Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f755116e-7d0f-34a5-8065-b531327349c4.roa
File:                     f755116e-7d0f-34a5-8065-b531327349c4.roa (raw, json)
Hash identifier:          dEW2srrZGn8RI6pQyrcxtKJJuj3aUw+7kCQt7NsDkFw=
Subject key identifier:   46:EC:08:A9:E9:B1:CC:C0:32:C7:B7:57:C1:22:24:A6:4F:6F:33:5A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858493243D37E7B0DBA7FBEEB4580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f755116e-7d0f-34a5-8065-b531327349c4.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        130.137.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d3:7e:7b:0d:ba:7f:be:eb:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=cd5af577-fc5e-4036-8ef8-98c7a4126bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:5d:8c:5a:00:f7:34:64:6b:ad:4d:4c:bc:
                    0f:ad:66:03:5f:f2:8d:c6:a1:b9:6d:7b:5e:ab:8d:
                    89:53:79:3b:41:91:2b:6d:1c:69:37:6d:91:fe:43:
                    5b:5f:15:26:7d:98:60:45:af:e4:76:1c:75:1a:f0:
                    7f:73:62:98:13:6e:c9:96:ef:66:27:c0:64:e8:15:
                    ff:3d:16:e2:67:87:c6:6c:53:d0:7b:d7:9b:4e:6e:
                    7d:ca:07:6a:8e:14:76:0b:f4:5d:c4:ee:8f:24:e7:
                    66:01:2f:14:18:dc:15:aa:5e:a6:a9:9b:cc:fb:b6:
                    40:1d:d3:91:ce:77:6e:c0:14:4f:3e:f8:25:46:b7:
                    69:c9:7a:cd:26:53:e0:85:5a:11:97:5d:c8:64:71:
                    d5:d4:c0:0d:86:6c:b1:09:2a:11:64:6e:63:a6:35:
                    d7:11:fc:b6:53:3b:6c:db:fe:8a:14:28:53:9c:23:
                    d3:fd:28:86:a2:2b:c2:56:ff:22:b7:78:14:3d:3f:
                    8c:89:10:8e:20:57:46:0c:f0:78:82:17:c6:98:83:
                    2e:43:95:fe:cc:85:da:d1:30:1e:21:10:b1:fb:93:
                    91:f1:4f:ab:f3:d1:28:30:6a:25:31:82:26:27:11:
                    ef:8b:5d:47:38:99:30:f3:15:d2:84:3e:3e:27:f9:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:08:A9:E9:B1:CC:C0:32:C7:B7:57:C1:22:24:A6:4F:6F:33:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f755116e-7d0f-34a5-8065-b531327349c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:a7:67:1a:fa:d9:2a:80:fe:fe:03:30:75:b1:38:54:e1:
         72:1f:4e:64:f2:c3:f6:3c:d2:6a:4d:1a:52:31:a5:a2:66:62:
         2d:e6:f6:69:da:61:63:34:f7:05:f0:1e:c7:dc:ec:4c:0d:00:
         92:db:39:c2:09:fe:bf:e8:11:33:11:5c:ed:11:9f:ea:ed:fa:
         2c:fc:c8:51:58:1f:fb:af:91:f1:98:f8:be:5b:97:ee:3e:b9:
         14:c3:13:b9:c0:a7:b8:f5:e8:d5:fd:2c:f5:4d:60:4b:eb:79:
         1f:dc:8f:91:f4:e7:79:78:87:46:75:f7:fd:8d:da:9a:e4:99:
         c4:c8:dd:12:76:d6:46:47:da:19:ca:bf:35:43:62:c9:eb:f1:
         cc:58:e7:0f:25:c7:d5:23:e5:c2:3d:25:2e:e9:e7:aa:4b:52:
         51:39:aa:30:17:92:cc:48:45:4f:0b:74:e1:d6:e4:91:95:3a:
         04:e8:e2:14:c2:fc:69:83:ce:49:ce:e2:cf:a8:76:36:0f:e5:
         cf:1a:3a:3f:b8:30:a4:32:a5:3b:1d:83:00:5a:0e:d3:56:82:
         43:29:81:5e:f2:f7:5d:05:26:d9:e3:aa:08:d4:7f:53:16:13:
         ac:8c:67:f7:a8:61:68:6b:94:72:96:fa:15:1c:fb:22:b5:cd:
         78:61:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:24 2025 by rpki-client