Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7835e4df-0b5b-3167-aaec-203327fa4802.roa
File:                     7835e4df-0b5b-3167-aaec-203327fa4802.roa (raw, json)
Hash identifier:          MN3oExV/UL7ec+yeBDHF66vo0NLitTtMjs7p/LRqovs=
Subject key identifier:   56:21:61:AA:72:CE:20:48:40:F5:E9:27:8C:E1:62:32:4F:7A:39:11
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDD0388AC34F353F59D40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7835e4df-0b5b-3167-aaec-203327fa4802.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.137.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:dd:03:88:ac:34:f3:53:f5:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=bc6014cc-8490-4bf7-9785-4469aece1625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:80:65:b1:4c:15:b9:a6:46:42:ba:56:69:
                    86:db:c9:d1:bc:e9:48:8f:dd:a9:68:f0:22:72:80:
                    ae:c9:d8:05:d8:de:ad:90:11:bb:65:36:3d:f4:63:
                    c2:50:97:de:a8:5b:74:17:a0:67:38:0a:28:b7:d7:
                    e7:df:7b:82:ba:4c:58:05:37:37:5a:83:f2:01:a4:
                    9e:be:ea:0a:15:a5:05:24:77:39:68:1a:f9:8d:bc:
                    06:b5:ac:1e:27:48:65:65:3d:4a:4b:e3:41:d4:36:
                    a9:6c:00:33:80:33:92:94:62:f4:e7:ea:28:15:be:
                    d2:cb:01:c9:22:28:ff:03:ff:6e:08:3f:30:f7:90:
                    7c:fa:38:95:c3:ca:c2:f2:99:61:39:e0:47:1d:45:
                    92:9c:3c:2e:0c:3f:6c:4d:cd:a7:5c:69:6b:60:97:
                    34:38:f3:47:57:f5:1e:46:98:69:ed:8c:ab:55:d8:
                    60:25:f4:05:80:5e:7b:85:b6:53:3f:f0:60:85:84:
                    e3:e5:00:e9:5f:7f:e6:53:55:73:c4:f6:af:af:6b:
                    12:10:b7:d4:f8:ed:53:16:ef:2d:e7:58:4d:a6:e3:
                    b3:0e:ce:4e:24:67:93:37:35:b5:13:a8:ab:e7:42:
                    c4:42:cf:cb:1c:15:d1:79:27:57:e3:41:f2:a4:ca:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:61:AA:72:CE:20:48:40:F5:E9:27:8C:E1:62:32:4F:7A:39:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7835e4df-0b5b-3167-aaec-203327fa4802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:82:0d:0c:47:8f:9d:b9:c1:8e:c9:11:dc:06:ad:7f:73:
         95:8f:c5:1e:3e:90:9c:4e:96:53:7f:07:21:d1:39:36:cf:4a:
         0a:25:12:0c:b7:6a:46:47:b9:8f:a6:a2:2a:88:fa:3c:b3:7e:
         b1:d5:d5:f5:b0:6b:6b:8a:7c:b5:f9:5e:ee:aa:9e:4b:4f:1c:
         b1:cf:eb:29:5d:fd:b3:13:71:c2:e9:ce:05:f2:c8:11:90:30:
         09:32:89:ba:56:62:94:de:af:cc:4d:9d:42:54:0d:e6:96:6d:
         50:88:fc:ee:7a:71:9a:77:13:56:8d:32:96:63:a4:ad:bf:1a:
         8d:88:06:12:c3:8f:3a:60:ec:82:18:f0:ab:33:1b:01:9b:26:
         89:7c:25:3b:e0:2f:2d:dc:31:bb:61:ba:eb:23:1f:89:ce:e3:
         e2:44:5c:f6:09:62:2d:7c:55:0e:2c:80:f3:82:1d:d5:ec:78:
         10:48:dd:5a:15:e4:ab:94:82:80:f0:bc:d5:fe:14:b5:52:b2:
         9a:59:d2:63:0d:82:f9:53:c4:3d:a3:0a:25:ff:6c:b9:11:bb:
         cb:06:25:6e:52:56:46:4e:f1:fa:5e:95:ca:ff:56:bd:99:65:
         03:7d:de:ef:40:db:c0:18:df:fc:bd:90:b9:4a:19:40:6d:f0:
         4a:fd:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:28:48 2025 by rpki-client