Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
File:                     2df51bd2-8f35-3784-a672-9288ad204a5e.roa (raw, json)
Hash identifier:          SkN2hauFNkh/B1seRkP2OJryYoXQlgrga6bnIoU8tqg=
Subject key identifier:   87:57:15:46:25:0B:25:BE:BB:42:F7:29:9A:3D:A3:29:8D:2B:AA:4A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491AA6B405346B249FE9B87800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b4:05:34:6b:24:9f:e9:b8:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=00c5b566-2832-4ede-bbc7-39113033d2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:b4:08:cd:02:b0:79:0a:53:74:c3:7f:51:
                    29:b5:ce:b1:dd:57:ad:26:c9:93:19:92:ff:f6:21:
                    a1:34:72:ec:7c:af:b0:36:9a:5b:b6:30:75:8b:7e:
                    7b:63:61:db:7a:e2:03:cf:49:40:60:95:06:e6:34:
                    33:4f:60:33:28:6f:ee:fb:e9:2e:40:12:99:98:c0:
                    db:03:d2:50:ae:66:b3:c3:3f:0d:05:0b:19:82:c9:
                    35:6e:6e:24:ed:b3:64:14:34:02:5d:18:43:56:af:
                    a0:55:b4:9e:ee:87:ee:86:58:d4:b4:89:3e:94:fe:
                    05:ee:50:77:a0:36:36:77:d1:68:cf:56:a0:13:87:
                    0f:41:a4:8d:b4:cb:2b:e6:bf:b1:fe:cc:68:61:90:
                    a5:84:73:a6:0e:fe:e9:b2:c6:97:e1:3d:53:32:8d:
                    c0:a0:fa:16:ca:9a:cd:73:90:f1:07:a2:2a:f0:30:
                    1b:61:d8:ba:f3:76:66:86:e0:5f:02:ea:da:ed:e5:
                    2c:02:88:53:b7:52:cf:fb:56:60:f4:e4:61:0c:f5:
                    b2:72:0b:c0:20:af:bc:79:c2:6d:59:ae:e1:e5:32:
                    6d:ae:58:3c:52:c1:ba:ed:9a:36:22:39:e4:42:e9:
                    ce:0e:2c:12:4a:b2:48:67:a9:79:e1:dc:de:3c:a0:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:15:46:25:0B:25:BE:BB:42:F7:29:9A:3D:A3:29:8D:2B:AA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:47:4a:e2:3d:b7:7d:42:03:9c:f3:ea:4c:17:60:0c:43:56:
         03:de:4a:f7:3e:64:5b:21:35:dc:68:f3:c5:3e:d5:65:b0:75:
         b5:de:de:90:c7:dc:72:47:6d:6e:2d:da:e6:d8:79:62:6c:4b:
         e3:d6:2b:84:8b:44:6a:cd:99:df:a6:8a:58:52:6d:0f:15:cd:
         30:63:b5:26:c8:d8:99:b3:30:15:df:75:84:38:28:3b:08:5d:
         15:78:a1:ab:e7:4d:93:ff:ce:eb:a7:c3:25:cb:2b:0a:7c:12:
         7b:c4:6d:85:46:b4:e0:cd:48:c8:c3:ac:fb:b5:1b:a2:1c:a0:
         95:8b:8d:f1:31:f2:dd:0b:6d:3f:5c:28:67:0a:ea:43:58:63:
         d2:da:b7:66:eb:91:81:c9:2c:30:5f:84:d9:6d:80:00:4c:5e:
         27:74:5e:9e:aa:9a:83:d0:85:c0:c7:4b:25:18:cf:b7:93:1a:
         9f:91:20:f0:44:87:62:f2:95:24:2f:27:e7:d1:ad:17:01:b0:
         df:61:4e:65:4f:d8:f2:51:0d:76:75:0a:bd:38:7b:22:ed:40:
         af:51:0d:68:a1:05:7a:12:02:14:b5:70:ea:af:4e:3d:a3:76:
         7e:a9:35:3c:0a:19:c2:01:5b:2e:07:fd:af:58:7c:11:72:66:
         b7:9c:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:07 2025 by rpki-client