Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/93bb1051-e2bc-3ada-8196-249f3705956e.roa
File:                     93bb1051-e2bc-3ada-8196-249f3705956e.roa (raw, json)
Hash identifier:          64y8c94MiI7ojeA4mfP+6VvpaSafUHoXyMTX9MSdXPU=
Subject key identifier:   B2:66:59:9F:12:67:4D:B6:11:D9:F5:46:FF:7E:DB:41:C2:59:80:7B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDC58C730053E98AFB1C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/93bb1051-e2bc-3ada-8196-249f3705956e.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.137.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:dc:58:c7:30:05:3e:98:af:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=a7d2c2a4-5924-4970-b081-916099659084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:1a:dd:f3:e1:85:ca:bf:84:89:0a:45:05:
                    f0:4b:66:f6:aa:5d:a7:57:a1:93:52:e1:b2:85:8f:
                    aa:95:fd:50:7c:ec:b6:c1:17:2a:85:0b:d7:02:ea:
                    ec:85:5f:07:13:11:1c:46:dd:c8:0e:4f:63:cc:d9:
                    a3:62:49:3f:ea:df:fe:bb:73:2c:30:82:18:1d:98:
                    39:dc:79:db:1c:90:92:ff:b0:50:3c:2f:5d:bc:d5:
                    eb:96:7a:00:e3:77:ea:82:7e:2c:94:8d:2c:cf:75:
                    e8:3f:f2:08:d5:5f:7a:c4:e0:88:9f:a1:8d:32:54:
                    d2:09:db:e9:01:e4:46:4d:b1:c0:67:c6:0f:c1:a3:
                    65:a7:44:00:4a:6a:5d:a0:92:cb:34:a5:f0:21:5d:
                    45:f0:6b:3f:aa:0d:a5:b1:de:e5:1b:24:f0:93:a5:
                    63:b4:b4:a0:cf:69:2b:44:ef:68:75:5b:33:49:7f:
                    a0:9e:78:d3:a5:79:c8:c8:06:3e:ab:ad:02:7c:10:
                    85:3a:50:e2:45:66:32:a0:20:23:ac:f2:30:b6:6c:
                    ae:4e:45:4b:26:b1:11:f4:4b:82:24:fd:d2:63:e0:
                    b8:2c:6a:28:14:d1:c0:76:a0:05:1e:af:1f:a4:c5:
                    2d:7f:40:af:1a:c1:54:05:a5:9c:21:0a:a8:6e:d1:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:66:59:9F:12:67:4D:B6:11:D9:F5:46:FF:7E:DB:41:C2:59:80:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/93bb1051-e2bc-3ada-8196-249f3705956e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:a6:50:47:48:99:48:e7:ad:80:bd:e6:98:13:80:30:6e:
         0a:ba:a7:03:4a:e7:61:36:6c:bb:7f:31:70:ea:a4:c6:1f:c4:
         bc:58:3f:34:1c:cd:5e:a8:da:a4:c3:71:0d:75:dc:96:46:97:
         e5:2f:de:ae:68:46:81:d7:40:f7:d1:3f:15:11:dd:7b:80:72:
         9d:f2:5f:3b:27:b2:2a:0d:58:cc:d4:6b:13:89:7c:58:f2:25:
         c7:16:d4:95:e4:37:46:af:9b:79:51:99:11:55:3c:54:d2:89:
         13:6d:e7:56:18:6f:55:36:d3:0a:0d:6f:ef:73:43:a3:af:fb:
         74:32:ae:41:1b:9f:cb:f5:21:f5:f9:23:f9:1f:f6:7f:56:fb:
         3a:79:4c:b6:ee:02:49:22:cb:76:d9:3b:ab:22:36:54:42:e1:
         c9:ae:55:67:63:aa:cf:65:81:4c:f4:b2:d5:cd:14:6a:26:fb:
         18:e7:a8:57:5d:93:33:8b:09:de:29:c1:b6:45:17:18:4c:bd:
         d6:39:c5:5c:a1:75:3b:24:2a:d9:ad:8d:87:73:cc:51:16:d8:
         c1:93:87:d0:41:23:af:c6:f3:8c:d6:82:be:38:71:d4:5b:53:
         7d:f6:3a:9d:b5:33:39:89:81:95:84:e4:eb:d8:be:65:27:e5:
         f6:97:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:29:20 2025 by rpki-client