Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e2fa2500-b9d1-3bee-b880-3b07b2fb560f.roa
File:                     e2fa2500-b9d1-3bee-b880-3b07b2fb560f.roa (raw, json)
Hash identifier:          oUllrO522LTAWJsVK4P52iRHQdE3/EkkgGXcrvTdBSQ=
Subject key identifier:   19:C8:31:E0:A6:65:E9:B4:6E:79:74:67:A2:7E:2E:49:7F:06:9F:1F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A10354AD015B6FC30EBD862E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e2fa2500-b9d1-3bee-b880-3b07b2fb560f.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     8987
IP address blocks:        130.137.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4a:d0:15:b6:fc:30:eb:d8:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=fe97dcf6-1b52-4f1b-a2de-b2218f70572e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:87:a3:9e:97:c8:2e:81:0e:69:1e:4b:6c:
                    93:84:27:a3:63:90:85:84:d0:66:f3:38:b3:58:65:
                    ef:3f:e0:70:f8:24:da:cc:a2:99:e5:e1:33:95:60:
                    2a:a0:2b:4d:46:ee:af:e3:0a:22:da:90:7b:0d:64:
                    ff:1b:9c:bf:27:32:95:17:b3:3f:38:e1:27:07:f8:
                    4a:0b:bb:87:09:d9:f2:91:df:3f:a5:2b:43:c2:49:
                    8b:ea:cf:1f:8f:5f:5e:cc:64:1c:72:5d:07:f7:82:
                    a3:7c:fd:62:ae:57:cf:98:8a:b3:8f:68:4b:c3:a7:
                    51:7c:79:10:2e:f4:ec:f1:61:4d:57:19:12:ab:56:
                    7b:3e:bf:9e:09:fa:14:e5:82:2a:15:0a:7b:bb:21:
                    62:f1:32:5d:6f:63:bf:5e:ae:a1:3d:f5:9e:8a:45:
                    02:ef:8f:cd:dc:e2:27:01:13:22:60:ab:d8:81:58:
                    60:a6:26:4a:c1:e5:63:8a:0e:ae:b5:8a:50:6f:0f:
                    92:da:b1:be:07:bf:d5:96:70:ad:86:90:f6:fc:57:
                    95:4a:a7:06:cb:b5:6f:47:f1:ae:f3:bb:17:14:a0:
                    07:da:9b:3c:38:7f:39:49:4c:56:77:61:45:63:d8:
                    cb:4b:9b:32:1e:cc:1e:64:f8:c9:ca:18:c6:ee:66:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C8:31:E0:A6:65:E9:B4:6E:79:74:67:A2:7E:2E:49:7F:06:9F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e2fa2500-b9d1-3bee-b880-3b07b2fb560f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:88:25:00:19:63:d5:a8:8c:83:5f:1c:e8:81:e4:7b:85:ef:
         6c:3e:01:93:6f:54:32:f3:a3:b9:49:5a:9b:89:e9:d4:e3:71:
         df:9e:02:58:f7:68:06:02:d7:d0:34:0b:50:50:e7:d2:6d:0a:
         be:61:63:66:b4:3b:16:19:77:80:6d:cc:af:21:c7:d1:75:86:
         97:2d:25:d8:3d:bc:77:a7:48:b2:3d:ae:d5:dc:28:05:54:2e:
         e9:e3:6d:a0:09:cb:a6:91:8b:97:63:25:f6:08:c0:77:5a:30:
         5d:eb:ea:4f:e5:f2:ec:72:06:f6:e1:1c:a0:52:c3:4d:c4:eb:
         85:4e:b3:58:be:2d:5b:ce:3a:13:13:a5:02:2a:5f:83:52:1a:
         42:5c:d4:4f:29:de:c2:a7:a8:b2:5a:b2:97:14:01:71:71:79:
         88:12:57:6c:5a:76:a2:ff:fa:3a:4b:15:4f:dc:a8:02:5d:df:
         df:72:57:fa:45:e0:3f:66:88:d1:72:f0:f2:b6:d1:bf:db:5b:
         e2:f1:63:9a:09:a4:7d:01:74:24:15:cc:4d:a3:18:74:91:bb:
         49:ff:a0:28:c7:82:06:90:51:e6:a1:e7:6a:d1:3f:73:4a:38:
         6e:0a:fa:01:2c:e8:44:a2:e9:01:8a:91:fb:d6:56:a9:a8:3e:
         70:af:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:19 2025 by rpki-client