Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/50515038-53c1-3c55-8db1-bfa05a6b8a98.roa
File:                     50515038-53c1-3c55-8db1-bfa05a6b8a98.roa (raw, json)
Hash identifier:          /DWfHYjj4v7c3HLv8Cal2pblo30MhJz6rWIVyFKeJLo=
Subject key identifier:   72:4A:E6:F5:00:A4:83:20:07:51:A0:64:BC:DB:63:40:8A:F8:6F:E1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483E1AA734B701E4954335F560
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/50515038-53c1-3c55-8db1-bfa05a6b8a98.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:a7:34:b7:01:e4:95:43:35:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=32e1816f-6680-40ed-b91c-b8b974262250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:e9:54:54:09:06:26:f3:eb:e8:05:d4:54:
                    eb:13:c8:0c:74:f9:58:1a:92:05:38:a5:b9:60:2f:
                    e9:c8:4c:0b:f3:e3:13:b6:9d:8c:c1:19:a1:d9:ee:
                    fe:52:74:c9:30:a3:22:11:35:1d:58:a6:b6:2c:d0:
                    06:3a:0a:8e:37:53:4c:5e:1d:6b:9d:fd:e0:8c:f9:
                    a3:6d:de:05:4e:ae:18:44:4a:70:d6:a2:7c:ae:98:
                    6e:e7:c0:25:e2:97:2d:39:fe:fe:1f:61:e6:9b:6c:
                    11:fc:c2:ad:be:44:cd:7c:77:98:78:91:cb:92:9c:
                    55:61:f7:03:ae:52:96:07:9d:77:1c:6e:a4:4f:d1:
                    3b:bf:1b:0a:88:3b:b3:c3:38:61:12:33:0e:98:e3:
                    b1:c2:4c:46:cc:5a:16:fc:9c:f6:f4:bb:9a:03:3d:
                    61:b3:9b:83:f2:5f:97:ab:46:cf:cc:6d:d5:04:9e:
                    74:e7:08:1a:ee:bd:04:3b:cc:35:5e:87:09:4d:45:
                    90:15:42:6f:d5:74:76:11:65:ee:f6:a1:7a:3f:aa:
                    49:85:d6:00:ae:0b:1b:11:25:45:dd:29:e2:01:0a:
                    7a:30:4d:2a:ba:09:3d:8e:ba:c0:9b:3c:90:c0:85:
                    1a:f8:78:2e:40:c3:eb:f2:37:c2:80:c7:3b:09:15:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4A:E6:F5:00:A4:83:20:07:51:A0:64:BC:DB:63:40:8A:F8:6F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/50515038-53c1-3c55-8db1-bfa05a6b8a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:7c:c5:50:e5:fe:95:49:e1:c2:08:98:6c:29:32:97:69:1c:
         4b:29:cf:7b:be:d6:39:b5:46:20:a1:c3:23:25:fc:91:e9:c7:
         19:19:58:08:18:66:0d:15:31:e0:5f:cf:c8:86:0a:87:2f:b2:
         47:78:07:79:2e:1c:b0:5b:b0:57:b4:6e:12:49:ff:96:cf:3a:
         95:0a:e3:32:6a:aa:ff:76:08:a1:c7:3c:2a:02:97:1f:9c:83:
         b1:1d:63:1f:7d:77:8d:fd:55:a6:6c:45:d1:ff:71:ac:45:1e:
         30:5e:92:cb:7d:2a:c1:61:70:ef:4a:ee:83:f4:c7:cc:38:ed:
         9c:7b:da:8f:18:cd:4f:0d:63:b5:13:4c:2e:ec:55:98:4f:31:
         78:8a:9f:5f:58:cc:ca:84:1c:7d:6d:7f:99:4a:ce:79:d3:97:
         36:fb:e0:f9:28:9a:f5:4d:b6:69:ae:e3:b4:b9:e7:59:9e:2a:
         25:a0:e4:95:23:63:89:3f:56:9c:c8:b1:d3:2a:cd:06:a0:b8:
         0e:59:f7:f8:2b:a3:a3:50:ef:85:69:ca:a2:28:d2:a3:3d:ca:
         ac:dd:bd:86:0d:63:e7:59:73:ea:38:e6:8a:f7:fd:31:f3:7f:
         72:48:1f:aa:0b:23:f8:7c:cc:2c:b6:fa:b9:74:da:eb:2b:dc:
         ef:7b:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:52 2025 by rpki-client