Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f37450b9-11a7-349c-ae99-5d21f3a6281a.roa
File:                     f37450b9-11a7-349c-ae99-5d21f3a6281a.roa (raw, json)
Hash identifier:          FMIlhOXlIKYTzJz6BH97KWNPmWtSt0Ha+GKNYq0PMHo=
Subject key identifier:   86:AA:6E:B5:29:32:0D:E4:A2:0B:7D:42:CC:A8:CE:BC:02:3B:7F:77
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904E5107CEA7BD901069810
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f37450b9-11a7-349c-ae99-5d21f3a6281a.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e5:10:7c:ea:7b:d9:01:06:98:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=67069794-df8d-4483-a1ce-539f2435db15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:a2:24:7f:9f:d5:db:38:7d:7c:d1:63:b9:
                    24:aa:ac:34:b2:ac:c5:5e:9f:f2:30:95:4f:05:f0:
                    9e:94:f1:0e:e2:a0:f7:3d:dc:7b:c8:ea:86:cd:7a:
                    8f:14:5e:3b:49:1b:22:19:a1:66:8e:ce:a3:b7:35:
                    ed:7a:37:29:17:ca:a3:77:5b:41:69:6f:35:bc:4e:
                    8f:a0:fe:87:47:a3:59:cc:4b:41:a0:90:b7:69:27:
                    07:f4:2a:1c:10:de:45:80:64:42:2b:eb:af:e0:4c:
                    27:68:bb:9a:f2:70:14:3e:88:b6:89:9b:fa:2c:19:
                    97:ee:90:29:0d:7f:0f:a6:eb:05:4f:4f:ec:b7:66:
                    56:6b:80:c1:68:7e:f1:df:46:83:40:76:43:99:e2:
                    af:5d:60:83:07:2c:1a:19:c2:65:19:cf:87:46:ce:
                    7d:dc:44:c6:d0:93:8f:71:60:14:32:a1:4b:54:ee:
                    fc:fe:6e:8d:37:11:c3:64:ab:75:b9:d2:cd:d4:04:
                    63:05:d6:9d:2e:69:cf:1f:b7:0d:b9:48:7e:42:c8:
                    9c:07:66:3c:91:3a:96:5d:3a:8f:70:c0:62:9f:e1:
                    ef:0b:78:a9:46:78:e7:f8:d5:b8:d7:4a:c6:f5:a2:
                    09:64:a6:53:fd:fa:d0:ba:1e:79:bb:6e:76:fa:0c:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:6E:B5:29:32:0D:E4:A2:0B:7D:42:CC:A8:CE:BC:02:3B:7F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f37450b9-11a7-349c-ae99-5d21f3a6281a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:39:62:42:66:8f:f3:a1:17:45:b6:96:45:fc:8f:a5:84:
         05:f5:91:75:8f:53:4c:70:ef:70:6d:38:6c:94:30:1f:77:e1:
         f5:00:9f:2e:98:d7:7c:b0:0d:4b:c6:7d:bb:24:3c:e0:2e:f3:
         62:8c:70:1f:5d:92:60:23:ff:3a:ac:7d:64:b2:60:3f:f9:e5:
         62:c0:d4:d4:04:0d:62:5d:78:c9:8e:a8:e1:e2:3a:1f:23:e2:
         92:88:89:22:ab:8a:85:22:54:fd:1c:b5:64:17:5d:49:30:ba:
         40:59:82:aa:60:c4:6c:c7:20:f9:43:27:e1:87:1a:c3:a2:fe:
         e2:87:db:5b:e1:17:9f:75:60:d4:4e:97:71:de:c0:28:f3:cf:
         10:19:18:06:ef:5c:cf:91:80:ce:40:93:50:76:88:94:1b:34:
         47:79:c8:9b:9d:b1:ae:54:ea:ab:d5:95:c1:62:d9:d8:e6:0c:
         49:af:a0:cb:b8:81:0f:2f:01:b3:24:27:d3:ad:4b:93:2f:50:
         d0:ff:12:3b:87:c0:9d:d1:fa:4a:eb:a6:28:18:41:4a:09:fd:
         5f:a4:97:68:86:34:10:f2:05:3c:fd:33:c3:05:fa:20:ac:73:
         65:30:20:9d:90:60:a0:92:7b:3d:00:31:24:9a:c3:4d:65:00:
         e8:e8:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:19 2025 by rpki-client