Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e9b9c71e-872b-329f-aff3-36b86fbfb1cf.roa
File:                     e9b9c71e-872b-329f-aff3-36b86fbfb1cf.roa (raw, json)
Hash identifier:          JNwzsYxcvJV9rC5WjeqAgI8htNTjr54pLctgQw7ufdg=
Subject key identifier:   69:B0:64:83:06:26:8C:A9:0F:44:3B:B5:F4:DC:37:D9:3D:15:AD:9E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904E446DE6EB86E5E85A300
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e9b9c71e-872b-329f-aff3-36b86fbfb1cf.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        130.137.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e4:46:de:6e:b8:6e:5e:85:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=e26c8464-55fa-41d3-a840-8508e0a40aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:78:fd:9f:d8:e3:f3:fe:3d:93:95:c2:fc:49:
                    d7:a7:de:d3:3b:6f:f4:2d:a9:38:43:50:d5:30:9b:
                    a2:61:77:b1:d2:d9:1d:53:ca:0b:f6:63:a8:93:fb:
                    13:cc:7c:a6:b5:20:6a:ea:6b:47:c7:eb:c4:7d:de:
                    44:ca:0c:fd:83:33:9b:79:97:d4:c8:64:7f:98:8d:
                    43:ba:43:8e:e7:e1:5b:cd:6b:80:e9:86:79:95:72:
                    57:5b:aa:87:86:4d:f0:93:91:2e:1d:30:79:af:6a:
                    7a:0b:04:08:44:6b:86:b5:e6:2f:16:0f:b5:6d:73:
                    e4:22:1c:db:9d:bd:56:55:fc:62:35:e7:4d:91:87:
                    41:20:ed:e8:bf:f4:81:c7:c2:15:b1:88:25:d1:42:
                    e3:6e:a3:a6:6d:dc:e6:7d:f0:45:90:34:c8:e7:e9:
                    e4:77:0d:73:a9:24:63:da:2b:ec:e9:26:f3:a0:24:
                    f3:a7:41:ae:32:a5:30:8f:b5:2e:d8:94:d7:35:74:
                    0a:8b:19:22:11:90:bc:dc:38:37:fa:41:df:ca:91:
                    fd:3c:99:56:79:be:99:83:5f:fd:13:f7:04:73:f5:
                    3b:41:4f:5e:30:9e:f8:19:d2:37:44:c4:ca:62:cb:
                    9a:e1:10:cc:d4:69:69:f0:74:51:82:5a:70:fa:65:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B0:64:83:06:26:8C:A9:0F:44:3B:B5:F4:DC:37:D9:3D:15:AD:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e9b9c71e-872b-329f-aff3-36b86fbfb1cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:04:8b:91:08:ae:c9:80:1d:99:be:ee:a7:46:10:67:67:a3:
         38:0a:28:f2:03:f4:f4:65:b0:37:73:d7:6d:a2:a9:cc:78:59:
         73:31:ca:fa:d1:67:53:2d:62:6b:11:13:32:3f:c6:f4:25:5b:
         f9:d1:35:de:7f:82:b5:0f:e6:9a:87:a1:99:d7:e1:63:93:5c:
         24:f0:f8:3e:7b:64:e5:93:7d:42:56:62:e3:4d:b4:f2:06:3f:
         ab:3c:bc:37:1f:62:3c:79:28:c2:de:34:b9:cc:e7:94:97:40:
         79:3e:b5:5d:cd:d7:4e:09:23:48:72:4c:4e:2d:94:77:38:97:
         16:4a:ac:b8:65:86:95:27:4e:4d:c8:37:8e:7b:30:3b:bd:fc:
         99:13:ee:f6:59:64:c9:7a:b8:4b:a2:44:ce:12:26:1b:74:09:
         ae:d3:1a:92:c0:ab:4a:c6:c0:8c:2b:19:9e:24:ed:ae:32:49:
         ef:1d:e1:aa:83:07:36:72:2b:29:60:97:b3:2d:db:99:ec:6a:
         25:28:d4:73:a8:3f:c8:5e:b5:ac:4b:95:73:d7:52:eb:02:0b:
         12:20:8e:59:b5:3d:98:5a:78:c6:98:e5:ac:0d:df:8d:8c:66:
         52:61:0b:a6:74:81:a3:8f:0a:13:24:2b:56:6c:cd:a6:78:df:
         9b:99:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:14:11 2025 by rpki-client