Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c127023-0dd8-3866-a0fd-5082cbccf197.roa
File:                     3c127023-0dd8-3866-a0fd-5082cbccf197.roa (raw, json)
Hash identifier:          t1+6tqYDefSAlLYROCKcL7xKQx3/p/sx6SKgB2hzZzs=
Subject key identifier:   6C:F5:02:39:84:0D:B5:6A:32:3C:F6:E3:ED:FD:0B:72:2C:0A:AF:B3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491D7176ABF659A8135D3876C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c127023-0dd8-3866-a0fd-5082cbccf197.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:76:ab:f6:59:a8:13:5d:38:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=78e48e76-d214-4986-920d-4317f5955df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9e:39:02:a8:eb:db:c3:79:bb:0c:47:6a:d1:
                    b0:c7:87:07:39:cb:99:66:ac:44:66:f9:ca:26:df:
                    29:2f:95:a6:45:8b:59:3f:05:04:62:9f:f5:f4:55:
                    63:29:50:7b:03:cc:44:0b:fe:0c:68:25:b9:b8:18:
                    ed:db:d8:f6:13:6a:70:65:0a:e4:b7:36:5e:1f:2e:
                    08:b0:de:23:73:b1:a3:6d:0d:ce:7c:a3:b9:3a:88:
                    7d:08:ff:8e:d2:6a:ef:e6:b9:99:db:bc:96:76:08:
                    e3:07:a3:cb:2c:4b:40:44:51:26:34:a3:d4:8a:00:
                    56:02:99:b2:ad:e6:89:39:3a:3d:ba:eb:2c:f6:18:
                    1d:34:09:43:a5:50:0c:2c:33:c7:e6:8e:e5:f5:8c:
                    b6:47:9d:2f:5a:a5:55:af:68:fd:e6:91:b0:3d:de:
                    3e:64:fe:b2:7f:24:a8:39:91:b6:df:96:5b:b0:44:
                    b2:05:72:8a:d3:5b:ba:3c:db:1f:ff:48:ec:de:25:
                    88:94:0b:a7:fc:b0:98:e0:b6:08:fe:2d:19:6b:bb:
                    40:5a:03:c6:80:82:30:39:9e:2b:b2:a8:25:9e:41:
                    fe:35:56:e9:f8:c0:23:29:d6:9f:58:49:7f:12:4e:
                    70:14:dd:7a:0e:b1:a5:70:25:69:59:be:c4:1f:96:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F5:02:39:84:0D:B5:6A:32:3C:F6:E3:ED:FD:0B:72:2C:0A:AF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c127023-0dd8-3866-a0fd-5082cbccf197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:92:8c:22:3b:33:c8:9a:8d:a7:79:d1:bf:31:ce:3e:13:
         24:41:ef:7f:c6:ed:55:3d:7a:47:d5:fc:cd:9f:10:b8:3e:04:
         c2:54:8d:b3:97:c5:73:be:81:92:dd:4f:b9:0f:04:27:fa:35:
         0d:9b:f6:37:36:87:f1:f4:ed:ae:ca:6b:d7:de:af:3a:8b:8d:
         6d:f1:c4:d9:dd:45:c6:5c:52:5c:b3:2a:e4:eb:63:d1:d2:68:
         b0:2b:d6:8c:43:88:7b:78:cd:8a:f5:6c:72:11:ff:fd:e3:ad:
         98:15:23:86:2a:ed:bc:7f:63:d1:4a:65:a3:8f:1e:1a:aa:04:
         18:be:06:66:1c:c1:70:27:24:be:39:fd:f0:09:1f:7c:95:97:
         3e:44:1f:4a:98:ba:a2:cc:bf:9f:34:37:71:c9:4f:5a:1b:4e:
         74:3b:5f:a1:09:c8:60:c1:01:c8:c3:e8:54:4d:df:b5:99:ea:
         a5:ad:3a:ca:e6:d8:61:d7:70:68:b3:67:41:eb:19:fc:3f:8e:
         83:e6:a9:b1:61:d4:81:53:4d:73:24:65:3a:b9:9b:29:c8:11:
         72:e7:b6:cf:c1:b9:ac:09:ac:d7:b7:14:cf:44:ba:61:50:70:
         44:5d:b2:e0:23:6d:91:6a:b8:b2:f8:77:5c:04:9c:d8:bc:d2:
         2e:0c:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:36 2025 by rpki-client