Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e6c5ac11-e8e1-3de1-8030-3d3807709acf.roa
File:                     e6c5ac11-e8e1-3de1-8030-3d3807709acf.roa (raw, json)
Hash identifier:          oBf50iueCZDew9czLxcftoxJSBeKq2V2N9iFQKJ7EjM=
Subject key identifier:   44:B7:52:22:95:B9:47:58:D1:B0:D7:92:1D:B7:8B:9A:CD:96:5F:76
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904E295272F4148388ACD40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e6c5ac11-e8e1-3de1-8030-3d3807709acf.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e2:95:27:2f:41:48:38:8a:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=6f8f3729-de4f-4e52-8ec6-fe177ceb163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:e9:18:87:6f:a9:20:6b:05:25:cf:06:49:
                    75:b8:ac:3e:50:6d:2a:48:25:4f:46:57:8b:c5:f9:
                    04:22:5d:ce:e6:83:48:bd:6c:80:c0:5b:92:9f:d1:
                    3b:8f:a9:74:62:fc:8e:53:fa:02:19:16:67:b7:e4:
                    28:f1:0c:9d:c5:d6:1d:04:08:84:0a:53:18:51:98:
                    48:9a:46:01:83:12:3c:35:f3:f1:b9:d5:6f:5d:a8:
                    96:b0:75:23:5b:70:c3:82:ff:95:70:52:14:f2:64:
                    74:43:3b:f7:70:ef:70:19:9e:6f:b4:54:15:89:03:
                    b1:06:72:d6:84:c7:e2:2c:de:1c:dc:b9:0f:1b:cf:
                    66:1b:8b:b9:8f:7b:97:d0:48:72:9c:c7:ed:ea:ae:
                    09:27:32:36:74:17:af:79:05:2d:76:96:1f:5d:f4:
                    5b:04:1c:87:83:45:f9:7e:47:43:05:a7:3a:56:ca:
                    b0:33:eb:cf:7e:f9:ec:ea:09:79:fa:00:c1:d0:94:
                    e2:d9:53:48:17:71:94:35:34:8d:38:b8:04:ae:df:
                    60:c7:18:cf:6e:5b:39:4e:3c:8e:2e:ba:ea:2b:07:
                    13:ec:f0:ad:d7:b0:f8:56:7b:11:62:95:dd:61:fa:
                    ee:e5:eb:87:e2:26:22:c7:dd:41:51:28:85:52:c3:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B7:52:22:95:B9:47:58:D1:B0:D7:92:1D:B7:8B:9A:CD:96:5F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e6c5ac11-e8e1-3de1-8030-3d3807709acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:52:a5:bd:e9:f3:4d:da:c2:95:8f:f3:08:4f:95:ad:4a:
         32:dc:43:c4:73:d7:37:1d:3b:97:2a:64:8c:94:42:a4:85:dc:
         c6:16:da:b0:69:c0:21:db:be:44:d1:eb:5b:b2:1d:71:4d:b8:
         6f:f0:23:b7:d1:5e:44:93:47:94:73:dc:5a:c4:b5:10:29:8e:
         eb:17:3b:5d:41:fe:dd:9d:9a:28:2c:47:90:f3:5d:e2:69:04:
         47:15:0f:6d:d7:2e:e8:e1:98:24:e9:0f:7c:67:54:9e:f7:bc:
         89:8d:7f:9b:d6:40:29:43:49:fd:3a:26:51:ec:eb:eb:b2:49:
         79:d9:16:bc:84:b5:8e:17:37:2b:c2:05:cc:7d:12:6e:0b:90:
         72:9d:4c:33:a8:ae:c1:dc:c5:61:b7:c6:35:85:67:f1:8f:a9:
         20:ea:bf:2c:30:b1:c0:8d:e5:59:c2:62:9c:ee:75:8d:8a:fb:
         68:34:bf:44:2a:07:39:b4:b0:4a:6f:48:17:88:30:53:f9:fb:
         22:72:f1:8f:4a:7b:35:f4:e3:8b:e1:6e:b0:41:e5:ba:c2:6d:
         df:fe:57:c5:49:7e:58:2d:3b:ab:ca:ce:f1:b8:21:00:12:cc:
         ab:b8:54:17:cb:df:d5:6b:47:16:e3:02:f1:de:e2:89:62:df:
         47:a4:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:21 2025 by rpki-client