Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa
File:                     af81503f-94d7-3c4a-82d3-477d600d79fc.roa (raw, json)
Hash identifier:          cjdPo1n8fij70AqvLupId/ocb6wdzXo4OEZhP34iqzQ=
Subject key identifier:   2B:4A:4C:9D:24:48:89:4E:95:EC:3D:29:59:28:D6:49:1F:6C:31:0A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A119AABD5B49A8FEE63A50C80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     8987
IP address blocks:        130.137.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ab:d5:b4:9a:8f:ee:63:a5:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=455a700b-1619-4959-89a2-f4ac2a4f41e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:c3:f5:3a:ae:0a:b1:da:39:cf:9e:75:a4:
                    ee:2f:d0:6b:30:4e:86:4d:35:b7:06:2f:c0:7c:cf:
                    7e:b6:43:c4:9d:22:92:c9:81:f1:44:e9:54:6f:fb:
                    69:c5:b9:2f:a0:32:4d:98:e3:6f:f1:25:54:cf:9b:
                    1c:37:49:4e:4b:47:42:16:03:38:27:44:4a:a5:f6:
                    52:d6:c5:d6:38:aa:d2:16:65:48:0d:63:3e:f9:69:
                    49:6a:88:5e:2a:27:cf:4f:12:55:e8:26:08:de:96:
                    18:5d:a9:81:05:99:c7:88:21:50:dd:cf:0e:18:35:
                    72:60:45:f7:89:a4:a8:0a:5e:b5:ac:4d:d4:2f:8d:
                    3c:84:c8:af:b8:83:11:6d:43:42:55:f0:8c:14:59:
                    81:9a:1a:16:80:f6:7b:2d:52:ce:37:75:a0:a6:a5:
                    56:1c:b4:6d:c0:c0:40:3f:80:28:a4:75:75:96:e5:
                    52:32:52:b2:ee:1c:bf:79:e8:0d:88:bc:93:26:fb:
                    77:0e:c6:60:28:90:17:e4:6e:18:c2:e0:f5:0d:e8:
                    5e:9b:1d:1e:65:e7:c5:f8:8e:8f:3b:ff:7f:74:83:
                    ba:b3:c0:31:01:5d:a4:01:78:91:90:f9:42:6e:71:
                    84:cc:d9:10:bc:fb:8a:23:4f:d5:c2:e3:7a:d9:37:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4A:4C:9D:24:48:89:4E:95:EC:3D:29:59:28:D6:49:1F:6C:31:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:6b:a5:55:fd:71:d8:3f:cf:fc:1e:38:bf:d3:04:cb:61:
         8d:88:e1:89:fa:d8:27:41:e8:ec:32:37:46:8b:cb:7f:9c:eb:
         e5:1c:9b:62:29:e6:f1:8f:00:ab:bc:4c:93:69:85:94:ab:11:
         49:e0:f8:6a:74:2d:55:c7:b6:71:c0:95:69:40:db:2e:aa:92:
         e3:b4:c8:4e:a9:df:96:d1:61:be:1e:61:c7:07:b3:aa:31:94:
         84:2f:6b:d5:9c:34:4e:93:33:5a:e5:56:1c:3e:f4:bf:a7:9b:
         e5:e6:8b:02:5e:2e:75:d0:d4:ff:f4:72:8e:39:54:e7:d5:8b:
         26:1e:c0:8f:82:36:c0:93:4a:da:21:a2:bc:91:8e:99:13:98:
         6b:6a:d1:27:94:fd:ae:f8:9e:85:44:c9:e3:74:49:6c:60:ac:
         11:6f:dd:bb:39:bc:23:f5:a1:a4:7f:f9:02:e8:74:84:89:8a:
         4d:48:3a:95:17:85:f7:03:b0:4c:8e:7d:c5:77:df:b2:0a:c3:
         8c:39:3b:24:c0:4d:e1:53:12:d2:23:ae:1d:d5:ee:48:e7:e6:
         2f:c6:dd:a5:41:1a:b6:2b:da:56:8d:f4:76:6a:c3:4d:3c:09:
         24:ae:eb:87:92:92:1f:46:89:1c:35:d5:b7:e2:05:f3:fa:57:
         cb:3c:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:59 2025 by rpki-client