Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa
File:                     3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa (raw, json)
Hash identifier:          tzbGjhbIGZnb/WuffLcMlky5exfbxL2MIbE7u88ikgM=
Subject key identifier:   5E:EE:9F:25:CB:20:0E:E7:DF:2A:71:DE:56:EE:8E:8D:AD:87:6B:63
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904DA1411B4AC4B6288B7E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        130.137.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:da:14:11:b4:ac:4b:62:88:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=516ab22a-4417-4147-8beb-ba8826c6977b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:14:ce:91:3f:f6:75:d5:05:94:bc:d4:fc:
                    a6:7f:c2:0c:38:65:18:85:cb:58:f1:8d:e3:67:ca:
                    dd:73:3e:57:91:f1:be:87:a2:1e:13:cf:d3:03:97:
                    a7:81:c3:63:6d:74:a5:23:78:d3:ae:29:87:22:ae:
                    9b:cf:1e:8c:1f:4c:cd:61:25:4d:2c:38:8a:16:bf:
                    59:ae:55:02:a8:39:68:ce:59:f6:cd:40:98:91:29:
                    bf:35:45:af:20:6e:a7:f6:45:9b:f4:53:50:c0:71:
                    2f:49:6e:fe:31:7b:34:b9:a0:90:7c:ba:9b:9a:7f:
                    f0:9d:84:7d:37:ac:fa:39:8d:44:c4:12:5c:a2:54:
                    bf:72:5e:d6:24:38:cf:79:ca:50:5d:8c:33:73:47:
                    63:e8:ea:0f:69:e7:2f:04:39:bf:a3:72:bd:a8:aa:
                    d6:8b:ae:7e:6c:fa:51:75:ab:4f:64:59:cb:8a:b8:
                    66:c4:cb:f4:6e:ea:c3:86:08:6a:a5:79:2e:eb:4d:
                    f4:c5:c3:bd:f4:ad:73:dd:3a:48:b0:cc:b3:f7:70:
                    65:62:96:b6:e5:14:9b:d5:5f:b2:51:c7:de:1e:4b:
                    5d:6b:bf:bd:60:6a:2d:50:7b:1f:69:41:12:50:0c:
                    66:93:3b:a7:4d:f9:4f:37:17:9d:59:97:84:7c:bc:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EE:9F:25:CB:20:0E:E7:DF:2A:71:DE:56:EE:8E:8D:AD:87:6B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:12:2b:46:6c:d3:0f:0c:9e:68:73:7c:d6:4b:12:f0:6a:
         5c:ef:3a:87:f2:1a:43:84:a5:dc:aa:a7:bb:68:1b:a4:42:fb:
         3a:58:9a:d2:64:21:7a:1a:68:a4:e6:50:56:c2:da:c0:d5:a2:
         89:ba:04:94:43:dd:8f:c4:5b:9e:34:6f:c2:9f:42:bf:a0:22:
         57:f5:ed:41:79:1f:7f:dd:cf:9b:3a:68:bd:43:7d:84:b6:f2:
         04:3f:b6:43:26:e2:ae:be:1c:52:21:9f:d1:00:1f:e8:d3:40:
         78:09:2d:79:ef:a0:ac:d7:97:98:44:74:cc:8e:b9:c6:6f:39:
         28:3c:75:98:dc:d3:2c:c8:2f:2c:91:86:89:bf:b5:f8:87:86:
         80:30:82:28:1d:dd:29:d6:4e:f0:8a:aa:fe:9d:7d:cc:e2:09:
         77:56:87:65:93:0c:12:81:21:d6:f5:ab:22:c0:d4:a3:93:0d:
         ac:12:7c:6c:a9:ef:d3:be:48:3f:43:57:7f:d3:43:e8:af:3f:
         9f:92:7a:53:b1:db:00:96:27:84:95:fb:5d:50:2a:61:c7:90:
         57:81:81:e2:11:c4:e4:83:5c:d3:67:6a:94:c1:32:a5:2a:fb:
         21:8e:d6:d5:7e:ed:16:26:49:8d:e2:19:56:24:a0:a4:ce:e4:
         d4:18:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:29:30 2025 by rpki-client