Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/52304e1b-438f-3b9f-a4c4-5afffc2df446.roa
File:                     52304e1b-438f-3b9f-a4c4-5afffc2df446.roa (raw, json)
Hash identifier:          3D+LoX0+XmXOjpsaK+eQn70yUlq+YIaQv/J/UNXL2Rw=
Subject key identifier:   6B:5A:75:32:1C:7A:17:E2:E7:BD:B9:56:AD:B2:EE:2E:88:CE:B6:E8
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDD426DFAEF6A9DE28A80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/52304e1b-438f-3b9f-a4c4-5afffc2df446.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:dd:42:6d:fa:ef:6a:9d:e2:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=264184a5-ead7-4a3c-a2d9-bd7647590ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:80:09:58:39:36:cf:17:46:35:f4:f8:fa:
                    37:bc:dc:f3:43:44:c8:49:b0:01:bf:4a:d9:6b:05:
                    ce:d6:0c:1a:cd:33:c9:e8:e6:f3:5f:c7:3c:d5:f0:
                    12:50:13:32:38:1d:bf:35:94:04:6d:a8:7b:55:3f:
                    82:49:0a:16:a4:79:51:50:be:0f:c5:b1:a1:f0:59:
                    a1:64:e9:d5:84:0c:62:71:d6:fc:fe:b4:76:93:b6:
                    36:83:d8:7a:59:c1:03:ab:63:4a:42:22:d9:43:ce:
                    79:58:97:3a:80:1c:d8:57:9c:37:7f:c6:48:3a:92:
                    de:cb:17:86:48:a8:6a:c0:dd:5c:87:ea:ec:9d:01:
                    48:45:ac:42:01:d2:6d:67:ae:34:a9:13:85:24:37:
                    c2:e9:7f:be:10:49:10:c1:76:bc:d0:e7:fc:77:25:
                    b9:23:fd:f2:4a:43:b9:6c:a3:93:b4:88:32:c4:9d:
                    d3:e6:4d:c6:b9:3f:23:22:39:28:4e:93:a1:94:82:
                    01:36:48:08:d9:2d:01:54:bd:da:06:bb:43:b7:69:
                    25:72:3c:ce:c7:49:e7:13:51:97:c4:76:1b:bb:e9:
                    dc:66:d2:50:df:7e:f2:7e:45:4b:5b:d9:90:d1:74:
                    24:50:3c:4a:97:90:ae:f9:0e:96:8d:7b:ff:66:e5:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:75:32:1C:7A:17:E2:E7:BD:B9:56:AD:B2:EE:2E:88:CE:B6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/52304e1b-438f-3b9f-a4c4-5afffc2df446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7e:26:d7:e0:34:92:ca:13:a2:50:ad:75:d3:46:31:b0:ee:
         e4:3d:6f:47:fa:d6:5d:08:3a:4f:e9:7e:6e:11:31:e8:40:d1:
         99:d1:66:ed:74:83:7a:55:e4:8e:80:1c:05:06:21:18:97:47:
         d9:34:bd:38:e5:63:c3:e2:08:10:35:d4:2e:1d:87:05:7a:0b:
         ec:d4:b5:4f:00:5b:55:83:f3:26:7c:3a:93:f3:e3:48:84:72:
         f3:ad:2a:aa:90:7a:3e:74:c3:37:6e:aa:c6:bc:4d:72:b8:2c:
         42:4e:3c:a3:9a:38:2b:79:7d:9c:8f:36:ed:d2:db:67:73:e7:
         eb:97:b1:74:6e:f6:47:6f:a5:d0:a7:8b:61:0b:4a:ed:0d:24:
         6d:f2:f4:cc:d6:54:74:9f:2d:ac:e0:4d:a8:b6:04:32:2e:97:
         d8:14:55:79:08:c0:cf:95:99:1f:ee:59:15:37:b9:6a:31:0d:
         cb:2f:aa:2f:a2:38:16:7c:d8:8f:ad:f9:9d:0a:2e:c7:fd:eb:
         e1:98:0b:db:84:80:bf:d8:c7:b7:55:b9:27:c3:fd:05:26:f7:
         be:0c:6c:d1:31:00:94:e7:f1:9e:8b:21:9b:56:8f:16:e1:7e:
         f8:14:a4:15:b7:67:c1:56:2c:d1:f1:e0:e6:3a:bf:24:35:df:
         25:f8:57:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy91Cbfrvap3iioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MjY0MTg0YTUtZWFkNy00YTNjLWEyZDktYmQ3NjQ3NTkwZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eyACVg5Ns8XRjX0+Po3vNzzQ0TISbABv0rZ
awXO1gwazTPJ6ObzX8c81fASUBMyOB2/NZQEbah7VT+CSQoWpHlRUL4PxbGh8Fmh
ZOnVhAxicdb8/rR2k7Y2g9h6WcEDq2NKQiLZQ855WJc6gBzYV5w3f8ZIOpLeyxeG
SKhqwN1ch+rsnQFIRaxCAdJtZ640qROFJDfC6X++EEkQwXa80Of8dyW5I/3ySkO5
bKOTtIgyxJ3T5k3GuT8jIjkoTpOhlIIBNkgI2S0BVL3aBrtDt2klcjzOx0nnE1GX
xHYbu+ncZtJQ337yfkVLW9mQ0XQkUDxKl5Cu+Q6WjXv/ZuW27QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtadTIcehfi5725Vq2y7i6IzrboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTIzMDRlMWItNDM4Zi0z
YjlmLWE0YzQtNWFmZmZjMmRmNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJ+JtfgNJLKE6JQrXXTRjGw7uQ9b0f61l0IOk/pfm4RMehA0ZnRZu10
g3pV5I6AHAUGIRiXR9k0vTjlY8PiCBA11C4dhwV6C+zUtU8AW1WD8yZ8OpPz40iE
cvOtKqqQej50wzduqsa8TXK4LEJOPKOaOCt5fZyPNu3S22dz5+uXsXRu9kdvpdCn
i2ELSu0NJG3y9MzWVHSfLazgTai2BDIul9gUVXkIwM+VmR/uWRU3uWoxDcsvqi+i
OBZ82I+t+Z0KLsf96+GYC9uEgL/Yx7dVuSfD/QUm974MbNExAJTn8Z6LIZtWjxbh
fvgUpBW3Z8FWLNHx4OY6vyQ13yX4VxI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:14 2025 by rpki-client