Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/535c02ad-1a9d-3942-bb19-523764251c53.roa
File:                     535c02ad-1a9d-3942-bb19-523764251c53.roa (raw, json)
Hash identifier:          y3YNkQqSwXpj+02CvHE7XUNBg3Ezb6GKc/dAYIKkgXo=
Subject key identifier:   AF:90:29:C3:D3:DC:78:83:A7:5F:EF:D1:C8:48:FC:D3:9F:E1:A2:B2
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDBA076B64F964E5D8F40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/535c02ad-1a9d-3942-bb19-523764251c53.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:db:a0:76:b6:4f:96:4e:5d:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=b563d1ce-12d9-45de-8513-d0b798e71ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:bf:85:43:7a:00:80:a7:1e:32:68:96:23:
                    01:a5:4c:27:28:1c:a3:ac:7f:96:d8:7e:7d:a5:25:
                    8c:54:0d:6e:be:be:c6:f4:d2:e7:eb:59:1a:79:24:
                    33:12:54:c8:2a:91:e6:fd:ed:da:a5:fd:eb:e4:65:
                    63:0e:19:c1:2c:b0:29:42:0e:18:58:fd:6f:62:cc:
                    03:68:23:52:3f:35:4f:7f:61:03:23:67:1e:15:a9:
                    9e:e8:c1:17:72:e3:b7:02:8b:9b:a5:8f:9c:36:80:
                    89:b5:e1:29:5a:03:18:27:d3:87:2b:1d:a1:ca:67:
                    c7:a9:fa:71:a6:3f:b0:44:28:4d:c1:ee:b1:da:34:
                    ac:71:f9:57:5b:63:66:a4:5a:5e:27:1d:b2:1a:12:
                    3f:f3:bb:6f:c3:ff:fd:c0:c7:b5:db:a3:c2:d7:fe:
                    46:7d:1c:71:70:60:b2:23:59:08:5d:a2:34:64:de:
                    3f:5a:d3:85:16:63:bb:22:31:b9:e1:2e:37:06:17:
                    3f:90:17:e0:eb:94:4c:86:5e:82:62:ff:7f:96:a8:
                    3a:7d:25:cc:59:ab:b2:85:b6:4a:9d:9f:08:db:53:
                    5e:20:75:8e:fb:f8:77:49:45:6c:66:fb:16:31:31:
                    cd:fb:b8:47:de:a9:29:52:07:f7:1b:2b:a5:36:df:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:29:C3:D3:DC:78:83:A7:5F:EF:D1:C8:48:FC:D3:9F:E1:A2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/535c02ad-1a9d-3942-bb19-523764251c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:52:0a:d0:d5:9c:1f:09:6b:c1:36:0b:56:27:ff:e2:59:29:
         57:06:0f:92:8a:98:a7:47:87:43:71:19:4d:8b:67:c7:9d:5c:
         d8:58:46:82:92:ae:71:bd:83:da:e3:82:8f:22:c5:c4:73:dc:
         2c:dd:1d:b6:c0:30:40:15:2f:a8:60:29:5a:08:53:d0:83:06:
         fe:f4:b6:66:dd:7a:e9:be:9a:c1:8a:11:50:5b:d5:a0:41:50:
         9f:47:e2:61:5f:52:48:0b:2c:00:3d:42:1c:88:46:92:f2:ad:
         91:15:41:5f:0c:c3:56:41:e9:71:6b:6b:21:a5:a5:3e:4f:e6:
         d6:a2:0a:7c:2f:28:eb:08:80:75:21:1c:5a:ef:7c:ae:5d:55:
         5a:24:54:8b:27:2d:ff:d1:fa:6a:0a:25:6a:33:27:66:c4:cd:
         7a:a5:94:80:13:0c:1b:6b:8c:44:d9:3d:2a:1b:6e:70:03:25:
         e3:47:20:66:d4:b4:8c:d0:79:ce:bb:10:65:2a:ef:be:ff:49:
         67:f1:d2:a8:fb:6d:30:d5:e3:b3:d6:32:4b:ee:d8:4b:b8:5a:
         6d:8c:11:ba:01:93:f9:45:40:39:7e:28:f3:39:2b:fb:b8:61:
         3a:a4:e9:2e:20:02:9b:90:7a:fc:3c:fe:d2:c3:b0:45:83:f1:
         ec:ab:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:08 2025 by rpki-client