Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/992fc342-db3a-3a07-90a9-c1ccd510f651.roa
File:                     992fc342-db3a-3a07-90a9-c1ccd510f651.roa (raw, json)
Hash identifier:          E7BvxNYu8tx+C2Xi1bBZCFD6rMM5iASEJ5cFmn9bEaQ=
Subject key identifier:   28:CE:73:31:42:8B:72:BD:DF:4F:ED:64:B7:1C:96:B8:C6:E9:FA:13
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858492E13BC9D042DA79ECE5C1280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/992fc342-db3a-3a07-90a9-c1ccd510f651.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bc:9d:04:2d:a7:9e:ce:5c:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=8c3d5423-2eef-4f37-8a6b-4112a5b7c71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:b6:ca:dc:70:20:a0:f5:fe:d8:69:bf:0a:
                    89:25:00:bb:d2:44:0b:aa:6e:d0:fc:c0:8f:cc:be:
                    b5:6f:03:37:dc:7e:b0:a4:9d:7e:65:5a:9e:97:4e:
                    e5:06:88:45:c4:df:6e:38:6f:55:d0:b0:0d:24:5a:
                    6e:4d:8a:4a:0e:bd:c3:60:f9:cc:d7:4f:e0:97:9f:
                    3e:19:4a:12:01:27:27:00:ed:a6:f5:72:bc:8f:1b:
                    14:39:96:16:9c:4c:69:c7:c1:fd:2b:12:02:04:a8:
                    92:24:8c:55:49:cc:4f:70:a7:5e:43:59:76:c9:20:
                    31:f1:2a:21:21:23:68:d3:0e:8e:5f:14:98:74:64:
                    9e:22:58:d1:1f:31:f7:14:c9:ca:6b:d3:75:74:36:
                    d6:ca:c8:f8:8a:ce:94:cf:aa:88:81:7c:a8:9a:74:
                    38:0d:a4:7b:b7:8a:d0:f1:d1:67:12:51:15:22:2e:
                    71:9c:d4:b2:81:6e:52:d8:22:aa:05:70:9c:49:84:
                    f0:d4:fb:e0:76:48:eb:78:30:85:c2:3e:e7:90:ee:
                    d8:04:59:2c:63:15:98:65:9c:26:c3:ed:7f:77:fc:
                    33:16:9b:74:1b:d4:47:4b:ea:f0:48:63:65:d8:a1:
                    82:16:8f:87:e9:6f:00:b8:6c:76:2d:89:c3:a6:4d:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CE:73:31:42:8B:72:BD:DF:4F:ED:64:B7:1C:96:B8:C6:E9:FA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/992fc342-db3a-3a07-90a9-c1ccd510f651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:32:b0:d8:25:92:3b:92:98:51:40:da:50:fc:af:55:9d:41:
         b8:c7:a1:52:b6:1e:3e:ae:c8:51:86:19:b0:20:ad:69:5e:21:
         19:0b:94:fd:1e:85:e2:f9:c9:77:73:68:7a:29:fc:df:ae:91:
         42:4a:0e:c0:13:5e:a8:0f:d3:b8:e3:97:02:10:e3:1a:f5:c7:
         29:63:52:fc:f3:6b:be:e5:de:b8:d9:db:a6:23:c4:9c:b3:fd:
         02:a9:65:95:3e:4e:50:19:0b:d0:d9:b3:fd:b9:c9:84:7b:42:
         f5:88:8a:dc:f2:be:18:b2:ee:ab:76:63:8d:d0:1d:f8:22:d8:
         3d:56:8a:38:57:d0:cf:ab:00:f2:af:40:f8:52:38:6c:0e:b3:
         84:12:a8:f7:30:3f:f3:a4:23:18:86:84:f8:f4:fd:e6:e0:5b:
         3a:3d:70:bb:d3:fd:9a:30:96:3a:db:5c:83:49:0d:b4:0f:8e:
         12:86:91:03:0b:d7:25:08:b9:72:5a:41:89:52:5b:66:bc:6e:
         96:2f:3d:29:52:49:1d:66:5b:a2:af:06:9d:f3:36:ec:8a:be:
         ff:99:fa:83:bc:29:45:77:c1:38:70:a2:52:e0:f9:ae:e4:fc:
         72:48:c7:6c:ba:8c:a1:24:9a:35:41:d8:9c:45:54:c6:12:07:
         02:a6:61:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7ydBC2nns5cEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
OGMzZDU0MjMtMmVlZi00ZjM3LThhNmItNDExMmE1YjdjNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvG2ytxwIKD1/thpvwqJJQC70kQLqm7Q/MCP
zL61bwM33H6wpJ1+ZVqel07lBohFxN9uOG9V0LANJFpuTYpKDr3DYPnM10/gl58+
GUoSAScnAO2m9XK8jxsUOZYWnExpx8H9KxICBKiSJIxVScxPcKdeQ1l2ySAx8Soh
ISNo0w6OXxSYdGSeIljRHzH3FMnKa9N1dDbWysj4is6Uz6qIgXyomnQ4DaR7t4rQ
8dFnElEVIi5xnNSygW5S2CKqBXCcSYTw1PvgdkjreDCFwj7nkO7YBFksYxWYZZwm
w+1/d/wzFpt0G9RHS+rwSGNl2KGCFo+H6W8AuGx2LYnDpk0aSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjOczFCi3K930/tZLcclrjG6foTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTkyZmMzNDItZGIzYS0z
YTA3LTkwYTktYzFjY2Q1MTBmNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIysNglkjuSmFFA2lD8r1WdQbjHoVK2Hj6uyFGGGbAgrWleIRkLlP0e
heL5yXdzaHop/N+ukUJKDsATXqgP07jjlwIQ4xr1xyljUvzza77l3rjZ26YjxJyz
/QKpZZU+TlAZC9DZs/25yYR7QvWIitzyvhiy7qt2Y43QHfgi2D1WijhX0M+rAPKv
QPhSOGwOs4QSqPcwP/OkIxiGhPj0/ebgWzo9cLvT/ZowljrbXINJDbQPjhKGkQML
1yUIuXJaQYlSW2a8bpYvPSlSSR1mW6KvBp3zNuyKvv+Z+oO8KUV3wThwolLg+a7k
/HJIx2y6jKEkmjVB2JxFVMYSBwKmYR0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:30:18 2025 by rpki-client