Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa
File:                     b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa (raw, json)
Hash identifier:          XM9zFlLzYLO1LnZ5JtJ2iN+bVUXu/Z/dM1UkeoGAR9k=
Subject key identifier:   77:2F:21:7C:2F:B8:A2:54:6F:EA:B0:E9:47:AC:7F:57:C2:1E:5C:28
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F9DFC43FCCFE775D61B19000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        130.137.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c4:3f:cc:fe:77:5d:61:b1:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=901f901a-3a5c-40e5-9bb6-a9d70737b375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:af:24:4c:e5:0e:a3:56:d4:ec:e3:0b:ce:
                    6a:11:b1:91:da:cb:d4:91:46:95:bd:09:35:90:f6:
                    2c:42:0b:83:57:b4:73:c2:c7:c4:66:2c:a6:04:56:
                    71:eb:13:92:f9:23:78:af:e6:18:0b:5c:c9:e4:76:
                    aa:b8:68:76:b3:0e:aa:99:e2:45:7e:4b:37:f8:d8:
                    01:8d:92:03:63:61:32:b8:13:69:df:06:75:3a:d4:
                    ff:bd:19:7a:17:cb:39:a0:b3:b2:44:fa:a3:ad:95:
                    5b:de:24:b5:56:5e:69:ec:c1:a9:29:ae:a1:c2:e1:
                    b0:fc:b7:18:ea:e4:12:bb:d2:cf:86:f3:f7:60:67:
                    59:e7:b2:2b:ce:c9:18:78:05:c0:82:e3:56:0d:c9:
                    c2:53:60:a3:54:02:bc:e4:2f:07:b8:e7:95:42:38:
                    c3:90:ae:08:c5:a9:c0:a8:58:35:7d:98:a1:48:d9:
                    d1:a9:3e:8c:f4:59:dc:a8:dd:ec:fb:82:14:95:68:
                    c7:a7:9f:49:78:ee:41:d0:40:e1:43:75:c4:fe:4f:
                    e0:12:f3:06:ee:b7:5f:c7:cc:52:5a:75:72:b0:84:
                    a1:10:3b:f3:47:65:a0:7a:82:16:b1:b2:64:ca:88:
                    74:a2:e9:ad:b2:fa:9c:9c:59:4f:af:47:65:c9:41:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2F:21:7C:2F:B8:A2:54:6F:EA:B0:E9:47:AC:7F:57:C2:1E:5C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:60:8e:cb:37:6c:f3:db:ae:0b:d5:b9:d0:27:c9:1d:6b:
         d1:27:d0:f3:e0:b6:a7:b7:54:e8:b0:c1:5d:c4:20:83:99:c6:
         fd:3f:f7:48:f7:ab:54:ef:a4:05:2d:3e:c9:70:f1:93:4a:58:
         c6:cc:9b:07:b9:12:9e:bb:74:96:ac:b3:ca:96:5e:da:c7:f9:
         96:80:7e:50:79:2a:c6:15:87:ff:2e:96:bd:12:db:4f:b0:7b:
         8b:43:d9:ba:99:4c:e5:d8:3a:2b:b8:fe:05:25:36:9a:ff:86:
         65:1c:6f:7b:70:cc:04:08:4f:7a:c5:2c:f4:7e:34:9c:a4:df:
         3a:ce:f2:65:07:72:ca:a0:68:05:3e:a7:5c:8a:39:27:9e:ab:
         c2:87:23:5e:7b:a3:e1:ba:af:45:ba:3b:0b:6b:36:47:07:4f:
         85:e0:e7:6f:e8:e2:81:94:ac:3b:41:80:7a:88:90:00:29:0c:
         34:ab:15:49:bd:4c:0a:d5:3f:de:a7:13:8c:64:42:57:58:64:
         65:92:8d:37:11:32:ea:65:61:79:b7:44:d5:da:c4:1d:3f:9b:
         5e:59:72:a2:11:3c:cf:d4:cb:a5:de:da:6f:8a:ab:fc:80:95:
         10:85:29:9f:f3:ec:ed:eb:88:90:56:a2:57:4c:63:b3:98:b4:
         d1:3a:e2:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538Q/zP53XWGxkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
OTAxZjkwMWEtM2E1Yy00MGU1LTliYjYtYTlkNzA3MzdiMzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUWvJEzlDqNW1OzjC85qEbGR2svUkUaVvQk1
kPYsQguDV7RzwsfEZiymBFZx6xOS+SN4r+YYC1zJ5HaquGh2sw6qmeJFfks3+NgB
jZIDY2EyuBNp3wZ1OtT/vRl6F8s5oLOyRPqjrZVb3iS1Vl5p7MGpKa6hwuGw/LcY
6uQSu9LPhvP3YGdZ57IrzskYeAXAguNWDcnCU2CjVAK85C8HuOeVQjjDkK4IxanA
qFg1fZihSNnRqT6M9FncqN3s+4IUlWjHp59JeO5B0EDhQ3XE/k/gEvMG7rdfx8xS
WnVysIShEDvzR2WgeoIWsbJkyoh0oumtsvqcnFlPr0dlyUHgoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcvIXwvuKJUb+qw6Uesf1fCHlwoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjRiZjkwNDEtM2YyMi0z
NWE3LWFhYjAtODFhNGE0NWU2OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4kYI7LN2zz264L1bnQJ8kda9En0PPgtqe3VOiwwV3EIIOZxv0/90j3
q1TvpAUtPslw8ZNKWMbMmwe5Ep67dJass8qWXtrH+ZaAflB5KsYVh/8ulr0S20+w
e4tD2bqZTOXYOiu4/gUlNpr/hmUcb3twzAQIT3rFLPR+NJyk3zrO8mUHcsqgaAU+
p1yKOSeeq8KHI157o+G6r0W6OwtrNkcHT4Xg52/o4oGUrDtBgHqIkAApDDSrFUm9
TArVP96nE4xkQldYZGWSjTcRMuplYXm3RNXaxB0/m15ZcqIRPM/Uy6Xe2m+Kq/yA
lRCFKZ/z7O3riJBWoldMY7OYtNE64r0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:38:02 2025 by rpki-client