Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/936e6cfb-5344-3d26-b418-c0defed2e64b.roa
File:                     936e6cfb-5344-3d26-b418-c0defed2e64b.roa (raw, json)
Hash identifier:          6/L3pQdSiF7xAAzPpcytMGFeouvRv9NRyYK+hptoyO4=
Subject key identifier:   E7:7A:05:B7:11:49:36:AF:9E:25:36:63:8B:7A:6B:EC:42:A8:AF:EE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491AA6B52C1B00383F2F9C2588
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/936e6cfb-5344-3d26-b418-c0defed2e64b.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b5:2c:1b:00:38:3f:2f:9c:25:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=75a5c28e-592b-4de1-a91b-c4d298b63b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:3d:b1:e6:af:38:37:c9:cd:13:89:43:83:
                    7d:d8:47:cf:a4:f8:cc:81:79:27:1f:14:2d:18:05:
                    ac:e3:b0:41:e1:fd:3c:36:89:9e:b9:c6:59:56:90:
                    dc:50:c7:e3:5e:4f:29:b3:f8:71:48:2f:cb:e3:68:
                    53:b3:37:cc:44:88:30:d9:c3:7e:a8:80:6c:ea:2e:
                    dd:59:7d:7b:82:a4:cb:af:6a:40:1b:54:af:57:6f:
                    a9:06:e1:eb:25:4a:5a:52:d4:d1:49:99:7d:98:b5:
                    bb:2c:de:e0:ba:0b:09:4f:ed:b1:9c:04:26:21:4c:
                    e4:22:e9:d2:c1:40:3a:d4:56:1f:2a:16:88:80:91:
                    1f:fe:1e:5b:5f:b1:ca:b6:fc:d0:c3:ba:0a:19:28:
                    c8:68:03:df:bc:37:17:ff:af:4a:aa:7e:60:32:1c:
                    41:a0:e3:cd:99:0b:19:29:a9:b7:08:63:53:30:fc:
                    23:5f:ae:8b:4e:32:b7:fd:28:45:04:5b:61:a4:dd:
                    09:07:75:09:c2:21:06:4a:ac:3f:86:cd:2c:f6:89:
                    0e:ec:dd:53:9d:13:65:b9:28:e6:9d:5c:d9:eb:2f:
                    87:11:bc:c9:3c:43:c3:2e:32:51:5d:3d:67:f5:02:
                    2e:c2:9d:5d:8b:4f:b5:96:fb:1d:a2:07:1f:c0:2b:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7A:05:B7:11:49:36:AF:9E:25:36:63:8B:7A:6B:EC:42:A8:AF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/936e6cfb-5344-3d26-b418-c0defed2e64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:50:c2:a3:4a:05:dd:ed:eb:08:17:72:6b:22:49:ed:d8:
         9c:51:90:56:98:8f:fb:4c:00:ff:e7:f4:3b:f6:91:bb:2b:92:
         bd:17:ff:10:e3:4e:36:94:17:d1:eb:f6:d5:95:d0:52:d1:da:
         2e:43:2e:aa:f1:6e:8f:d5:59:46:b2:b0:44:ff:8e:98:a6:c9:
         cb:33:b8:fc:46:e3:7a:1c:ba:26:41:27:29:33:fe:66:84:f0:
         fc:68:4a:d2:43:a9:46:b8:71:b5:56:28:ca:0c:93:a3:1a:8c:
         00:d4:0b:d3:bf:db:ff:8a:88:f5:7a:08:e2:b1:99:32:80:f0:
         c8:cb:07:b1:82:bf:06:a7:17:21:84:d2:88:31:78:b5:c4:4f:
         d1:b6:6f:35:b5:b5:66:2e:8c:a2:b3:ea:47:7f:24:c1:11:41:
         f2:09:46:a3:36:92:a3:3b:3f:57:51:9b:da:d4:d1:13:d0:14:
         1d:00:d0:cb:2a:69:85:ae:e8:b1:69:5a:59:02:c6:25:eb:5e:
         7f:67:67:73:9a:d5:8d:fd:db:39:74:a7:55:bb:3b:d9:6d:46:
         da:5e:4b:03:88:28:7c:89:f8:bc:a6:48:42:eb:61:25:47:5f:
         f5:4e:43:a1:24:71:39:ca:5b:69:ac:60:0c:36:4d:68:0c:e5:
         1e:9e:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:49 2025 by rpki-client