Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/edd9dd46-4928-3443-a460-8cf89df14550.roa
File:                     edd9dd46-4928-3443-a460-8cf89df14550.roa (raw, json)
Hash identifier:          xVjZyeJdsYL61C075ZhTENC/q9P4ArTvXJ3qIcZqS4w=
Subject key identifier:   CC:2B:49:FA:78:50:91:7A:AD:12:02:CC:26:52:B0:DB:01:D2:FB:86
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849A61F3B4D29BEF77DB3671380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/edd9dd46-4928-3443-a460-8cf89df14550.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        130.137.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3b:4d:29:be:f7:7d:b3:67:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=e6e09b8e-18b0-4ab8-a2c9-7f448d5f76a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:13:b9:80:fa:a2:bb:e2:03:ab:c8:32:f3:
                    4a:bc:7b:1b:8a:ee:dc:5c:99:7c:cb:60:ec:d1:f2:
                    af:20:7b:4d:0a:0c:4c:89:6f:65:41:83:61:e0:41:
                    17:f6:23:26:5b:bc:b1:ae:2a:6c:58:1b:37:65:34:
                    20:7d:8e:84:a8:e6:65:ad:41:c0:3a:8b:56:68:b0:
                    88:a3:d6:06:e8:26:c2:ff:d6:97:f8:bc:95:a9:ea:
                    d7:b9:10:0a:4d:4e:4f:2b:21:89:81:52:55:4e:19:
                    1f:f1:8e:32:9d:bf:0d:0f:b1:16:b2:d5:da:14:ec:
                    46:76:05:90:68:a3:ec:a2:c8:1a:35:d5:7e:ea:ab:
                    0a:88:0e:0e:f7:89:a3:a3:f5:8d:57:e6:2e:ec:10:
                    18:ba:c4:4d:0d:c5:af:6e:23:5c:72:2e:a0:28:9c:
                    22:3d:ec:27:1d:a0:be:ca:19:2b:f7:c8:54:48:9b:
                    1b:e9:0b:c3:cd:3f:c3:2b:09:3e:96:c6:46:f4:ea:
                    6a:2f:31:ac:40:ea:3f:f7:91:e6:50:a5:6b:bb:ce:
                    93:0f:9b:39:c9:c3:eb:f8:4a:97:11:83:d8:a8:f2:
                    c2:ba:90:8a:60:b6:e8:09:f4:e6:04:7a:40:f4:4a:
                    3c:5c:80:97:cf:ec:cf:9d:44:c5:9b:d8:c6:7c:fe:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2B:49:FA:78:50:91:7A:AD:12:02:CC:26:52:B0:DB:01:D2:FB:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/edd9dd46-4928-3443-a460-8cf89df14550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:df:47:8d:3f:f8:a6:32:aa:7d:0f:fa:bf:7b:dc:e9:70:e9:
         7a:1e:b2:3a:2e:76:5f:01:c5:14:2c:06:24:7e:3e:7b:57:ef:
         ac:70:12:3a:c9:f9:3a:18:53:71:f7:83:c1:66:f9:ba:22:ad:
         b3:70:80:87:2f:89:f3:b6:5c:8a:51:8f:01:3a:e6:2e:2f:b4:
         8f:4d:97:5f:47:c9:4c:f1:6d:bf:f4:90:71:77:e0:22:8a:5e:
         43:0b:59:12:ff:9b:d0:63:aa:35:82:0f:99:7a:62:82:5e:69:
         88:92:bc:21:53:7c:66:bd:2b:2f:29:0c:9c:26:6d:76:6b:c9:
         4c:19:cc:11:b1:43:dd:0e:eb:59:c3:fc:41:2f:04:69:e2:66:
         de:8f:b3:5f:0a:b0:52:7d:8f:db:8a:ce:55:f6:48:84:d7:35:
         37:5b:59:31:e5:bc:dc:b7:97:30:21:b3:26:ef:8f:d6:30:a3:
         3a:7e:82:b0:37:79:20:45:ee:32:9f:b0:e1:0d:48:7e:b9:18:
         22:c8:69:6b:73:fe:51:f2:09:6b:82:f2:b9:24:d1:2d:05:dd:
         1c:18:4a:4d:6b:a9:f1:e6:67:98:04:71:22:2b:26:b9:4d:da:
         16:39:d2:26:27:0b:5e:4b:15:ac:35:30:ac:13:eb:b6:22:61:
         03:bc:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:01 2025 by rpki-client