Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a090000f-c881-3bf4-8c4a-0067e18f7a05.roa
File:                     a090000f-c881-3bf4-8c4a-0067e18f7a05.roa (raw, json)
Hash identifier:          iOEFbO4wugcfBFHZOABHWgQ2c2ow6MHXXbWY1wlrkfo=
Subject key identifier:   AD:15:E4:55:C0:25:36:EB:FC:B3:72:57:76:C9:64:A5:0D:DC:2C:15
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904E553B76649D585FCCB00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a090000f-c881-3bf4-8c4a-0067e18f7a05.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e5:53:b7:66:49:d5:85:fc:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=7da2435c-c4f6-4fad-bfbc-88f037907c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:23:e3:a0:49:4c:f9:c0:46:cc:0f:2a:a4:
                    64:ab:98:47:b3:16:c3:42:21:df:eb:f1:d4:5e:94:
                    3c:f5:c3:c6:11:bd:7f:96:f7:11:0d:94:76:e7:38:
                    1c:c6:cd:72:d4:b1:15:0f:27:e1:a8:bf:c6:8d:fc:
                    4b:d3:14:98:8a:74:bd:08:8a:dd:f9:62:eb:33:dc:
                    0c:f2:ab:b4:25:40:c7:0a:45:c5:ad:0f:d5:3e:b3:
                    ef:ed:4c:84:ac:9f:58:76:e4:60:2a:a5:4a:e8:b4:
                    e4:c2:56:e0:cf:06:cc:10:24:3d:cc:6e:88:43:6f:
                    a7:b8:97:71:cd:09:40:29:8e:fa:06:11:0f:4e:20:
                    fb:6b:51:cc:f0:4b:98:fd:24:8a:2f:20:2e:60:d7:
                    c6:a3:02:4e:40:ed:11:14:b9:eb:36:a5:4a:cf:cc:
                    f7:bc:3f:1c:68:4f:98:f2:51:31:c0:e8:d3:af:bc:
                    fa:b0:ea:87:f2:f3:0e:b1:26:1e:5d:4d:fc:87:05:
                    f3:61:85:eb:8e:ba:e1:fe:c0:c5:b6:b9:a4:8e:6e:
                    d1:9a:5c:06:4e:0b:3f:0b:e3:c5:e3:23:a3:86:33:
                    4d:c4:8b:e3:09:96:39:34:74:eb:c1:6c:1e:41:05:
                    2d:67:54:c6:2f:ec:bd:23:01:aa:f5:bb:96:c7:05:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:E4:55:C0:25:36:EB:FC:B3:72:57:76:C9:64:A5:0D:DC:2C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a090000f-c881-3bf4-8c4a-0067e18f7a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:44:86:0f:2e:05:e4:a6:5f:e1:91:f6:85:4f:85:88:1b:60:
         e4:d9:99:ea:c4:95:73:f5:8b:76:ec:18:35:b4:bf:69:df:7d:
         9d:2c:5c:36:f6:58:31:1b:a7:f9:1d:c1:66:37:9e:ab:c4:f7:
         94:80:55:f3:49:2e:6d:3c:45:f1:f0:69:c6:96:6b:c1:02:b4:
         1d:b9:34:3b:8e:a8:d2:20:ed:f2:73:42:d6:af:fc:59:af:8f:
         c2:57:aa:ca:d2:74:76:09:05:0e:85:81:34:a5:39:38:04:52:
         af:d8:24:a4:30:16:db:37:e9:1c:96:63:bb:e7:ea:07:11:dd:
         9e:ae:0b:40:4b:73:72:d7:69:c7:40:a2:0f:52:59:8f:77:69:
         13:9d:b4:c0:3a:22:08:aa:2d:a4:0b:d2:ed:df:ca:3e:3f:ea:
         92:3e:04:e2:01:65:ad:82:5c:84:02:ba:2b:d4:9d:f7:d0:88:
         2d:e0:ed:eb:57:94:22:11:72:45:90:b7:fa:86:e0:1b:c0:38:
         ed:06:36:ac:8e:1f:f5:92:aa:34:5b:00:b9:79:64:d6:ba:bc:
         b0:2e:35:11:e1:57:ff:7c:99:9c:2b:6d:4a:54:98:14:3c:14:
         7b:50:d9:37:6c:75:a0:b9:ef:56:f7:c1:4b:30:5e:00:94:07:
         30:97:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:43 2025 by rpki-client