Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/de913222-6b94-3288-992e-b052ae93b94e.roa
File:                     de913222-6b94-3288-992e-b052ae93b94e.roa (raw, json)
Hash identifier:          wP+itjy24Btqsy1oX3kKUJKMO6jDPFc0BPhqYr8L0eE=
Subject key identifier:   3C:48:16:DB:DB:35:BF:E2:90:B7:9E:6A:61:59:FF:7B:C0:85:45:4D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849FCAA6D6AE768374BB046F880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/de913222-6b94-3288-992e-b052ae93b94e.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        130.137.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:6d:6a:e7:68:37:4b:b0:46:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=71674f53-b1f9-472b-9dce-7122ecdbf211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:b2:03:eb:37:ef:b1:fd:1f:3a:07:ff:c7:
                    dc:f0:7a:b6:bf:7f:f2:fc:fd:0d:dc:e3:99:be:82:
                    c2:90:ec:73:d8:cc:9b:a1:4a:df:83:a1:28:d8:51:
                    4d:69:4d:13:0b:6c:dc:91:09:89:a5:85:bf:9d:dd:
                    1b:ac:4f:17:68:a1:84:b0:c0:96:94:6a:b7:fa:df:
                    01:82:90:d4:60:51:d7:69:ea:71:59:7b:a0:ac:ab:
                    2d:1f:db:41:16:fc:84:b2:ed:52:17:45:b7:f9:4c:
                    13:2b:f0:d7:fd:7b:d5:f0:e8:27:c5:eb:d8:e0:d6:
                    32:a1:16:04:e0:42:bd:e3:8e:74:44:31:b0:8c:dd:
                    4a:83:00:8e:a2:85:a5:0b:cb:ea:1e:bb:18:af:07:
                    63:3f:47:24:78:5e:62:4d:43:7f:09:d8:88:ac:e0:
                    5a:e2:a4:e5:06:1d:9a:60:37:fc:44:9d:f7:1a:6b:
                    db:0f:3b:41:94:f9:6f:7e:17:7a:11:60:53:12:d9:
                    3d:70:90:8c:90:9d:48:94:d1:aa:84:2b:02:7d:6e:
                    52:6f:f2:aa:70:c6:ee:93:11:9c:e4:a2:b0:37:92:
                    60:3c:32:0e:f0:8a:2f:fd:8a:26:e7:24:83:f4:a0:
                    76:09:9d:a1:60:ce:18:b6:90:fa:1f:7d:90:cd:cb:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:16:DB:DB:35:BF:E2:90:B7:9E:6A:61:59:FF:7B:C0:85:45:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/de913222-6b94-3288-992e-b052ae93b94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:f9:52:16:38:09:2f:f5:f1:2a:bf:eb:ff:ea:87:9f:e8:
         cf:32:80:5e:f8:49:ca:8e:48:84:59:90:cf:2f:2c:20:4a:f2:
         df:dc:0f:b1:56:86:c4:64:32:7c:45:8e:da:41:9f:fd:cf:37:
         99:20:a3:f8:bd:d9:1d:d0:a1:e1:6d:00:ec:1b:33:70:2e:b4:
         94:d7:3c:8d:bc:f3:c3:44:63:a9:5b:b8:82:eb:c4:ef:48:5f:
         1f:44:20:3a:76:54:6f:d3:7b:58:7b:b1:cd:d3:d6:95:d1:76:
         02:47:85:4c:3c:3f:41:51:60:94:8a:70:33:f9:84:df:23:ce:
         16:b1:8b:a5:06:ca:83:df:17:a7:8e:b2:85:ce:71:3e:13:43:
         66:24:d8:e1:0d:d5:b1:ff:44:0d:9f:08:f3:ec:97:a3:85:e1:
         23:b4:f8:c5:64:d5:3a:b4:49:80:dc:d9:11:ff:b0:ea:9b:2c:
         d2:d1:69:71:b5:a0:7f:91:6b:dd:7c:e2:da:d1:79:5a:8b:fb:
         86:1d:0a:49:bd:08:dd:b1:14:57:c4:67:1b:57:3f:32:2c:c5:
         72:da:e1:6e:73:d1:f4:e0:13:54:ab:84:09:28:24:52:0e:f3:
         ff:6c:4d:06:d3:d6:0e:19:82:22:d2:9e:2d:2c:c8:0d:94:2f:
         10:f6:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:20:24 2025 by rpki-client