Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa
File:                     efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa (raw, json)
Hash identifier:          CmRu4Ozk8ToM5R7D05R/mNJkwnFSNnPZku30hOYKYec=
Subject key identifier:   0F:27:AF:84:D7:01:AD:AD:9A:9C:A9:E6:19:82:3E:53:EC:27:79:8D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849F2E529229019BBA663989680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        130.137.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:29:22:90:19:bb:a6:63:98:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=27cc66b7-5faa-41f2-a385-c24542809e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:34:24:da:25:4c:0c:3f:2f:86:fd:81:e6:
                    a0:a9:23:3c:a9:47:f8:62:82:41:16:41:a4:02:e6:
                    44:07:26:06:98:a2:f9:70:81:30:84:5f:f6:52:24:
                    72:a0:78:51:45:75:f7:6c:6d:36:f0:6e:a3:d4:d1:
                    bc:83:ef:c9:d1:e2:88:a5:6f:ef:51:ea:26:eb:2f:
                    e3:73:19:fb:e4:2a:c2:89:99:8d:c3:b5:c0:83:9b:
                    64:b5:8c:bf:2e:aa:f4:75:8a:a6:ec:b6:18:24:b4:
                    ff:6d:ea:6f:90:ee:85:1a:7a:aa:cb:20:d4:d7:17:
                    43:b9:12:14:29:f1:b0:2b:85:15:14:11:e7:56:31:
                    77:4a:da:69:9c:6a:65:69:6c:d1:8c:16:ca:77:e7:
                    74:6c:fb:c6:af:35:9d:a2:04:30:6a:2f:3f:20:77:
                    dc:0f:72:8d:cb:66:1e:18:13:1e:29:e1:32:b0:59:
                    e2:cd:8f:eb:34:3c:1f:bb:5d:56:e6:97:aa:e1:ce:
                    cf:af:d9:db:85:f6:88:cf:c6:ea:c3:4f:ba:fd:ee:
                    6b:79:b5:fe:a4:7b:29:17:b2:ba:0f:0d:85:e4:5f:
                    52:98:1a:75:df:9f:ba:32:65:e7:a5:bc:7a:00:8b:
                    57:98:59:bb:40:7d:19:2d:ab:21:e0:cf:30:75:4e:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:27:AF:84:D7:01:AD:AD:9A:9C:A9:E6:19:82:3E:53:EC:27:79:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:35:ad:d7:da:88:82:ec:ee:d3:09:82:c0:e4:46:36:1a:
         88:7f:63:6a:48:cd:93:9d:90:f2:db:7e:a4:72:c4:12:04:69:
         82:b7:26:c3:f1:66:92:cd:19:97:66:c8:80:d3:86:ec:49:fb:
         d7:74:aa:c2:97:69:2c:6f:4f:e6:f0:bc:3c:3b:26:c0:1b:18:
         dd:26:ea:90:93:ed:b2:2e:2b:b4:f0:67:ff:c3:07:ea:b8:a6:
         87:70:e5:fa:ea:ac:ba:9d:28:ba:e4:bd:1a:1d:63:52:4b:15:
         35:76:ce:7b:2a:4e:5d:bc:eb:e2:8b:27:fa:7a:40:55:1b:9d:
         92:31:dd:22:4a:95:97:50:0e:12:11:85:96:4b:07:ea:b4:5c:
         27:84:8a:d1:17:a8:f3:96:85:95:f1:58:5c:c9:1f:58:be:cf:
         14:5d:41:21:c6:18:c3:96:57:2b:32:f1:59:30:36:92:93:8c:
         c4:9f:c2:99:bc:18:00:9b:38:eb:e1:f6:65:3a:38:65:d6:f6:
         a3:08:c5:42:90:74:64:9a:d3:cc:42:c1:6b:33:a1:cc:74:12:
         9e:82:87:f3:f1:57:55:76:4e:76:f1:f4:cb:31:16:fd:0b:5d:
         11:13:96:0a:c3:e8:0b:6b:fd:0a:9d:bc:25:54:6c:89:41:d8:
         14:c5:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:11:57 2025 by rpki-client