Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa
File:                     dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa (raw, json)
Hash identifier:          FWT5UpPiF3dqGnLZJJuu+uIaKZTvx3KXxdAkBUAukFc=
Subject key identifier:   39:D6:41:CA:0F:42:60:C6:49:A9:3A:0C:90:88:F4:B4:B2:AC:D2:8C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FCAA71D52E079728C6213D00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        130.137.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:71:d5:2e:07:97:28:c6:21:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=d538f6c6-159b-4c99-a314-b205fb11bf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:fa:c9:69:f8:1e:86:d4:73:06:aa:32:70:
                    61:87:d4:e2:e0:ce:c5:e1:56:32:af:5d:75:35:2c:
                    ac:15:29:6b:df:62:ed:9c:84:2d:05:2f:65:ff:de:
                    46:1e:80:a6:16:48:35:0e:30:ae:51:4e:f4:ba:3d:
                    95:84:ef:25:5a:f6:34:b6:13:a1:38:03:5e:3d:8a:
                    93:4f:b8:60:1f:d0:7d:25:db:4d:5e:c0:f5:6b:84:
                    c4:d4:e3:e1:be:fb:e8:78:b8:05:40:8b:2b:d3:5a:
                    07:72:7e:8f:b0:41:ce:5d:d0:4b:1a:90:33:fc:f1:
                    ed:2b:92:7e:88:16:20:57:2e:7f:39:96:73:b0:fc:
                    3b:6e:2a:9c:7f:97:72:7c:00:cb:f1:ec:54:bc:eb:
                    0e:6f:af:7d:d0:a5:8b:18:dd:ce:89:6d:be:da:92:
                    4a:bd:c3:20:35:57:f7:4a:ef:52:09:86:ac:46:31:
                    ce:22:7d:73:66:9a:d7:7e:dd:1d:cb:74:f9:02:5c:
                    bd:83:c5:69:c5:13:86:bb:c7:18:f6:cb:5e:1f:bc:
                    98:10:36:21:44:b1:fd:c7:7a:00:2e:98:b8:ec:78:
                    bc:17:2b:24:a5:c1:be:23:b3:0e:49:c6:43:79:56:
                    ba:c8:44:c5:49:7b:12:4f:e2:a4:6c:be:e5:0b:94:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:41:CA:0F:42:60:C6:49:A9:3A:0C:90:88:F4:B4:B2:AC:D2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:a5:9e:75:2e:7f:33:f5:91:89:e2:42:c2:63:89:8c:c6:
         8a:e8:ef:d3:e3:15:fd:40:cb:98:cc:39:dc:b1:e2:7e:9f:c8:
         22:1e:b2:84:76:39:7f:0c:88:ee:f6:c3:af:b6:a3:e8:8f:68:
         75:85:50:98:6f:03:5f:4b:e9:c7:0a:f0:27:91:6d:e3:e6:af:
         4b:cc:f6:4b:2c:48:f2:bf:25:d4:f2:f8:2c:b9:7c:2a:ef:b1:
         ab:64:a4:d8:54:2c:f5:87:83:df:1d:f7:3d:65:78:28:2c:c7:
         13:37:a5:8c:e3:18:f4:c0:df:b7:95:ec:d3:fb:48:40:bc:cc:
         33:89:fe:f0:9d:3b:16:5c:0d:65:6a:63:b7:70:3f:f3:9d:86:
         40:4d:44:e2:00:8c:5f:31:c0:fe:16:7d:97:94:7f:2b:e0:e9:
         9e:e0:8c:62:9e:2d:b8:c8:b6:74:ec:3c:6f:62:a6:7a:dd:07:
         5a:2d:c1:b6:92:b0:55:d6:a7:a1:41:23:4c:2f:cb:ba:aa:a9:
         46:7e:6d:81:7f:2b:11:2e:78:7b:b0:d6:0b:ab:9d:49:c7:3f:
         3a:92:7f:5a:a0:13:f1:83:bf:de:c7:35:63:f4:da:17:58:97:
         00:b5:30:b3:dc:5f:12:74:cb:f6:85:e1:ac:ec:ea:82:8e:24:
         3d:57:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:50 2025 by rpki-client