Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa
File:                     a93c0d05-33a8-334f-8413-c6ac78b587f0.roa (raw, json)
Hash identifier:          czGwVqDf4VwCyz9kovMmJBltr+xfy7L7E/fjjbR2ZAU=
Subject key identifier:   83:AD:53:34:99:8F:D6:C6:6E:1B:B3:E7:28:04:D4:7B:0D:25:70:E6
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858493243D2F21E6DBDA31BA98300
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        130.137.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d2:f2:1e:6d:bd:a3:1b:a9:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=08f1deae-6bc0-4fec-be8c-bb84ad71ed4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:dd:37:9e:d1:83:fc:d0:42:be:4c:b6:55:
                    3c:73:e5:35:df:db:da:a5:50:3a:ba:47:f3:ac:7d:
                    09:d5:d3:c5:e1:5b:1e:cb:49:0f:27:cd:d7:8f:83:
                    3e:58:3d:0d:00:35:b9:e2:ae:e8:72:df:66:85:6a:
                    d5:3d:47:09:7b:1a:3c:db:4f:1a:c6:c7:45:44:ed:
                    90:86:5c:8e:31:a4:d9:13:1e:4a:51:bb:bc:20:69:
                    b6:49:76:a3:71:6f:63:b7:2d:49:af:8d:2f:48:6c:
                    e7:61:98:f0:8b:44:f1:6e:88:75:ad:e7:0c:e1:47:
                    83:67:d6:d8:f7:6e:e1:10:d2:2c:10:f9:95:1e:fa:
                    8d:f0:71:8d:ed:41:d0:fb:f8:66:8d:21:81:2d:3a:
                    69:92:b6:c8:88:2f:e4:72:da:c9:2e:1d:31:fe:52:
                    ba:88:b9:44:3b:89:d6:f3:6a:b6:c3:86:9a:7e:a0:
                    68:6c:d2:2c:71:55:d1:dd:6b:9d:88:aa:62:a4:63:
                    ea:fb:2e:3e:6f:be:c9:9e:65:16:d5:17:2f:be:19:
                    04:a6:3f:88:e3:2d:d4:4a:3f:eb:97:3d:07:a6:43:
                    e3:96:46:3b:84:68:c3:77:ec:2b:cc:d5:14:b2:d2:
                    2a:d6:49:c7:5a:14:9a:9a:cc:d9:70:1a:92:2f:65:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:53:34:99:8F:D6:C6:6E:1B:B3:E7:28:04:D4:7B:0D:25:70:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ae:74:95:b1:44:ee:0b:18:59:27:9b:f1:82:51:0d:06:7e:
         3b:23:1f:d9:59:55:b6:52:ec:26:d3:58:ca:16:54:dd:88:bc:
         68:aa:f9:47:01:05:b0:a5:a3:69:c3:b1:07:95:d4:c7:70:61:
         52:b1:c2:e3:93:48:8c:22:b7:6a:02:83:b4:ce:f7:86:7b:97:
         39:a8:69:dc:f9:4a:a8:1b:ad:ba:22:a2:48:61:2d:eb:9b:69:
         f6:77:f2:8a:c5:43:3f:70:eb:97:7d:ff:91:04:fc:2d:c6:3d:
         a5:e4:59:7e:67:fc:59:33:4d:3f:b6:41:df:b5:2c:63:b1:41:
         c9:4f:36:fc:a4:db:d8:91:19:d1:85:e1:f2:1e:a5:f3:6c:c9:
         e6:d1:c5:d4:e9:c8:dd:2b:d7:4b:6c:3f:0b:62:cf:22:91:bf:
         86:46:94:c5:dc:be:ca:bd:ff:5b:8c:7b:bc:b2:56:b3:1b:52:
         2c:f8:9a:54:d9:c2:2b:6c:92:1c:36:e8:58:38:fc:56:8b:74:
         3e:6b:6b:5f:ca:3d:a3:9c:34:fa:f1:d4:53:41:c5:5c:7c:b8:
         c1:d7:95:6d:12:c9:9c:76:1a:bb:28:86:4b:14:3a:4e:3c:92:
         cc:5e:19:94:8c:73:d8:83:f7:21:14:40:32:85:56:95:73:e6:
         7d:ca:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:17 2025 by rpki-client