Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91110fef-b57f-3f5d-b037-1daea9146a6e.roa
File:                     91110fef-b57f-3f5d-b037-1daea9146a6e.roa (raw, json)
Hash identifier:          zLDS7diKdH3bsZa/h9G2ri2gkZ9h8KhsTyJfWDNNrUk=
Subject key identifier:   CA:7F:7A:1E:5D:2F:88:0D:FA:1A:3E:80:40:B7:64:69:AA:F3:C4:A4
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491AA6B5D3A03CBDA2B79DDBA0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91110fef-b57f-3f5d-b037-1daea9146a6e.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.137.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b5:d3:a0:3c:bd:a2:b7:9d:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=370b097d-c2ce-4f25-8788-1c11bef42c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:05:96:68:65:c9:6a:c8:cc:56:ec:fa:71:
                    46:62:f6:25:b2:fa:ed:57:70:59:12:b1:47:fe:61:
                    da:8f:44:f2:25:dc:d1:51:62:11:02:c3:a8:53:bd:
                    a7:c1:dd:67:13:9f:1e:a7:fa:f5:10:c5:b5:63:c6:
                    26:11:50:58:b9:c5:c9:d7:b3:69:9d:bd:a7:73:10:
                    61:68:d1:e6:8b:66:3b:cc:31:c0:5a:05:8e:d6:3d:
                    25:94:0a:20:ee:1d:fa:57:55:f1:4b:44:e9:aa:f2:
                    b9:86:4b:10:37:61:4d:f3:88:e9:a8:8e:34:13:7a:
                    30:f3:77:81:c4:5e:53:64:74:5b:95:9b:5c:a2:a4:
                    02:19:2e:ff:ad:e8:e7:3f:16:48:56:02:34:3f:16:
                    e3:65:8b:d1:15:74:ce:22:3c:3c:6f:ac:e1:7b:2d:
                    a7:33:23:e7:c2:99:71:72:1d:b5:7f:46:df:1c:af:
                    08:ef:3f:fe:31:c4:3a:a8:06:0c:7d:d4:2c:67:9a:
                    08:cb:25:36:fa:b0:94:b0:21:79:ee:d6:ce:66:a0:
                    0e:31:9e:a0:71:ee:39:72:55:69:43:c7:c7:9f:36:
                    9f:a9:ef:e1:93:58:7c:a8:25:f0:30:ad:83:b3:2a:
                    2f:a3:22:55:6a:0d:62:a3:a5:b9:90:ea:bd:75:13:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7F:7A:1E:5D:2F:88:0D:FA:1A:3E:80:40:B7:64:69:AA:F3:C4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91110fef-b57f-3f5d-b037-1daea9146a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:42:39:15:56:45:d7:aa:c6:60:fb:96:a9:71:a4:a8:8c:a5:
         1c:d2:17:3c:79:30:9e:5c:6e:cc:2b:fd:5c:e0:f9:79:25:41:
         d2:1e:89:49:a0:04:53:58:0b:38:7c:f7:ae:22:5e:4e:97:0b:
         4a:01:a4:1d:53:35:24:f7:11:76:0e:4f:cf:af:ae:3e:55:15:
         ed:55:51:ad:29:61:92:38:50:eb:d3:e4:63:2e:0b:d7:38:a7:
         06:47:98:47:c4:bd:97:bf:f0:dd:6a:4a:21:a4:28:72:33:68:
         62:53:bd:f1:d3:da:da:88:98:8f:83:24:a7:b0:30:9f:65:2e:
         c7:78:44:76:02:fe:5d:0e:66:13:d5:5e:5c:15:e6:16:6d:1a:
         6c:67:79:39:ae:f4:6c:8c:77:ee:44:d8:15:1d:9f:31:0f:34:
         73:a6:f4:d9:8d:54:98:a1:d1:0e:0f:2e:27:4c:80:94:a8:1a:
         f0:ee:cc:61:46:00:4a:5b:88:f9:1e:60:58:6b:04:71:fe:dc:
         ff:32:2a:5f:dc:e6:7c:93:25:e0:64:4d:22:81:7e:cc:2e:82:
         bd:60:ea:04:f3:b1:81:7e:9d:87:b8:0f:cf:8a:d5:1c:a2:c0:
         02:e7:c7:24:91:81:67:8b:85:3e:65:29:a7:b3:b8:96:3e:98:
         77:6e:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:21 2025 by rpki-client