Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cffb2054-7cc3-3330-a07a-822ccbf848d7.roa
File:                     cffb2054-7cc3-3330-a07a-822ccbf848d7.roa (raw, json)
Hash identifier:          re+ShdQMvzihS1GAFuR6GVyHohBcu5ceR0LRpiCg9Jw=
Subject key identifier:   3B:F1:45:56:E2:1A:AF:22:3A:EA:78:08:C8:E7:0E:D0:DD:5C:02:F7
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849E7BA725AAE689203BC2874C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cffb2054-7cc3-3330-a07a-822ccbf848d7.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        130.137.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:72:5a:ae:68:92:03:bc:28:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=989ac9e5-36de-41a1-baa8-88ec394420c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:77:6f:71:ec:d1:b2:31:63:b8:ea:32:30:
                    e0:77:27:08:e2:86:58:63:ef:c3:5b:15:db:03:88:
                    20:e1:be:b2:64:f8:62:ba:25:23:56:55:55:be:84:
                    60:a4:27:6d:15:73:64:e4:46:57:2d:11:53:25:7f:
                    3e:c2:2d:d0:ce:b1:f2:8d:6e:ad:cd:aa:31:ee:e7:
                    cb:76:b4:84:55:d2:f8:6d:67:67:92:b3:37:b4:3e:
                    7b:e8:bb:33:de:94:f9:4b:ad:92:87:a9:f2:96:ea:
                    54:12:b8:c8:7e:a1:ef:6f:6b:e1:14:04:85:86:67:
                    2b:db:2a:b7:42:73:9d:7a:0c:ad:e4:d0:d7:0a:b5:
                    ec:70:e3:26:df:71:12:52:0d:f8:17:2c:0b:ce:14:
                    57:8d:95:d3:0f:de:2d:22:75:b8:03:aa:ac:4d:92:
                    e0:86:92:74:df:88:1c:52:a5:fc:20:59:5d:ec:8f:
                    66:ae:00:65:81:fa:45:ae:54:a5:1b:fc:5a:97:4f:
                    aa:48:13:81:8a:4c:e8:eb:0c:13:dd:50:63:a7:65:
                    2f:2b:e3:a6:a4:63:6f:d6:30:fb:c3:7c:7d:bc:2e:
                    81:90:4e:20:bd:64:1a:22:72:8b:f5:be:6d:d5:33:
                    e8:9e:74:4d:e5:ca:19:9d:15:b8:d9:14:8b:1e:47:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:45:56:E2:1A:AF:22:3A:EA:78:08:C8:E7:0E:D0:DD:5C:02:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cffb2054-7cc3-3330-a07a-822ccbf848d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:76:52:a8:a0:23:f3:c7:4a:54:3c:66:74:7e:d2:a2:02:
         8d:ef:ce:21:28:d4:2b:a2:a4:62:c7:db:d0:11:77:f5:d1:cf:
         95:a4:89:63:99:d9:4a:f4:db:6f:60:8f:f0:2e:45:8b:3b:86:
         4d:f6:f1:a5:31:45:6d:49:5d:9e:f8:19:2f:75:98:95:d2:27:
         89:d7:94:ce:de:f8:70:8b:86:b0:22:25:9a:9c:1d:79:e2:c7:
         7a:b8:b6:52:e7:1f:d5:f4:dd:eb:8a:19:9d:0d:88:4c:da:1f:
         66:23:81:56:82:66:e9:ac:3e:90:d2:d8:aa:25:e4:9c:5e:84:
         ac:f7:31:2b:a5:53:0a:ea:2f:8f:38:6a:f4:fa:e5:b7:d2:0c:
         d9:f9:51:38:bd:c3:92:35:d6:3e:6d:6b:1b:4d:03:8b:59:0f:
         f2:96:71:f7:7d:5c:3d:53:01:25:5f:0f:c1:33:da:e9:f8:2f:
         35:e4:ba:0a:99:5f:e1:12:6a:92:54:8d:92:0e:9a:5a:15:67:
         0d:35:81:40:62:03:00:24:bb:e1:1a:30:d1:73:0b:99:05:ac:
         bf:9d:b9:ee:c8:ce:81:f1:0f:0f:88:91:ff:96:57:bf:7b:20:
         d4:f0:f0:8b:d6:db:8b:93:e8:a4:08:52:22:21:19:6e:6c:c6:
         d6:b4:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:15 2025 by rpki-client