Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/06cf0f6f-3c55-3142-993c-dafd1dc928bc.roa
File:                     06cf0f6f-3c55-3142-993c-dafd1dc928bc.roa (raw, json)
Hash identifier:          zK7SR1GuLB6AgeFsuhyyjtYcfiecHoMEs2Kle2cWCD0=
Subject key identifier:   BB:0A:DF:86:4B:22:FD:31:9A:4A:DC:F4:B7:7A:8E:BC:97:18:EE:A9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584917DC2C7C50B92126FF8404C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/06cf0f6f-3c55-3142-993c-dafd1dc928bc.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2c:7c:50:b9:21:26:ff:84:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5c617ab9-5b46-4ca5-a75b-dd7ef2bce4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:dc:e2:67:7f:f8:fc:15:28:8f:98:19:a1:
                    fd:a7:2f:1d:a6:20:09:db:f0:84:72:d5:1c:91:f3:
                    89:b9:9e:f7:38:35:eb:04:85:63:93:4a:68:0a:ba:
                    f1:67:e1:d6:46:6f:30:7c:20:6f:0b:9b:f4:f5:bc:
                    8d:20:f7:d4:75:4e:c8:04:68:ca:53:9e:3e:ca:40:
                    00:33:13:cc:0a:72:31:f6:79:cf:77:36:8d:0b:ee:
                    fe:99:ae:ba:3f:f1:73:f6:0b:15:5b:9c:2a:f4:ab:
                    62:80:13:4c:cb:c9:92:2e:ea:c3:03:f3:a8:5a:d7:
                    02:b5:c0:10:79:00:49:69:16:c8:53:c8:85:7a:06:
                    f6:d7:d5:23:f6:77:1d:38:b3:ec:f5:25:2e:8f:00:
                    eb:36:d4:bb:70:3d:40:74:e2:38:98:34:f1:5c:ef:
                    4e:f1:45:43:ff:4a:ac:6b:f2:92:92:e9:3c:2b:55:
                    b4:19:1c:65:cc:6d:b7:3e:2b:5c:a1:ad:31:40:43:
                    01:96:ae:91:40:b6:5a:72:61:de:d0:6e:81:61:52:
                    a0:df:26:b4:7a:62:10:f6:bf:1f:0e:8c:44:4f:9a:
                    93:a7:90:86:76:fc:4b:5f:00:da:43:d7:d3:b2:1f:
                    fb:01:e7:34:d2:69:11:b5:08:a3:c7:32:ad:c3:fc:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0A:DF:86:4B:22:FD:31:9A:4A:DC:F4:B7:7A:8E:BC:97:18:EE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/06cf0f6f-3c55-3142-993c-dafd1dc928bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:b2:d0:2e:09:fd:f7:4b:d1:b3:f3:51:3c:65:be:3a:99:
         76:fa:71:d0:a1:bb:5a:6e:ca:72:28:03:b6:38:d6:4d:21:fc:
         49:e5:f2:82:ad:54:b6:32:11:cc:68:8e:26:ae:b0:a4:f3:c7:
         20:8e:a5:ec:c7:77:cf:ee:95:0c:c8:e9:9e:91:19:40:02:53:
         ae:e9:78:e4:03:62:08:30:f3:08:da:ed:07:58:c6:a4:91:9a:
         f1:7a:5c:5a:f7:40:c5:f6:fa:1f:c7:f3:b5:46:5a:d2:b3:cd:
         fc:3a:74:27:75:9f:5f:4b:d0:6a:e3:05:af:f2:f1:ad:b5:5e:
         1e:92:e9:11:59:b5:1e:c4:85:53:69:ad:97:70:a8:13:6f:25:
         1f:9b:00:b8:1c:93:ce:3c:8e:35:7b:a0:ee:64:76:ab:f1:8d:
         e6:d7:a5:4f:7b:ed:47:7c:41:f8:a6:15:ba:4e:39:6b:af:eb:
         42:7d:3b:ed:0b:95:44:d3:a3:35:08:5d:10:79:de:69:41:3d:
         76:89:3d:2b:49:f4:07:62:88:a5:1a:db:2c:73:b3:6f:aa:ba:
         37:fb:aa:b4:f9:15:97:22:6d:72:05:b8:e8:64:ca:33:f3:97:
         a1:bd:cd:61:68:51:f7:f9:48:67:d6:80:e5:f3:78:d9:aa:0b:
         fd:a1:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:04 2025 by rpki-client