Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa
File:                     524939f9-2055-3136-af33-79605998de56.roa (raw, json)
Hash identifier:          EYvtoGYERiRDDRmMrWpg6eQVrG2yXdCRMx0olE6+vUI=
Subject key identifier:   0D:A9:84:91:B8:86:D2:A8:41:1E:23:FB:0F:6D:07:B4:3C:76:7C:FB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB21CCF67BD05FDD55B00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b2:1c:cf:67:bd:05:fd:d5:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=75deccad-ff02-4afc-9c0d-2daf7b0b8a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:81:ff:d9:cc:c0:09:27:26:bb:de:22:b8:
                    a3:3e:92:6c:a0:dc:60:d9:a4:7d:c0:29:33:83:75:
                    fd:f7:21:a9:f5:4f:d9:22:f6:a2:64:68:63:32:5f:
                    27:ec:da:9c:a8:22:7f:e0:e4:25:91:85:f3:c6:5a:
                    4a:e4:59:68:95:ae:ab:20:5e:0c:4e:8f:8b:45:30:
                    26:1d:db:41:d8:d4:67:91:2a:ef:7a:bb:95:9e:e8:
                    03:44:48:37:86:8f:1b:d3:f2:c0:c7:01:85:8b:26:
                    9e:06:29:01:9d:fb:8e:1c:14:54:f8:73:b1:30:26:
                    e1:e8:1f:99:6b:87:d3:32:4b:63:19:1d:f0:32:47:
                    1b:78:96:2e:27:20:12:07:68:f3:be:f7:94:ed:27:
                    c8:06:78:e4:1f:1f:d2:e9:ea:40:38:7b:a2:1e:c6:
                    da:06:ff:3b:7f:3b:dc:59:4b:f5:65:f5:ba:e8:c8:
                    b0:78:d7:bf:6c:c9:cd:40:63:c4:1e:b9:fb:2f:30:
                    be:5b:1e:2e:26:7f:22:44:3f:42:06:27:0c:7d:3f:
                    18:a6:83:1f:b3:68:5e:3b:3a:cc:5d:43:b1:67:5d:
                    4b:d3:d8:67:1d:3e:d6:17:af:8b:1f:f2:a5:f8:15:
                    9b:20:aa:2d:3f:93:a7:6b:de:b5:db:16:f2:94:58:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:84:91:B8:86:D2:A8:41:1E:23:FB:0F:6D:07:B4:3C:76:7C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:ba:a2:ce:6f:5b:35:61:b9:40:cd:06:c3:d7:9e:b7:42:
         17:42:45:52:59:61:3c:48:b4:ee:9c:35:36:54:4d:c3:b5:87:
         bb:2b:af:09:2b:47:5d:fe:27:f3:21:f9:98:fa:ee:59:eb:31:
         2c:a7:b3:0d:c6:d4:34:2f:eb:a0:6b:f3:75:ac:e6:79:88:66:
         64:5f:73:64:6a:1f:6d:ee:c7:e2:8b:b2:70:94:92:d9:eb:de:
         6e:52:1c:3d:f5:0c:07:cb:9c:75:4b:2c:06:a2:dc:4e:c2:1f:
         62:a9:3d:72:db:43:c6:69:04:c8:85:a7:06:f8:95:d1:5d:a9:
         03:4c:ac:6e:92:00:49:1c:9b:0c:91:53:04:11:0f:2e:e9:20:
         1b:b4:49:6f:69:f3:d2:f3:4a:d8:55:15:a1:09:c6:42:4f:0d:
         0c:ea:02:63:11:fb:ff:9b:96:bd:df:37:c3:e2:8a:17:dc:c9:
         33:e1:be:53:3d:0b:ef:91:4b:2f:02:e4:be:bb:b0:05:d4:d3:
         54:3c:58:b7:d3:f4:9c:a3:43:d1:39:45:83:05:70:f1:f5:ee:
         5f:75:2d:ee:10:f0:5b:55:fd:5b:ea:98:33:81:50:75:ff:05:
         58:d9:8a:0b:6c:f0:fc:0f:a7:8e:1b:f5:46:1a:d5:1e:16:e9:
         df:ba:36:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7Icz2e9Bf3VWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
NzVkZWNjYWQtZmYwMi00YWZjLTljMGQtMmRhZjdiMGI4YTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVWB/9nMwAknJrveIrijPpJsoNxg2aR9wCkz
g3X99yGp9U/ZIvaiZGhjMl8n7NqcqCJ/4OQlkYXzxlpK5Flola6rIF4MTo+LRTAm
HdtB2NRnkSrveruVnugDREg3ho8b0/LAxwGFiyaeBikBnfuOHBRU+HOxMCbh6B+Z
a4fTMktjGR3wMkcbeJYuJyASB2jzvveU7SfIBnjkHx/S6epAOHuiHsbaBv87fzvc
WUv1ZfW66MiweNe/bMnNQGPEHrn7LzC+Wx4uJn8iRD9CBicMfT8YpoMfs2heOzrM
XUOxZ11L09hnHT7WF6+LH/Kl+BWbIKotP5Ona9612xbylFjY7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2phJG4htKoQR4j+w9tB7Q8dnz7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTI0OTM5ZjktMjA1NS0z
MTM2LWFmMzMtNzk2MDU5OThkZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgollMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpGuqLOb1s1YblAzQbD1563QhdCRVJZYTxItO6cNTZUTcO1h7srrwkr
R13+J/Mh+Zj67lnrMSynsw3G1DQv66Br83Ws5nmIZmRfc2RqH23ux+KLsnCUktnr
3m5SHD31DAfLnHVLLAai3E7CH2KpPXLbQ8ZpBMiFpwb4ldFdqQNMrG6SAEkcmwyR
UwQRDy7pIBu0SW9p89LzSthVFaEJxkJPDQzqAmMR+/+blr3fN8PiihfcyTPhvlM9
C++RSy8C5L67sAXU01Q8WLfT9JyjQ9E5RYMFcPH17l91Le4Q8FtV/VvqmDOBUHX/
BVjZigts8PwPp44b9UYa1R4W6d+6Noc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:54 2025 by rpki-client