Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa
File:                     9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa (raw, json)
Hash identifier:          E3Xyc8Wj21UtYT57Ck0XQLFFMkkV3Yj/DHLfJBL/0FE=
Subject key identifier:   E5:16:DC:52:E1:3A:51:66:FC:B5:55:B7:0E:09:CC:6C:1C:62:FC:CA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC23A164A9687BAFA2780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        130.137.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c2:3a:16:4a:96:87:ba:fa:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a34d182e-55cd-4622-a212-7cce2e0d6148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:79:32:b3:bb:9c:0d:11:02:b3:ff:09:1d:
                    28:93:e6:c9:fc:d3:ee:b2:48:7a:1e:d7:cd:ff:7b:
                    58:d7:dd:7e:8b:55:ec:08:c1:bd:53:18:92:af:3b:
                    d7:e4:a9:74:8a:c3:68:ba:af:ad:e2:4d:cd:54:e7:
                    cc:ee:e6:b3:00:fb:75:42:de:b5:74:e3:29:ce:99:
                    08:53:16:81:ff:c3:47:ba:ff:6e:d9:e2:df:9e:61:
                    71:ed:25:3b:ed:91:9a:71:34:60:07:94:80:fb:47:
                    c1:8d:85:fc:45:14:1d:26:85:ea:a3:23:95:5f:41:
                    57:05:c9:0a:3a:f7:74:bb:5f:45:cf:ea:17:79:d5:
                    ec:f1:ac:d0:e5:db:b6:80:9b:95:c9:a1:4b:31:55:
                    72:55:0f:03:94:11:50:3b:38:08:eb:4e:03:de:cb:
                    18:29:cb:a8:0a:0c:ab:e1:67:00:a5:a1:bb:90:da:
                    59:c3:5c:41:bd:30:b3:88:77:af:30:88:dd:d1:a6:
                    68:ea:29:7a:9b:59:4d:7e:cf:55:3c:fc:f6:3f:e7:
                    d9:92:48:90:8e:69:9e:29:e4:78:47:89:43:65:f9:
                    73:17:75:2f:ad:cd:97:a9:ff:71:83:fd:3f:aa:8c:
                    17:65:71:ce:1d:16:97:6a:5b:60:1e:c4:07:74:13:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:16:DC:52:E1:3A:51:66:FC:B5:55:B7:0E:09:CC:6C:1C:62:FC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:4f:76:62:84:fa:32:96:18:2c:40:fa:d1:bc:2f:0c:cf:
         49:5a:9f:e7:5b:e0:4d:82:90:4f:98:19:b8:17:9b:e0:ea:aa:
         4e:65:9e:70:89:f9:8f:59:b3:b5:0b:06:85:1c:b2:76:79:d2:
         30:dd:fd:99:bf:0d:2a:08:85:59:87:c0:27:a4:02:74:0c:cc:
         b5:b9:74:d0:ec:c3:c6:0b:0f:50:b9:bc:fd:bb:55:78:78:fc:
         f0:c6:4b:ce:9b:e9:50:0b:88:99:85:53:68:29:e0:40:09:df:
         6d:e2:1e:73:75:60:d2:64:36:d9:2f:a3:bb:35:e4:f5:60:6d:
         51:a7:ae:4d:35:08:d6:2c:1a:53:3f:b5:aa:ce:55:36:72:00:
         04:c5:bd:ea:21:68:af:22:b9:f5:0f:ec:2a:86:b2:7d:c0:00:
         c3:f6:bf:51:ed:9c:c1:5d:3b:68:92:51:a8:3b:98:6a:a5:28:
         be:2c:45:d0:61:53:1a:67:8b:bb:e3:c7:6a:3a:10:aa:c5:e0:
         d3:d2:1d:f0:df:c1:07:32:6e:d7:81:11:ee:c0:7c:c4:3b:19:
         32:fd:37:71:1e:f8:e2:a7:57:fc:12:91:61:b5:0d:5b:7f:09:
         b3:a2:06:d6:28:07:eb:84:d8:9d:67:58:da:9c:84:33:c1:b3:
         33:47:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:24:32 2025 by rpki-client