Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
File:                     e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa (raw, json)
Hash identifier:          iTGVlAivfjcAXsrETT5RP+A1hn2bbz2j45IuDSzXwP4=
Subject key identifier:   2B:B1:17:0C:B6:82:63:D7:38:CE:05:53:1A:AC:5C:A3:03:60:DF:34
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A119AAB82C054D6EA1DE35900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     8987
IP address blocks:        130.137.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ab:82:c0:54:d6:ea:1d:e3:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=a97a19c9-9e65-49f8-a169-ce6336178791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:7b:5a:a3:bc:a8:73:09:79:0d:2f:0f:a3:
                    96:68:d1:ca:27:9c:ba:e6:40:8b:0e:ac:df:07:20:
                    e2:3e:e2:04:16:7b:b8:e0:db:db:52:80:d7:2f:77:
                    cd:86:9a:11:41:46:ec:cf:24:8b:82:1b:c8:09:4c:
                    f5:25:4f:35:f2:f7:46:32:8f:33:9d:ec:93:5c:8e:
                    67:53:c6:23:6b:68:48:1a:b8:3c:9d:98:dd:ce:42:
                    63:e7:ac:1b:e2:94:52:23:98:51:9b:e2:a3:e4:0b:
                    2e:98:22:3b:df:b5:27:86:75:fd:db:05:cb:42:ff:
                    7a:be:20:5f:b7:1f:2c:f7:04:04:6b:36:ff:e4:35:
                    f4:a1:8c:4f:2c:26:b7:42:dd:d2:91:7f:84:62:90:
                    af:7d:ce:f9:68:95:3f:3a:17:28:3c:d7:0f:07:4a:
                    91:75:24:b5:12:50:f9:78:76:7e:7d:0e:6a:46:34:
                    32:d1:bc:9f:75:54:77:37:53:6a:46:bc:c6:6b:30:
                    64:2e:54:92:24:92:b2:96:a1:73:48:16:51:fc:91:
                    98:37:b6:0e:a7:ec:73:27:ad:a1:ac:79:fe:bb:88:
                    41:25:eb:a7:a8:34:d3:c6:88:fd:4d:c4:24:91:ab:
                    2d:59:1a:dd:11:a6:7e:b7:7a:c3:a2:42:1e:25:c8:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:17:0C:B6:82:63:D7:38:CE:05:53:1A:AC:5C:A3:03:60:DF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:36:94:59:26:86:dd:ba:0a:5d:66:b8:a3:30:ba:50:c1:3f:
         d2:19:56:d5:30:c4:4b:33:af:5d:8e:54:80:c2:bb:43:a5:a9:
         4a:f2:9b:58:6a:99:b7:67:58:77:fa:d7:a9:8c:7b:77:6d:9a:
         e7:71:ba:8e:ad:ab:c9:3a:62:b3:3b:df:47:e4:dc:0d:04:66:
         df:8d:e6:66:cf:1f:f1:74:5e:39:ab:b0:6f:13:41:ee:e3:17:
         3b:40:b1:8e:d4:89:0d:70:d7:6d:67:ba:32:e8:42:8d:7c:0a:
         31:e6:ce:5a:99:c9:bc:72:fa:8c:8b:1f:ac:9e:a6:66:69:4b:
         57:ff:3f:9c:13:84:fa:02:f3:eb:7e:85:ce:6b:91:47:5e:cb:
         15:9e:71:f0:db:f1:f8:c3:3e:64:6e:b2:07:17:29:16:07:02:
         e4:43:af:c8:0e:48:50:02:fe:84:5b:56:eb:e7:3c:a2:82:2e:
         3a:bb:9a:2b:c9:86:c9:7d:9c:d5:dc:e1:0b:ad:f7:e5:bb:0d:
         01:2d:be:b3:fe:ec:fb:51:0d:91:8b:06:12:c4:ca:af:00:9e:
         1b:75:42:a0:09:f5:ea:92:2b:31:0f:a8:25:a8:54:f9:bb:a1:
         11:4c:3e:0b:6f:c2:4c:fd:ac:7e:1f:45:6b:da:cb:81:af:72:
         82:33:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:18:41 2025 by rpki-client