Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b37765d7-9512-3340-a584-906866a7739a.roa
File:                     b37765d7-9512-3340-a584-906866a7739a.roa (raw, json)
Hash identifier:          y4LSmSBUvX4/bAwmQzRRR00WT6H3qblPyJ/vEheKsS8=
Subject key identifier:   DD:F4:12:8C:47:8B:03:15:B1:AC:48:2B:C9:FB:E7:32:4B:D8:43:1B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A331AF4503AE6C3634AACB300
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b37765d7-9512-3340-a584-906866a7739a.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        130.137.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f4:50:3a:e6:c3:63:4a:ac:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=e445ad1d-d409-4a56-ae7d-0a268b0e99d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:c9:ce:ab:2d:ac:e7:48:b2:dd:ef:d8:e1:
                    8d:0c:c9:9e:fd:c2:56:a9:68:6a:6a:ad:52:64:2b:
                    05:0a:de:a5:e5:31:f6:b1:2a:f7:1c:1c:e0:f7:de:
                    db:aa:83:3c:21:bc:f0:fe:07:73:a3:a0:60:35:06:
                    e1:23:72:b6:83:99:a0:a2:b8:33:12:94:d9:73:cc:
                    8f:30:9d:67:0d:26:6b:f6:c6:41:ee:c3:d4:b1:b0:
                    d4:0f:e1:e8:a2:f8:71:38:50:76:f0:97:b5:e4:be:
                    a9:2b:cd:d0:f4:1b:2d:5d:58:93:26:da:76:75:b4:
                    8d:77:dd:ba:8a:a5:26:c3:c2:64:36:08:41:71:fc:
                    1e:67:92:62:ec:17:f2:f7:58:57:74:ba:a8:b6:17:
                    40:d1:7a:8e:92:2a:da:1e:70:a4:44:02:01:35:de:
                    7e:98:0a:fd:36:2a:8b:3e:a6:5c:97:ea:e7:fd:eb:
                    7a:49:f9:bc:0c:68:89:16:13:b3:9a:5f:ce:b3:d8:
                    46:74:4f:da:ff:a5:3b:cd:e4:7a:0a:a7:d3:a0:68:
                    8e:6c:95:67:cf:8d:df:7c:32:9f:5b:44:b6:41:65:
                    11:33:0f:86:a6:e5:fd:64:97:4e:57:e3:99:d1:9c:
                    f9:16:6b:a5:7d:f8:ca:f8:71:8c:a8:55:42:30:09:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:12:8C:47:8B:03:15:B1:AC:48:2B:C9:FB:E7:32:4B:D8:43:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b37765d7-9512-3340-a584-906866a7739a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:91:83:3d:f4:37:2e:a5:8b:64:c7:e8:4e:bc:8a:a6:8b:d5:
         93:1b:80:bf:fa:7c:65:42:55:cf:b3:df:75:b5:1c:06:29:c3:
         d1:be:c7:4b:43:bb:c1:48:3d:3b:d6:8d:e2:ab:35:22:b4:fa:
         89:84:33:4d:86:45:6b:86:99:3d:36:e8:e5:29:52:e0:f3:db:
         97:4a:0e:2d:41:ad:de:8f:f9:6c:07:5b:4c:c4:bc:35:c2:aa:
         d3:c7:e1:a4:37:11:29:b2:06:5f:94:1f:40:ac:71:73:a7:08:
         fb:34:41:ac:a8:ee:77:74:cd:bc:2c:47:02:70:d2:70:04:b4:
         d9:37:a5:60:b2:d3:5d:4e:56:c6:99:c0:53:de:76:bb:1b:a6:
         cd:78:2e:18:64:11:d6:41:04:8f:a8:4f:2b:7e:3a:75:4d:b7:
         69:8b:60:3c:71:43:39:d0:d9:8b:55:15:b5:5b:d8:30:a9:39:
         cf:43:f1:11:00:1f:1a:ab:29:7a:82:dc:5a:7d:2a:13:8b:b8:
         14:94:e0:81:17:d2:41:26:77:41:27:ac:b3:77:41:56:3e:4a:
         06:6d:8d:da:81:f1:58:e4:bc:90:e2:a1:75:3f:cc:22:9c:cd:
         1b:62:d4:59:d3:eb:55:26:02:14:90:fe:cd:60:bc:56:e2:32:
         25:7a:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:22:00 2025 by rpki-client