Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa
File:                     524939f9-2055-3136-af33-79605998de56.roa (raw, json)
Hash identifier:          ceJzoc91bEgzqutwDKcXxYUysgOYAjdOkGd7LFBRHhY=
Subject key identifier:   55:2D:7A:50:F3:DD:61:E1:21:D7:FF:AA:30:3E:76:82:C0:A5:E1:4E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904E33262A32F5615897500
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        130.137.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e3:32:62:a3:2f:56:15:89:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=48e1954f-e8a5-40a1-b067-3266e87d4e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:10:c4:7d:4c:90:3c:a7:f1:7d:0e:4e:93:70:
                    ed:58:3a:f2:44:6c:4f:56:f2:8b:3b:0f:1a:d3:03:
                    64:5f:6a:7e:01:69:dc:eb:12:58:12:34:91:c8:52:
                    37:19:4b:50:2b:ae:c4:12:39:be:f6:37:c2:d1:c8:
                    31:79:57:c6:9d:cf:c1:fd:83:7d:bb:62:e7:3f:30:
                    7a:20:99:96:02:8e:78:48:63:0f:63:74:b7:29:4c:
                    5e:85:08:9b:e2:0b:f1:cc:d1:b7:ce:cc:12:a3:5e:
                    77:6d:4f:53:7b:39:25:e9:53:59:8d:c4:25:5d:92:
                    61:28:72:70:b5:2c:75:a9:79:1c:13:8a:65:9b:36:
                    49:3a:71:04:ec:46:ee:35:99:73:bf:cd:13:8b:e5:
                    bd:6f:18:75:67:9a:d6:f8:4b:a2:80:73:95:58:d4:
                    ab:ea:e9:03:dc:63:7c:23:a5:c0:12:12:d9:47:ec:
                    19:0e:a7:50:a4:b7:e8:67:28:0d:69:c7:6b:06:b4:
                    27:6f:10:61:79:22:cf:84:f4:67:6a:5e:5f:01:27:
                    0b:c7:d0:dc:b8:fa:03:6c:95:18:37:41:a7:62:5d:
                    8c:c9:91:3d:6a:1f:03:c1:51:e0:4c:92:e7:2b:2e:
                    a6:4c:32:b3:9b:40:91:7a:24:ec:73:7f:85:fb:a3:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2D:7A:50:F3:DD:61:E1:21:D7:FF:AA:30:3E:76:82:C0:A5:E1:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:0b:3f:a2:c7:1e:41:1c:28:2d:97:0c:cf:7f:11:94:d0:
         b9:ed:5c:6e:33:8e:53:6e:d8:09:fa:da:75:b7:a7:48:fb:10:
         9c:2e:e7:98:88:60:46:a4:1d:22:1e:62:16:cb:0e:5e:8a:cc:
         84:c9:52:e8:bd:53:c2:89:ae:4d:e6:1a:85:b2:50:69:4c:89:
         00:0c:fc:95:16:8e:36:b1:1d:60:d3:7d:1b:56:f0:7e:42:64:
         38:15:62:8c:11:87:30:e7:71:5f:2c:c8:73:4d:f7:71:e3:b1:
         c4:2f:ea:8f:b9:0e:69:6b:f7:94:35:4a:d7:15:60:65:2f:5d:
         36:68:39:35:08:7a:41:59:db:74:fc:cd:0d:ff:57:99:57:0c:
         07:fe:db:98:97:94:58:86:dd:1a:a1:cb:ba:48:5f:e9:ad:68:
         65:9a:01:c5:0c:cc:01:a9:21:b6:36:b2:35:e0:45:bb:9a:24:
         aa:33:ae:f4:c4:94:ae:67:5c:40:55:d1:df:b3:91:85:5d:62:
         db:eb:6e:99:50:e6:60:3c:90:fd:8a:f2:d5:1b:ee:ff:ba:04:
         d5:cb:ad:34:2c:8c:0a:4c:4c:5e:f4:5f:f1:a1:2b:4e:6d:c8:
         4e:64:ee:29:df:b2:96:4a:98:bb:f0:b3:41:4b:40:3c:de:14:
         43:eb:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:58:39 2025 by rpki-client