Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/60bd2dfb-c6ef-3953-923e-dc7d0e5243be.roa
File:                     60bd2dfb-c6ef-3953-923e-dc7d0e5243be.roa (raw, json)
Hash identifier:          QQ2/hPBG6ohW3jnM7GlzbWZKMip3AmIcQWiIWJ6gS0I=
Subject key identifier:   BF:15:09:D6:3B:7C:09:5B:A6:37:65:F5:69:61:A5:CF:11:5B:5A:E2
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDD6DCABADA04B07BB780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/60bd2dfb-c6ef-3953-923e-dc7d0e5243be.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.137.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:dd:6d:ca:ba:da:04:b0:7b:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=3ef70f0f-bd08-4dc4-8da1-d0856c294b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:7a:78:2c:97:e6:b7:98:6a:2d:d8:4a:a8:
                    70:11:3f:77:3b:85:1e:70:f3:df:f9:c8:ce:6e:19:
                    d2:2e:25:9a:b4:a1:fd:e9:e3:fa:24:15:b4:d5:de:
                    ab:12:77:37:7f:ac:f3:b4:0f:a8:5f:38:bd:c5:dd:
                    78:ea:df:7f:2d:07:61:0b:48:d2:e6:b9:07:e4:30:
                    bd:70:fa:3c:5c:5f:0f:64:52:9e:58:80:6e:ff:f0:
                    8f:14:73:60:4e:42:b0:b3:f6:85:10:41:4a:cd:fc:
                    bc:38:ef:11:44:ed:66:8e:7b:2b:1c:eb:5a:96:93:
                    c8:7e:4e:c5:01:a8:2a:e6:24:17:8b:65:7b:50:6d:
                    39:a1:6f:3d:2e:66:91:e8:0c:75:c0:f0:99:55:50:
                    e5:60:3f:f7:35:4b:38:3e:39:5d:ee:32:29:2d:7c:
                    7d:ef:26:61:29:2e:f9:ca:81:0f:da:3d:c1:32:03:
                    55:28:3d:26:51:ec:b4:2f:25:ad:f3:e9:42:5c:2d:
                    ab:bb:57:76:d7:a1:1d:a8:cb:ef:0b:b6:29:59:32:
                    cd:93:12:f0:0c:99:6c:3f:d4:bd:71:67:50:eb:33:
                    0c:8b:75:04:ee:10:31:4f:ab:5c:a7:cb:25:f0:7c:
                    74:49:1b:99:92:63:22:aa:cb:42:24:d3:02:18:05:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:15:09:D6:3B:7C:09:5B:A6:37:65:F5:69:61:A5:CF:11:5B:5A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/60bd2dfb-c6ef-3953-923e-dc7d0e5243be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:a2:2a:37:5b:7d:ec:d1:99:e2:a0:37:35:0a:36:70:28:
         6c:8a:a4:77:31:d3:7c:5f:4c:24:fd:84:30:64:d1:89:50:ec:
         54:46:6e:12:90:21:97:b3:64:60:b5:ff:6d:47:e7:29:43:1d:
         d3:91:0b:c3:f9:86:4a:31:1f:f8:1b:f8:9d:e9:fe:8e:12:e9:
         42:05:85:e7:a3:39:6d:37:b2:97:b0:9e:9f:15:04:42:29:4e:
         aa:2b:9f:08:49:e3:6c:9e:f8:28:80:39:1f:cf:81:9c:65:9c:
         07:37:b9:2d:13:df:5b:fc:32:1b:a8:22:06:ac:2d:27:03:05:
         08:74:a5:f4:0c:57:e9:ef:13:16:c9:ce:1d:35:b9:4e:85:3e:
         2a:0c:c0:10:b1:e3:9f:85:2d:4d:e6:38:2a:84:00:d3:8f:82:
         43:f9:bc:4b:52:5c:0d:84:b8:e4:5f:37:c5:f3:42:34:89:8d:
         a7:b9:1d:8f:e9:14:12:97:db:e4:db:f6:17:a9:71:f0:47:b9:
         63:fe:0e:9b:78:7e:62:05:6e:5e:e3:08:47:f9:ab:37:76:e8:
         0d:9c:3c:c1:dd:b3:f0:39:98:41:17:ae:77:8d:36:fc:4c:c5:
         f1:8d:68:73:1b:b1:49:a3:3b:d0:98:ae:45:01:1e:5f:4d:9e:
         95:d9:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:28 2025 by rpki-client