05:9e:d6:fb:50:9c:ef:c0:21:93:
                    aa:54:31:fb:d7:69:01:31:f7:7f:ef:8a:e1:75:26:
                    dd:3c:c4:2e:b6:72:34:66:91:c0:03:fd:46:d2:5d:
                    aa:4c:98:ac:08:2e:cb:cd:f9:ea:7e:75:74:c1:f3:
                    6e:70:20:45:ae:78:cd:46:ca:e3:fb:67:5b:4a:57:
                    bc:ea:c4:84:6c:0d:ae:90:4d:88:3e:a4:1d:09:d2:
                    00:f4:fd:42:89:02:dd:0d:c7:12:f9:7a:73:8f:9e:
                    c6:7a:49:c9:12:69:3d:1c:5d:f6:dc:f7:88:15:2b:
                    b4:c8:a8:d3:ee:c5:88:9b:9d:19:b6:31:0b:0d:fd:
                    ff:86:91:08:ce:dc:66:4a:b4:31:b3:f9:6c:3f:d6:
                    44:88:7e:62:e5:71:79:25:32:ff:33:e9:11:1c:dd:
                    30:4b:16:48:81:8b:d7:c2:7b:8b:92:51:19:a7:8c:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:19:DD:CB:E0:F0:F2:E4:5B:7A:57:2D:86:CF:C4:C0:6D:E8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9627691f-4a12-31a5-bd3a-6d378f8c4307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:c4:e3:4a:38:30:dd:d8:d0:05:67:92:bd:e2:95:5e:43:
         9f:da:22:61:0c:e4:02:25:58:39:f2:c0:f7:bb:91:70:61:7a:
         42:1e:d3:f4:23:f4:57:ab:3a:36:52:e2:8a:78:14:77:5e:07:
         19:44:a9:65:1b:a7:b2:a3:8e:0f:77:04:b1:36:58:b1:51:1b:
         e6:d9:24:91:9a:72:8f:e2:dc:a2:dc:a4:dc:1b:0f:d4:15:44:
         d3:1c:29:3a:3c:9e:01:7c:8f:c0:ab:8d:8f:20:ac:58:54:6d:
         89:8e:b1:8f:d0:96:2c:23:c3:eb:20:f7:a7:65:f5:72:fa:ee:
         47:db:f8:fe:97:9f:2c:b9:72:3f:d1:44:ff:5f:09:7f:02:53:
         b9:1b:63:df:da:ef:93:be:f3:ae:3d:74:2f:7a:39:75:50:45:
         fc:a7:c3:65:5f:d9:c4:06:18:3a:3b:c0:c2:2e:64:4f:9a:cd:
         38:85:80:27:d1:f8:0a:f2:07:3e:ad:55:29:52:8b:70:f6:27:
         29:f1:7d:a1:d7:55:2c:7f:f5:d7:b7:1d:3b:b3:e4:4b:01:37:
         28:06:34:b1:ed:37:31:48:ff:7e:31:e0:6f:a3:1f:28:e3:79:
         03:59:12:58:56:d9:8f:c2:7e:25:5d:21:aa:f9:ac:4a:9c:a2:
         cc:e3:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:59 2025 by rpki-client