Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b2358090-232a-3415-93bc-2adf6d4d3ab6.roa
File:                     b2358090-232a-3415-93bc-2adf6d4d3ab6.roa (raw, json)
Hash identifier:          93o24WVtsBU1yALxD3SZULWfXNtIDHrk0xLOB4M6cns=
Subject key identifier:   96:40:7C:4F:6F:17:AF:01:DE:0B:4E:DB:ED:1C:BA:1F:E6:E9:14:81
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FE0FF184E3C9E66ACD7E17C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b2358090-232a-3415-93bc-2adf6d4d3ab6.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        130.137.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f1:84:e3:c9:e6:6a:cd:7e:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=86e40857-5f7c-4d54-b6e7-dd764fd272e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:09:26:7c:63:73:d7:bb:dc:c8:4f:ab:aa:
                    46:ca:56:07:87:4d:5e:51:ed:13:bb:2f:37:ec:0f:
                    5e:49:a1:9d:47:f1:eb:3a:7c:c7:13:69:81:db:83:
                    58:d1:96:a1:63:c3:df:7d:b2:ea:4e:4d:91:69:d3:
                    16:01:ec:2c:de:1b:2b:01:d5:45:fc:13:36:4e:fc:
                    98:4c:b8:f7:60:69:c1:41:9a:9c:c0:3b:ce:a7:29:
                    be:c3:53:18:58:f5:1c:0d:c8:ac:9e:28:25:6b:ab:
                    25:87:51:47:2f:27:76:0a:6f:3a:71:18:46:ab:be:
                    0d:52:a0:e2:6a:fd:e5:2b:ce:3a:f7:3d:9a:83:4b:
                    5e:ec:2b:37:3a:07:fd:47:ad:aa:ac:a8:42:e3:a6:
                    c9:bd:ce:42:34:69:aa:3a:12:6d:24:84:b3:27:d7:
                    d0:a2:41:08:d0:fe:69:b0:62:dc:c2:19:10:ee:b0:
                    3a:45:54:75:72:f4:5e:1e:5d:1b:af:bc:31:60:49:
                    2f:e0:87:f8:ee:b6:0f:bf:61:17:bc:89:b0:62:23:
                    45:4a:86:fa:4c:b8:bf:c1:ed:b7:5b:4b:c2:30:fe:
                    b5:77:7d:b9:8a:6f:b7:8f:03:0e:0d:9a:d4:e1:5f:
                    8c:c2:d8:39:f7:98:10:24:92:fb:40:4b:7d:80:dd:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:40:7C:4F:6F:17:AF:01:DE:0B:4E:DB:ED:1C:BA:1F:E6:E9:14:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b2358090-232a-3415-93bc-2adf6d4d3ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:c2:e7:9e:fa:27:40:03:a9:95:2e:c8:3c:08:6a:2c:72:
         83:a3:23:e4:25:b1:e1:58:2f:f7:f0:78:e7:8d:c3:95:66:04:
         e4:d9:9d:0b:fe:c9:9a:3f:10:34:48:83:76:9f:33:90:15:d0:
         37:53:c2:61:df:f4:22:08:97:a0:36:82:3d:b5:b0:54:bc:83:
         56:24:d7:7d:bb:90:7a:38:d9:33:42:45:05:d8:2c:cc:17:0b:
         d6:a1:11:00:0a:be:6e:12:09:9d:e2:79:dc:4e:d7:01:f1:75:
         cb:73:ed:bf:f6:04:5f:21:a0:fb:35:27:b3:23:da:27:55:7b:
         f0:31:ba:a8:45:35:c9:ef:dc:e1:34:60:9f:9f:97:2f:84:6b:
         bb:03:2c:07:e3:e3:f4:0d:cc:20:cd:b3:94:a7:fd:6d:de:b5:
         56:1a:1e:57:8f:eb:e2:e4:c4:04:35:70:84:59:58:e5:88:3b:
         06:06:36:61:ad:aa:e4:4e:4e:ab:ce:29:f6:dc:87:e3:aa:32:
         32:9b:57:fa:c0:08:b5:b6:4f:9b:43:61:e5:24:7e:be:89:25:
         33:01:e1:61:1e:8c:f2:bd:79:3e:ba:6b:a1:60:51:e2:83:a5:
         32:58:e2:ca:ca:88:31:17:ff:72:a4:e1:a7:ee:7b:75:51:4d:
         8a:ef:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:14:34 2025 by rpki-client