Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa
File:                     182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa (raw, json)
Hash identifier:          QW4x3Jhxvyhg9i55B0DaTkmDlJ9bO72pzsvRKDn8ECM=
Subject key identifier:   69:68:49:0A:A5:1A:EE:49:4B:D4:87:92:16:00:0C:16:BD:BA:DD:56
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483F801DBD84E9045F4EB1FB80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.137.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:1d:bd:84:e9:04:5f:4e:b1:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=94063e4a-961d-4397-8352-dc77db9d293c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:16:48:fb:4d:f7:dd:82:f2:f1:20:05:76:
                    de:50:cd:0b:cf:c2:d4:3e:65:c7:58:d9:c0:8d:4d:
                    2f:4f:ea:48:ce:f4:cc:9c:79:6b:a4:05:82:5f:99:
                    1c:66:af:d0:f2:11:08:65:1a:b0:75:2d:00:bc:0e:
                    89:83:2f:59:28:6e:d4:b3:02:b3:dd:1e:4e:74:ea:
                    a4:3d:fb:1f:82:8a:76:4f:54:fe:d4:58:9d:8a:77:
                    53:0d:08:37:90:4e:3e:cf:6f:b5:8f:4c:0f:e5:a1:
                    18:69:3f:45:77:59:f2:fb:e9:5d:41:51:54:9b:b1:
                    97:0f:7a:17:13:37:37:9c:67:a2:ba:2d:09:14:1a:
                    06:c1:06:ad:00:b2:d6:c9:45:21:64:d2:6d:39:f1:
                    8c:2d:3e:78:8e:66:0f:73:50:3f:40:b5:97:df:d5:
                    33:17:21:c2:a9:2b:95:e3:f0:5a:3e:70:a3:e5:6d:
                    64:d5:c2:23:e7:5f:9c:a8:a9:73:07:56:90:8c:34:
                    a1:22:d4:f3:bc:72:e0:de:52:32:9c:20:d9:6c:ec:
                    f4:82:c8:d8:74:42:2b:32:d3:7b:ec:5d:3d:de:f9:
                    46:1d:73:27:fa:2a:af:17:5a:03:d5:09:aa:a1:d5:
                    8f:e4:bf:3f:2c:94:0b:a5:1b:df:37:d9:c0:db:93:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:68:49:0A:A5:1A:EE:49:4B:D4:87:92:16:00:0C:16:BD:BA:DD:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:11:23:be:d2:a5:c8:b7:3d:af:04:1b:c2:76:61:41:78:96:
         09:9e:8e:1d:18:79:b8:56:40:07:44:3f:9e:ee:8d:cc:98:ac:
         e1:66:b5:b5:0c:75:20:07:91:77:e9:8d:45:1e:10:6b:7f:a0:
         45:08:9b:8e:18:8f:d5:44:73:56:21:c8:b8:ef:70:ee:83:b1:
         49:3b:7a:55:6a:79:88:16:29:5c:5c:6c:15:a8:a7:73:43:5a:
         6f:a7:0e:24:1d:6b:77:c9:b7:3b:c0:73:60:52:2a:4d:7b:42:
         dc:4c:0e:06:d7:ab:ab:84:68:e3:b3:88:3d:a1:92:08:66:41:
         4c:23:a4:bc:80:31:4f:bc:92:2f:4b:0d:2b:a0:a1:69:d9:46:
         05:9a:98:62:76:fb:d4:60:d2:bd:34:0f:df:22:eb:ed:c5:92:
         c8:a7:7d:a5:ea:05:aa:31:51:85:0c:a4:c8:40:e2:50:3d:3e:
         23:b2:3c:e9:0d:41:45:05:b5:87:62:c8:b6:d8:ff:eb:41:e4:
         79:b4:50:8e:27:07:c9:60:95:1d:6c:d6:32:b1:13:8f:96:d9:
         4e:6f:72:d3:2f:29:97:af:03:c5:0a:7f:71:b2:01:e4:a4:7f:
         0e:19:a0:4b:d4:4f:b0:e4:01:41:96:d3:0b:2e:f8:fc:4f:cd:
         28:30:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:54 2025 by rpki-client