Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a718f19a-a2e0-3e3a-8732-50248ce8081c.roa
File:                     a718f19a-a2e0-3e3a-8732-50248ce8081c.roa (raw, json)
Hash identifier:          0UYi7OM/JZVOTKu3aLMaq/qcvMFc5nS1YSmgHHs/MOU=
Subject key identifier:   35:6C:94:51:2E:10:37:8F:7A:C0:D7:AA:19:92:66:93:01:AB:4C:5A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A43DB0B98F3D96530E6103C00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a718f19a-a2e0-3e3a-8732-50248ce8081c.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        130.137.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0b:98:f3:d9:65:30:e6:10:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=eb55fc33-6e99-4f8c-beac-1fd52ee2435b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:21:c1:e4:b6:33:7e:23:f1:2f:79:42:cf:
                    a0:32:b8:79:83:a9:2b:d5:76:4a:72:e8:f3:47:5d:
                    7e:a6:10:50:9a:ba:e9:25:1f:e3:6b:56:1c:5a:44:
                    6a:f1:30:84:de:10:3c:99:c0:52:87:07:74:f4:87:
                    da:e1:01:ff:ae:9b:33:b3:2e:0a:64:88:a4:34:41:
                    b0:d4:f0:c2:24:74:bf:cd:8b:5d:19:db:16:73:5c:
                    83:db:1c:62:d4:d2:ff:9f:bc:93:df:4e:b5:e4:50:
                    5e:72:ed:5b:d2:8e:38:5e:fd:f5:d0:de:5a:01:de:
                    88:5c:e8:15:d0:80:dc:de:83:5c:0c:b0:e7:4f:c5:
                    32:2b:4d:85:a7:ae:73:eb:1e:02:2a:bd:f2:d8:fd:
                    11:a4:9a:04:4e:ec:b6:ff:62:9f:27:e0:f7:2a:35:
                    cf:29:64:8e:0f:ca:31:9b:0e:71:33:01:ec:1b:92:
                    87:09:96:16:ae:cf:af:8b:fa:39:b8:83:65:fd:ff:
                    cd:57:e0:11:42:f3:11:61:6a:c4:c9:af:58:00:b1:
                    ba:98:06:95:a1:de:4b:af:7b:8b:f8:82:e9:73:71:
                    b3:9a:b4:eb:8c:07:ef:c0:4e:fa:61:2b:d7:dd:23:
                    8a:b1:c5:b5:8d:08:8d:25:bb:92:1f:7c:0b:1c:20:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6C:94:51:2E:10:37:8F:7A:C0:D7:AA:19:92:66:93:01:AB:4C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a718f19a-a2e0-3e3a-8732-50248ce8081c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:0d:7f:88:57:84:dc:1f:96:41:97:79:a1:3d:4e:24:c8:
         2c:b9:4f:67:40:ae:46:7a:6e:7e:b3:a8:69:c9:1c:f1:dc:ef:
         35:34:2a:0a:56:99:7d:25:21:ed:cf:4e:18:f3:3c:8a:ff:9b:
         20:16:2b:5d:6d:74:45:36:ca:f2:d8:b8:5e:b3:95:d9:89:a7:
         ed:e9:e7:70:6a:cf:35:fc:58:d9:4b:d8:94:10:22:9b:d7:66:
         1c:cc:8c:57:af:fa:3f:e9:88:d7:77:6b:a8:45:b2:0d:16:c1:
         7d:e0:b8:3c:76:dd:0d:c9:94:be:1d:35:1c:e3:ba:4d:e6:29:
         a2:ca:cf:00:56:c3:a7:48:87:93:ca:69:52:ee:df:bf:19:60:
         be:75:d9:38:df:19:90:d3:1e:44:72:de:e3:ca:09:a2:42:79:
         f6:84:f1:f0:55:ef:2f:f9:a7:10:23:7d:0b:c1:00:7f:e1:88:
         1f:cc:92:96:4a:9e:71:60:69:c4:0c:fb:2f:f3:2e:5e:58:ca:
         15:90:a6:6e:a7:e0:7b:cf:b8:62:a1:e8:6f:60:33:e1:75:f3:
         e1:1d:33:e0:a6:bd:a2:29:3e:96:94:d4:bc:b4:af:15:c2:8f:
         dd:c2:63:9b:c7:1b:71:4f:69:3f:91:e1:36:32:ba:7b:ce:59:
         a5:64:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:39:46 2025 by rpki-client