Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
File:                     dc2aa532-33c3-3951-89be-12330759cf39.roa (raw, json)
Hash identifier:          s68SQXqpHwROxjY93D6fmwONLDhbWyvqRL6wQr3tChE=
Subject key identifier:   D0:6B:53:EE:2B:04:F8:D3:DB:30:69:DB:47:57:F3:24:6E:FF:C0:5C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858493243D9E2019C1634FDB0B2E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        130.137.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d9:e2:01:9c:16:34:fd:b0:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=e7682db5-c67b-4a92-bda6-c2bb6d49b7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:1c:3a:38:43:13:4d:8c:1a:75:2c:ab:3d:
                    b2:69:ef:05:e2:2d:87:5c:e6:37:92:fb:9f:b9:74:
                    f7:73:fe:db:54:b4:22:8e:e8:5f:f1:a7:c8:94:2e:
                    79:16:3b:1a:1e:64:11:cc:b1:85:1c:96:11:ba:27:
                    85:0b:c5:4e:08:e1:e1:d1:f9:1e:86:a5:79:dd:33:
                    e3:20:5b:ea:56:c4:81:96:96:2a:ae:ac:2c:8c:9d:
                    95:69:43:4c:09:46:37:44:26:6f:9c:77:80:16:16:
                    3e:3f:0d:59:54:71:5c:ae:64:02:e9:a2:b1:04:79:
                    94:6b:8c:a0:e0:b9:31:c7:25:6a:76:9a:8f:44:6c:
                    f5:4e:91:67:ce:ce:55:b6:a6:02:18:15:0f:27:08:
                    5f:02:a8:4f:f0:64:44:b0:91:1b:e7:2c:62:72:e4:
                    3b:04:27:51:a5:c4:e8:52:58:38:ef:b7:f3:05:68:
                    5f:55:22:d5:41:8f:4f:76:60:16:c2:9b:d2:ea:de:
                    17:2b:3f:dc:84:31:20:3b:01:3e:e0:55:34:1d:c8:
                    2b:63:ef:37:8b:da:19:3c:6f:d6:ea:dd:66:4a:17:
                    f4:3f:fc:70:3b:ac:d8:63:6d:f6:c9:09:a4:08:2d:
                    af:31:c8:5b:e4:e9:2a:04:92:38:a3:4b:9c:47:af:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6B:53:EE:2B:04:F8:D3:DB:30:69:DB:47:57:F3:24:6E:FF:C0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dc2aa532-33c3-3951-89be-12330759cf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:69:6c:62:9c:3f:17:bb:2e:09:6b:49:95:83:2a:e9:f2:
         64:27:98:e6:75:33:21:c0:14:ff:33:39:3c:95:a8:71:d4:88:
         a6:eb:51:08:57:fc:b2:19:b7:23:d8:c6:81:c7:34:b3:d4:d1:
         4a:68:bb:72:00:a5:f7:bd:3c:c2:b8:b5:5d:a0:a1:c9:e5:66:
         af:58:ed:3e:40:60:0c:96:15:89:10:fd:16:86:76:be:09:6f:
         b7:b8:5c:68:f4:22:cf:d8:27:9f:53:d0:af:9a:46:b9:b0:fc:
         f8:f3:30:5b:43:53:0f:56:14:7a:b4:1a:ab:30:e3:25:1a:58:
         0a:81:17:62:67:61:eb:0c:95:59:6e:39:40:dc:c8:ac:1c:bb:
         6f:d3:35:a1:0f:79:17:96:f5:8f:ec:12:f9:ef:00:ba:15:71:
         51:26:57:3c:a0:d1:e4:73:e6:cd:06:af:cf:11:6d:2e:2f:00:
         2d:cd:2a:4e:2b:89:0d:68:5f:9d:69:88:85:77:2d:6f:c4:de:
         77:56:f3:39:57:f1:19:bb:a4:d5:56:20:1b:f2:fc:aa:29:91:
         8e:40:c9:df:a1:7b:1a:0e:e8:e0:55:4c:1d:c3:90:5c:80:38:
         c1:4c:8b:0e:e0:74:bf:62:8e:ea:f2:9e:4f:0b:30:fd:ab:f8:
         10:4f:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:55 2025 by rpki-client