Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d1e19c10-7eec-3f39-b301-9fdf4d977def.roa
File:                     d1e19c10-7eec-3f39-b301-9fdf4d977def.roa (raw, json)
Hash identifier:          9lgyzKAvY2yho7XbMKPwY58Vil8GohhwHyhU/mWrmZY=
Subject key identifier:   82:C5:01:AD:E2:56:8E:F5:DC:7A:2F:89:EE:76:C5:75:08:E6:93:A5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FCAA6B03912068EE8B8F0268
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d1e19c10-7eec-3f39-b301-9fdf4d977def.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        130.137.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:6b:03:91:20:68:ee:8b:8f:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=063ad247-ffae-496b-9582-7db25a1f712c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:71:e1:ff:48:ed:aa:e3:65:d6:68:7f:cf:
                    3f:35:85:55:6c:7e:5d:20:02:92:53:cd:c3:24:3e:
                    53:62:75:45:62:93:72:d9:4b:df:fe:37:51:8e:b9:
                    64:27:f5:84:b1:d8:6b:b7:f4:29:61:e8:bc:88:ed:
                    10:05:f4:cf:03:e8:24:84:5b:07:ef:5f:54:48:03:
                    44:c4:96:cf:23:f8:7f:e1:83:0d:9a:91:f1:df:38:
                    03:c8:6a:2c:a2:dc:64:b5:8a:99:fe:63:c0:16:8d:
                    1e:70:fe:7e:37:2f:b7:e5:0b:f1:a0:6c:16:7c:ca:
                    a3:13:07:e1:9b:cb:45:b0:a4:60:d5:0b:1b:f5:fe:
                    8f:02:5d:22:be:17:6d:2f:11:f5:e3:c7:72:5c:1e:
                    2e:59:04:8b:20:50:54:3b:a1:50:99:5d:2f:04:e1:
                    01:09:14:66:10:79:60:53:ad:32:25:99:24:f0:09:
                    60:e6:ed:aa:bc:e2:ca:18:b9:1e:7e:7d:b4:db:39:
                    fa:27:57:52:7d:19:67:de:5a:20:73:fe:69:89:3e:
                    f1:1e:93:dd:d4:d2:c3:8d:4b:0a:f3:35:82:d3:ec:
                    ab:15:c2:1c:61:d3:06:24:f9:15:30:cc:63:5f:10:
                    31:c2:5d:47:e5:8d:f2:a8:bb:27:06:a1:d6:91:1c:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:01:AD:E2:56:8E:F5:DC:7A:2F:89:EE:76:C5:75:08:E6:93:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d1e19c10-7eec-3f39-b301-9fdf4d977def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:72:4f:0e:50:78:15:9a:0a:0a:56:15:4b:5d:aa:4f:a2:a3:
         39:be:3e:6e:74:69:40:ca:c3:db:bc:02:d5:87:82:21:52:a8:
         02:c9:36:7b:ad:a5:17:46:9d:05:c2:af:cc:ee:58:23:0e:58:
         0b:25:b7:92:58:04:c9:01:8e:c6:ba:60:cd:35:2e:a2:10:00:
         1c:aa:5c:49:33:a4:df:b3:5a:c1:20:d9:ec:63:61:68:9b:25:
         78:d5:9a:88:24:5b:e7:63:dd:d7:4e:53:63:ce:cc:4d:1a:f6:
         01:5b:39:62:e8:2c:14:8a:c1:f5:1e:e6:eb:e7:c4:d8:16:91:
         92:2e:78:c0:6c:49:c7:75:12:60:b2:2f:e4:e1:98:e0:df:c5:
         c3:88:cc:93:6e:da:d6:00:78:24:d3:c8:ca:48:8f:c6:74:18:
         26:be:8e:f8:09:6e:b0:fa:1b:29:01:69:64:49:1b:b5:d2:ef:
         ff:e7:57:e4:8a:db:bb:c8:02:d2:d3:37:87:d4:12:c2:df:3a:
         a8:24:d2:3f:1f:3d:85:ed:fa:07:b4:34:96:a3:1c:3c:af:b6:
         63:90:04:df:6b:9d:6b:fb:e5:2e:cd:e4:98:6b:cd:28:f0:87:
         c5:64:e6:f0:56:15:88:f3:a7:c2:13:c8:c7:74:e2:42:62:d7:
         76:f8:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:41 2025 by rpki-client