Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3008fec-7e65-3321-88ae-a42a6debd721.roa
File:                     e3008fec-7e65-3321-88ae-a42a6debd721.roa (raw, json)
Hash identifier:          o/jjcfwYdJ/7KZgFjqZvhF/Y8n4q2pmEPAsypZ59MwQ=
Subject key identifier:   B2:2A:E8:EC:E8:AC:61:F2:56:E8:85:92:ED:94:0A:F1:28:B0:E6:53
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491D71760610B77C03DE347260
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3008fec-7e65-3321-88ae-a42a6debd721.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     8987
IP address blocks:        130.137.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:76:06:10:b7:7c:03:de:34:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=11b8d780-41ee-4d0a-8690-fb5d5a909ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:59:cd:50:87:65:ed:38:c6:74:93:0e:11:
                    b7:1c:89:ed:16:cb:43:51:4d:6c:df:68:72:01:2f:
                    0b:ef:ef:86:37:9e:19:ad:f1:b6:f1:ca:20:28:b5:
                    89:ae:b2:bf:25:60:6d:03:6c:0d:64:be:12:c4:88:
                    a2:1a:2e:a3:37:66:d3:9d:e5:8f:b1:1c:ed:90:c5:
                    0c:df:39:48:73:79:23:17:9e:0b:43:34:42:3c:0b:
                    94:fd:03:04:f9:4e:3a:88:de:db:43:f6:70:b0:1a:
                    7a:f6:53:67:75:04:02:3d:0d:69:45:ee:2f:71:95:
                    5b:28:2d:51:95:cc:c8:70:6e:ba:af:32:56:28:19:
                    13:27:95:bd:72:a2:fa:94:0d:f7:97:ec:e9:e7:dd:
                    1d:84:42:63:74:59:6d:70:a2:b2:00:20:43:45:56:
                    98:e5:b4:de:ec:36:33:bd:3b:82:68:59:a5:82:e3:
                    56:8c:2d:18:99:e3:6e:0e:37:70:b2:2c:e6:f6:34:
                    f8:4e:b0:d8:8e:56:42:20:c8:21:69:03:19:69:67:
                    37:f2:61:b2:6a:54:68:38:48:fe:f4:a1:33:01:2b:
                    85:2d:92:fd:c0:be:eb:64:95:b5:b3:da:6f:67:9f:
                    18:82:34:4b:d2:09:a4:8f:c4:36:8b:94:61:df:30:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:E8:EC:E8:AC:61:F2:56:E8:85:92:ED:94:0A:F1:28:B0:E6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3008fec-7e65-3321-88ae-a42a6debd721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:68:cd:af:17:5e:d2:50:cd:77:2c:4c:4b:1f:4b:f2:ab:f1:
         af:b5:91:fb:89:43:04:ed:09:d2:9a:4d:12:b2:fe:64:1a:36:
         e1:e9:42:47:7f:09:01:db:15:c6:a3:fe:0e:6c:78:c4:07:34:
         05:81:1e:ba:76:73:b6:56:1b:fc:54:80:e0:82:aa:0b:5b:f4:
         af:54:8b:86:54:22:2f:e4:7f:bf:db:31:2c:f4:36:96:f6:a7:
         bf:6a:76:2e:c9:10:b2:8a:66:54:0f:c4:53:a3:d9:fc:6a:f0:
         e3:fc:6a:12:52:fe:af:86:19:82:e6:7c:a6:cd:96:52:c5:87:
         aa:e1:19:de:38:5d:d4:ef:5e:44:c9:c0:b7:87:ba:df:2a:71:
         a2:a8:7e:70:78:09:7a:03:50:b8:31:31:4c:64:82:3d:33:cd:
         e7:cb:c2:f4:cc:81:2f:bb:e0:17:e3:b8:cb:e6:59:9c:24:33:
         09:e4:cd:a8:21:b5:af:22:63:55:5f:d6:05:0d:20:ec:8d:04:
         bc:76:9c:61:ee:d6:f2:d8:ac:f9:c0:d3:95:a9:da:cb:68:e3:
         2f:2e:43:0a:60:6c:e2:e2:d2:64:5d:04:71:fc:97:f2:1a:a5:
         83:f4:96:3d:3f:41:a2:08:16:05:5b:d4:22:24:c6:7d:de:08:
         7a:06:7f:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXYGELd8A940cmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MTFiOGQ3ODAtNDFlZS00ZDBhLTg2OTAtZmI1ZDVhOTA5ZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq1ZzVCHZe04xnSTDhG3HIntFstDUU1s32hy
AS8L7++GN54ZrfG28cogKLWJrrK/JWBtA2wNZL4SxIiiGi6jN2bTneWPsRztkMUM
3zlIc3kjF54LQzRCPAuU/QME+U46iN7bQ/ZwsBp69lNndQQCPQ1pRe4vcZVbKC1R
lczIcG66rzJWKBkTJ5W9cqL6lA33l+zp590dhEJjdFltcKKyACBDRVaY5bTe7DYz
vTuCaFmlguNWjC0YmeNuDjdwsizm9jT4TrDYjlZCIMghaQMZaWc38mGyalRoOEj+
9KEzASuFLZL9wL7rZJW1s9pvZ58YgjRL0gmkj8Q2i5Rh3zCH6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIq6OzorGHyVuiFku2UCvEosOZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZTMwMDhmZWMtN2U2NS0z
MzIxLTg4YWUtYTQyYTZkZWJkNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdoza8XXtJQzXcsTEsfS/Kr8a+1kfuJQwTtCdKaTRKy/mQaNuHpQkd/
CQHbFcaj/g5seMQHNAWBHrp2c7ZWG/xUgOCCqgtb9K9Ui4ZUIi/kf7/bMSz0Npb2
p79qdi7JELKKZlQPxFOj2fxq8OP8ahJS/q+GGYLmfKbNllLFh6rhGd44XdTvXkTJ
wLeHut8qcaKofnB4CXoDULgxMUxkgj0zzefLwvTMgS+74BfjuMvmWZwkMwnkzagh
ta8iY1Vf1gUNIOyNBLx2nGHu1vLYrPnA05Wp2sto4y8uQwpgbOLi0mRdBHH8l/Ia
pYP0lj0/QaIIFgVb1CIkxn3eCHoGf4c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:06 2025 by rpki-client