Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f93074d3-caa8-37fb-b28a-32deb6fabdde.roa
File:                     f93074d3-caa8-37fb-b28a-32deb6fabdde.roa (raw, json)
Hash identifier:          SdPaasoQwyXHSY1+U3uy7OjC6Cj76oMKmcOPb64H6SI=
Subject key identifier:   0A:F6:F6:11:31:E0:9B:EE:ED:68:D5:B5:1E:2B:E9:C2:24:BC:D9:99
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849D594E2C2EF89F3008287D080
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f93074d3-caa8-37fb-b28a-32deb6fabdde.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        130.137.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e2:c2:ef:89:f3:00:82:87:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=2de0ddff-3e61-4830-88ee-ff4b019dab40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:58:f6:f2:b6:fe:6f:c3:04:72:c0:f9:8e:
                    67:37:7e:a9:69:dd:26:cb:9b:d6:0a:f6:63:ba:bd:
                    e3:08:c6:4b:ef:48:65:2d:7d:6f:75:3a:9a:6b:dd:
                    96:e3:86:c3:e7:48:33:d5:60:c7:86:4a:8f:82:0e:
                    72:b4:a5:0b:e6:56:eb:22:2e:00:20:df:44:02:60:
                    45:e9:f5:99:7a:6d:6f:de:30:04:a5:92:b7:21:53:
                    5b:f5:f0:a0:57:93:dd:1f:7f:5e:2e:2c:42:18:25:
                    73:4c:76:2b:14:f3:91:21:0c:ca:c1:7c:92:d6:85:
                    1f:e2:a5:46:2e:a6:69:6c:01:cd:77:9a:d7:30:a7:
                    cd:a7:4a:70:1d:b3:ad:e7:fd:17:4a:7e:e8:58:d2:
                    5a:25:ca:10:8f:b9:0a:8d:84:9c:5b:88:96:b3:b6:
                    59:73:74:0d:02:0e:e9:07:1f:2a:9f:b1:a8:f9:6f:
                    bf:4d:77:01:65:78:fe:5e:ea:4c:42:e4:b8:81:70:
                    03:d4:d7:74:48:c0:59:16:17:df:85:c4:7b:ae:df:
                    e2:ed:3a:9f:5b:b2:52:83:bd:78:48:57:9e:ff:4c:
                    27:85:1a:81:40:ea:75:7e:4d:ba:a1:fc:70:41:cc:
                    3d:0d:09:43:15:ec:ba:6a:f4:69:38:d0:3c:82:a1:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:F6:11:31:E0:9B:EE:ED:68:D5:B5:1E:2B:E9:C2:24:BC:D9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f93074d3-caa8-37fb-b28a-32deb6fabdde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:49:dd:63:a2:79:3c:09:76:5f:3d:d7:d5:1d:e4:f6:3a:37:
         3b:5d:2a:01:82:ba:08:94:be:e8:99:dc:80:a0:18:1c:58:99:
         65:b2:c8:24:1a:c9:7d:60:a8:c0:d7:e5:19:dd:4f:a4:5f:eb:
         8c:60:85:12:87:40:4f:86:a0:7c:e0:95:a4:eb:ce:6b:aa:0c:
         d4:64:e0:bf:ad:20:a1:db:2b:6f:45:42:04:b9:7a:c4:e0:05:
         41:b8:9b:71:9e:d2:c0:2f:6e:ac:cd:22:f4:fc:87:e3:92:0f:
         f9:80:93:d4:79:41:b4:97:e9:3a:2d:42:a8:1b:ff:f2:f3:45:
         bf:81:34:13:d9:4b:61:d7:4d:08:24:63:ab:96:c9:2a:71:90:
         df:fc:ad:53:d0:c8:66:6f:0f:5f:81:a1:bb:7e:ff:2f:de:89:
         ab:91:af:8f:b4:cd:e1:d2:c2:11:08:1f:70:f0:c5:59:79:b4:
         04:ee:47:d0:69:7a:c1:88:fb:ef:5b:63:6a:75:d9:43:2c:66:
         e3:41:40:3b:d2:3a:d2:65:04:90:e8:9f:54:4e:6f:98:32:f8:
         7e:27:9d:e5:f6:41:2e:69:71:e0:6c:5e:2d:92:36:0d:c1:59:
         7d:74:79:a2:3b:f0:0e:af:01:3d:3e:8a:9d:ea:de:30:00:10:
         25:7a:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:09:37 2025 by rpki-client