Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1988090f-20fe-3061-827b-baf8f280009f.roa
File:                     1988090f-20fe-3061-827b-baf8f280009f.roa (raw, json)
Hash identifier:          LtHJ3ncAgxGoPahOZAsCq52Zx27tiZcbz/sTCzQMPsc=
Subject key identifier:   39:37:02:89:A9:91:76:67:E0:43:58:75:64:B7:0E:92:2A:1E:F1:D5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584930DE68743BDB49E6D99B0600
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1988090f-20fe-3061-827b-baf8f280009f.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.137.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:68:74:3b:db:49:e6:d9:9b:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=70951cae-b754-43ca-b701-fcac6a3800d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:fc:d2:38:cf:bd:72:3a:1b:4b:f9:6e:19:
                    d8:dc:f7:3f:6d:65:01:b1:10:2b:4f:34:1c:65:df:
                    fd:7e:7a:00:a4:c6:4a:ec:dd:49:2b:c9:35:67:4e:
                    e2:76:58:6e:bb:ef:77:13:d1:48:ff:44:82:31:84:
                    7c:1e:ad:60:54:03:69:72:9a:08:93:fc:2f:1a:47:
                    77:2e:54:dc:8e:60:98:fe:3a:ee:ef:bb:b1:5e:bd:
                    76:0a:58:10:96:83:5f:64:63:0a:aa:4d:2d:c3:ec:
                    f1:9b:e5:25:bd:97:99:3c:10:ee:f8:10:41:69:03:
                    e3:70:56:a0:0d:1b:36:c2:70:a1:03:8d:1e:ff:c0:
                    dc:40:dd:7f:0d:9b:27:f5:5b:6c:21:73:12:73:ca:
                    f9:b9:64:1d:1e:9e:8a:0b:86:d4:f3:7a:c7:68:04:
                    b7:d3:e4:a7:5e:6c:e1:f3:63:4e:3c:db:0d:18:b4:
                    55:cf:4f:1f:14:7b:67:24:3d:7d:bc:d5:e9:86:a0:
                    8e:1d:b7:f6:de:32:67:b0:aa:31:bb:fa:91:97:fc:
                    3d:8e:41:c6:ce:21:1e:dd:c3:75:4c:8f:71:e1:1f:
                    0a:dc:81:2b:ce:41:13:b3:1d:9e:5d:c0:20:7e:69:
                    00:0f:c2:1a:ad:a7:f7:1d:53:bc:42:10:d0:c2:f9:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:37:02:89:A9:91:76:67:E0:43:58:75:64:B7:0E:92:2A:1E:F1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1988090f-20fe-3061-827b-baf8f280009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:37:e3:fa:50:8c:53:c5:83:5c:eb:6a:d9:fa:72:d2:0f:
         a4:a1:43:91:85:33:2c:da:04:5a:f7:a9:d9:0e:74:21:45:aa:
         34:38:1b:ea:41:32:63:b7:f0:ee:43:da:35:69:c7:2a:76:76:
         8c:d9:f0:d6:b9:5a:d4:cb:9c:02:dd:32:d9:7b:23:52:af:f9:
         96:01:dc:2a:45:ca:7e:04:ee:92:22:2d:b8:5d:9e:cf:fe:0e:
         a1:33:ce:8e:f7:c7:33:79:fc:99:c5:64:c0:8e:b5:ef:af:d8:
         82:68:d1:e6:70:01:9e:5d:87:81:e1:7a:2e:f4:c3:8f:d6:de:
         c6:47:ab:ce:bc:f4:f9:6f:10:29:a3:11:68:5d:f5:ba:bc:0f:
         aa:6e:ee:63:b5:8a:e1:47:cd:ef:94:86:2b:08:b5:8c:ad:ed:
         c2:ab:93:46:60:b8:6c:14:97:c9:30:9a:51:4e:fa:8f:f1:11:
         73:83:18:06:f0:58:28:10:7f:0b:37:b2:b3:fc:91:52:cb:1a:
         14:71:d2:3f:b4:87:1f:40:98:e6:a4:10:68:c5:f9:7f:1c:6c:
         fd:9b:9f:27:fa:06:ee:25:e6:65:a3:40:3e:3c:38:29:52:9d:
         5a:71:89:49:4a:03:3f:0e:8d:51:9a:0f:58:09:03:5c:31:6a:
         23:22:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:38 2025 by rpki-client