Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa
File:                     b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa (raw, json)
Hash identifier:          4IBuciYNA8XI0n1OxGi/HuR0akXcoiZLX2F1gO5nxOQ=
Subject key identifier:   2D:DA:AA:D8:D1:FB:FA:16:3E:76:41:85:88:0F:AD:F0:63:D3:F4:E0
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FCAA6AE0EB8EA0DD0359ED00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        130.137.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:6a:e0:eb:8e:a0:dd:03:59:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=f37e0b38-b89f-4726-9897-4017197ab355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:8f:4b:f7:39:04:d0:cc:11:9f:b8:83:41:
                    7c:13:bd:d2:6a:74:bc:20:4f:58:06:d7:65:2b:6b:
                    1c:81:c6:54:fc:48:4e:2c:c9:7d:2c:56:ad:91:b2:
                    b6:72:20:65:df:66:80:18:c0:16:a8:ec:8f:a0:48:
                    a1:1a:44:22:41:cd:18:cc:c4:0e:a3:b5:1a:b3:1d:
                    b9:16:77:bc:2a:cc:9f:fe:54:24:bb:6b:ad:01:d0:
                    23:67:40:9e:8a:ed:85:2d:c3:1c:8a:fd:91:4f:3a:
                    ff:f3:f9:cd:bd:4d:9e:e2:ed:8f:25:8e:71:6e:31:
                    11:64:36:24:a9:b5:5d:df:fe:79:84:78:bd:91:f1:
                    d6:91:61:1b:aa:fc:65:9c:5c:fb:34:cd:16:a0:86:
                    71:b2:ac:14:5e:a2:bb:70:af:38:f4:f8:92:5b:47:
                    b4:e5:aa:09:3b:7a:11:15:f6:fa:00:25:94:dd:fd:
                    cc:49:8f:47:a9:5c:9f:95:a4:20:13:15:78:08:78:
                    91:0a:d7:01:64:6a:61:4f:e7:5a:99:04:83:35:d0:
                    0c:7f:54:ba:57:5c:cd:e5:21:de:55:9c:25:11:eb:
                    f8:86:75:3d:81:fb:02:14:66:a1:fd:1d:63:22:44:
                    fb:8d:7e:1d:a4:2f:6a:73:bf:5c:b4:b8:4c:96:3f:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DA:AA:D8:D1:FB:FA:16:3E:76:41:85:88:0F:AD:F0:63:D3:F4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4023dfc-f327-33a4-bd98-9e373b2d9ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:8d:0d:09:ec:34:3f:60:e1:8d:76:38:c1:87:6d:c8:c4:
         35:03:ed:1b:0c:2e:d3:79:e4:f6:da:e6:41:36:3a:de:75:ab:
         33:be:e5:14:1d:97:90:57:a8:73:f1:79:c6:71:88:8d:4e:c3:
         fc:46:28:2f:37:86:5b:dc:50:e7:bf:be:ac:a9:a4:09:a4:a3:
         0d:23:28:ad:3e:56:4f:9e:4b:f5:83:2a:a1:39:93:a5:32:78:
         36:e3:77:4b:90:47:6f:1b:66:1e:30:1c:fc:c8:fb:99:2a:3d:
         d4:8e:e9:ef:43:01:39:38:9d:d3:75:e5:7f:7a:0a:09:83:ba:
         63:cc:2a:e2:fa:c7:ed:bb:7d:28:ef:09:ac:b5:fb:df:5f:5e:
         56:c3:4f:20:ed:df:da:4b:53:db:f3:ac:ab:98:e7:eb:59:de:
         8f:2c:82:90:b4:71:47:e2:8c:17:b7:cb:f0:d4:5a:f7:3e:2f:
         1d:5b:11:4f:81:e8:bd:fb:d1:f5:75:c1:9e:e7:84:61:67:8c:
         d6:ef:27:78:d7:27:90:e1:f8:c2:f9:fc:4d:91:06:33:7b:bf:
         64:70:f3:e3:4b:2f:19:ef:46:b3:70:a3:21:aa:32:6f:ea:49:
         49:df:84:c5:88:e7:85:f8:1f:f4:97:e3:c4:0f:5e:68:da:06:
         54:3c:86:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qmrg646g3QNZ7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZjM3ZTBiMzgtYjg5Zi00NzI2LTk4OTctNDAxNzE5N2FiMzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7OPS/c5BNDMEZ+4g0F8E73SanS8IE9YBtdl
K2scgcZU/EhOLMl9LFatkbK2ciBl32aAGMAWqOyPoEihGkQiQc0YzMQOo7Uasx25
Fne8Ksyf/lQku2utAdAjZ0Ceiu2FLcMciv2RTzr/8/nNvU2e4u2PJY5xbjERZDYk
qbVd3/55hHi9kfHWkWEbqvxlnFz7NM0WoIZxsqwUXqK7cK849PiSW0e05aoJO3oR
Ffb6ACWU3f3MSY9HqVyflaQgExV4CHiRCtcBZGphT+damQSDNdAMf1S6V1zN5SHe
VZwlEev4hnU9gfsCFGah/R1jIkT7jX4dpC9qc79ctLhMlj9eFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3aqtjR+/oWPnZBhYgPrfBj0/TgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjQwMjNkZmMtZjMyNy0z
M2E0LWJkOTgtOWUzNzNiMmQ5ZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgompMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADkjQ0J7DQ/YOGNdjjBh23IxDUD7RsMLtN55Pba5kE2Ot51qzO+5RQd
l5BXqHPxecZxiI1Ow/xGKC83hlvcUOe/vqyppAmkow0jKK0+Vk+eS/WDKqE5k6Uy
eDbjd0uQR28bZh4wHPzI+5kqPdSO6e9DATk4ndN15X96CgmDumPMKuL6x+27fSjv
Cay1+99fXlbDTyDt39pLU9vzrKuY5+tZ3o8sgpC0cUfijBe3y/DUWvc+Lx1bEU+B
6L370fV1wZ7nhGFnjNbvJ3jXJ5Dh+ML5/E2RBjN7v2Rw8+NLLxnvRrNwoyGqMm/q
SUnfhMWI54X4H/SX48QPXmjaBlQ8hmY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:12 2025 by rpki-client