Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa
File:                     1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa (raw, json)
Hash identifier:          BtI2DoVCKeQKxLPcO4tNobcIKI7AOmr/77xaz5PxOYs=
Subject key identifier:   1F:02:43:E0:37:16:79:76:7D:04:07:A9:C5:8A:8D:F6:61:29:8C:27
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848F4F6A3FE7AAB231E25D9D740
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     14618
IP address blocks:        130.137.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a3:fe:7a:ab:23:1e:25:d9:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=832d2ec1-642d-42d9-a965-ac1b397459a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:df:3c:54:9f:83:ae:bb:6a:7e:ff:d0:aa:59:
                    42:90:4e:5c:b4:ff:c3:5a:a0:96:1b:3c:c0:af:1d:
                    98:22:fd:33:7a:b7:b2:47:a2:53:4e:1d:66:77:78:
                    eb:76:c4:ed:e2:93:cd:24:fb:aa:03:16:f3:73:f7:
                    f5:ff:ae:41:b3:86:67:87:76:06:97:1f:43:06:54:
                    5d:58:58:ba:b8:c2:b6:b4:cc:f8:90:f7:94:7f:fb:
                    11:04:ac:bf:7d:5f:4c:dc:dd:11:05:9e:19:e3:ff:
                    a9:5e:b0:52:b0:9b:01:0b:24:b6:c2:ce:70:a9:fd:
                    44:3b:ef:32:ad:fc:d8:69:23:ee:c7:6a:c8:d7:94:
                    bc:a2:2c:e0:2d:b1:2e:49:cb:fa:7c:90:7d:90:d2:
                    92:9a:ac:3e:d1:44:b9:80:4d:c4:ae:13:12:b6:e8:
                    43:cc:8e:b8:79:d9:67:68:f9:57:fd:e8:bc:01:fc:
                    f0:e6:eb:c8:67:5a:82:51:8a:ba:ab:f7:05:e9:7a:
                    96:c6:b4:d6:a3:89:66:86:f8:2d:69:d1:39:52:12:
                    4b:7c:70:a4:88:4d:c0:37:ee:69:d8:67:3a:f7:0b:
                    d8:1f:fc:26:cc:e9:b9:1d:23:f2:a8:ef:95:ac:db:
                    f9:b2:d0:80:6c:64:b7:18:6d:00:c2:4c:fc:6a:15:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:43:E0:37:16:79:76:7D:04:07:A9:C5:8A:8D:F6:61:29:8C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1be9d0ff-f478-3bcd-8d5d-53ef74d3e4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:13:48:ae:0c:21:20:61:5c:2c:af:60:13:ce:1a:cc:8b:
         62:0d:7d:e4:0e:be:3f:52:78:9b:7f:29:74:5d:55:54:5e:ea:
         2d:1d:5b:71:34:58:71:ad:ea:35:8a:c3:e9:69:22:6b:8d:94:
         0a:64:a0:0d:fb:50:39:3a:cd:f3:cc:92:ec:de:df:a6:2a:35:
         fc:3a:df:b1:7d:50:52:bd:26:5c:d1:c4:56:20:28:7f:ce:37:
         04:06:c6:af:01:03:e1:e1:f1:a9:09:8d:97:88:b0:89:01:1b:
         6b:52:1b:4e:b0:70:b1:91:d7:3d:e6:20:e3:ec:be:3b:22:ae:
         21:7d:78:6e:73:99:d0:e5:0b:5a:78:21:b3:e2:cf:38:3f:dc:
         0e:94:f4:a3:cc:0f:09:f9:63:11:16:9b:82:8d:bd:ad:6b:30:
         d9:dd:1d:54:a5:f4:a3:f7:cd:71:1a:87:cd:f4:19:f0:3f:94:
         ab:04:04:6c:a1:96:b5:4a:84:85:3c:ac:a2:fb:51:8a:fb:a4:
         df:e7:e8:ac:7b:c9:3f:c3:28:ed:0a:41:5e:04:0b:e0:45:31:
         ef:14:9f:f1:7c:49:1a:06:60:92:77:cb:33:7a:d1:31:3b:89:
         ee:29:5a:b9:c5:65:03:ad:08:93:3b:64:7d:c1:fe:6b:3e:35:
         ce:88:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:27:28 2025 by rpki-client