Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa
File:                     a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa (raw, json)
Hash identifier:          TpgOdZDFQmA+1P/fi06g1TbSid/KNW90xFez5EQY9zY=
Subject key identifier:   0B:E8:96:6F:94:37:0B:13:95:A8:92:2F:8B:3B:AA:A3:2D:3B:19:9A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F7151474FBE1A2BFC5532E80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        130.137.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:14:74:fb:e1:a2:bf:c5:53:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=3533cf59-7c99-4d6e-b44c-f9b70b77bb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:77:03:c4:85:25:56:66:ac:6e:4d:92:9c:
                    f1:16:00:d5:49:67:c2:a2:2e:e0:9d:af:14:15:75:
                    2b:75:22:ae:03:08:3c:5c:1a:5f:92:1f:e1:83:de:
                    6e:8c:ab:b0:28:c1:60:7a:10:1e:5e:74:f7:70:6b:
                    97:f4:05:3f:8d:51:02:34:d6:9a:88:87:07:37:09:
                    f2:29:1e:ba:b6:a9:f0:2f:ce:01:5c:47:c4:a2:ca:
                    df:3b:b3:3c:2e:60:8c:1e:fe:f8:18:83:76:81:fc:
                    bd:1d:7f:62:3c:4f:21:49:d3:21:fe:0c:be:b9:e1:
                    1c:91:35:c1:28:28:ad:56:00:f7:3c:0a:25:e2:54:
                    6e:f7:0d:d6:69:64:eb:9e:d5:de:e6:10:32:b4:c1:
                    bd:2c:4c:fd:d0:58:1f:9c:7a:b5:55:d2:28:fe:1b:
                    da:64:58:57:56:8c:2c:cd:10:c3:b7:c0:d0:0e:87:
                    a8:b3:d7:ce:54:71:d7:7f:cd:18:22:16:3e:c5:08:
                    48:ae:6c:bf:36:41:5e:ac:34:d8:2d:ec:07:30:af:
                    3d:1d:f0:7b:97:c5:95:e5:af:a9:f1:1d:97:2e:fe:
                    ad:b0:88:03:6f:da:2b:c3:60:2a:07:fb:be:1d:b9:
                    8f:93:96:33:31:3d:f7:e3:54:61:77:e9:ff:8b:5b:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:96:6F:94:37:0B:13:95:A8:92:2F:8B:3B:AA:A3:2D:3B:19:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:46:2e:07:ab:18:e7:f0:95:57:5c:fc:5a:b7:76:fe:ab:90:
         66:15:0a:fa:78:10:f3:36:e7:7c:9f:ee:25:08:e3:02:ed:7f:
         64:7e:c7:b1:de:6a:70:76:58:fb:0f:82:2c:bf:a3:d2:6f:04:
         15:7c:a2:ce:8e:cc:7c:f1:0b:c0:11:e2:7a:4e:33:f8:53:26:
         e6:52:82:c2:5f:47:85:16:eb:51:c7:90:2b:2e:46:69:d1:4b:
         00:7c:77:e8:a8:5a:b9:7d:4c:c2:03:9d:b5:52:ca:62:aa:76:
         f3:67:72:2d:a5:91:4f:cb:63:5c:b0:ed:ed:d8:67:b6:d3:29:
         38:40:e6:b4:a3:78:40:da:3e:e0:f6:42:78:e9:fe:f6:a9:e9:
         4b:df:0e:75:5e:4b:66:8d:35:3d:3c:ff:73:d8:4f:5d:c3:99:
         46:c7:f5:52:77:8c:b8:cc:e7:9b:2e:67:03:79:2c:45:3b:07:
         9d:52:94:23:40:21:7d:e0:84:f9:27:76:11:fb:df:86:bb:b4:
         94:3c:f3:7c:66:22:7b:1a:69:a4:4f:b0:8f:e5:34:4f:80:31:
         a8:4a:0a:6c:16:16:0f:3b:40:ea:79:c7:7e:f2:fd:ee:73:12:
         13:ba:b2:e0:95:02:99:91:4e:31:b4:5e:00:15:65:69:10:9d:
         a7:2c:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:50 2025 by rpki-client