Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/999a1641-de76-3fbb-8fe1-f227dd2d0279.roa
File:                     999a1641-de76-3fbb-8fe1-f227dd2d0279.roa (raw, json)
Hash identifier:          1Oq0OKUq7TuMlc8Zo6BiKbjO/ruFvKlCtUG82EzE8ks=
Subject key identifier:   87:69:A6:47:74:81:CA:D7:DB:8F:CB:5E:D1:22:FE:8F:07:D0:6B:8D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848D7A648A3B21F75098D750FE0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/999a1641-de76-3fbb-8fe1-f227dd2d0279.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:48:a3:b2:1f:75:09:8d:75:0f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=4ab79aa7-8245-4609-8b9d-f319e2a49515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:ac:aa:2a:a7:af:12:29:11:de:f1:2e:73:
                    da:5b:5f:d4:61:1b:b8:f9:e7:73:b9:a0:47:86:6f:
                    5b:f1:8f:7b:09:f8:17:35:06:d2:2d:5e:43:be:67:
                    1d:3c:82:5e:26:2f:cb:6d:03:2f:95:40:26:6f:58:
                    b2:d9:81:c1:8d:35:26:c6:d6:4a:f7:f5:fb:13:0d:
                    8d:36:bd:30:21:a1:55:19:ca:2a:27:44:35:da:86:
                    c5:89:83:e5:26:b7:de:c0:d1:dc:c0:86:9a:1c:40:
                    6c:de:01:be:12:71:f5:52:6b:06:dd:f7:e9:fb:d7:
                    64:fd:9d:a1:fb:16:fa:d6:ae:62:5c:68:3e:ca:d4:
                    9c:fb:60:9c:4f:88:c2:96:4f:22:df:8c:65:26:52:
                    88:61:2d:05:70:7c:31:8d:44:a9:8d:50:82:1f:50:
                    75:01:7d:be:7e:8d:41:b1:0a:28:48:1d:fb:72:3b:
                    10:30:e2:65:da:90:c8:ee:d7:57:f8:87:0b:9e:a9:
                    8c:39:34:7a:35:65:7b:7a:bb:de:eb:e7:f4:e4:86:
                    14:38:c1:51:6d:d6:37:8d:6e:2a:ef:db:93:e6:39:
                    5b:3f:d9:91:4d:fb:3f:c1:50:93:c5:2b:27:a4:8e:
                    4b:fc:54:a8:a6:7d:dc:d5:21:45:f0:08:c2:c1:67:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:69:A6:47:74:81:CA:D7:DB:8F:CB:5E:D1:22:FE:8F:07:D0:6B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/999a1641-de76-3fbb-8fe1-f227dd2d0279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:27:61:fe:14:0b:c6:14:32:37:fa:e6:4e:56:24:c9:5c:18:
         79:1f:b1:1d:94:c4:b9:a2:82:92:82:d0:04:2e:f1:ee:b4:0f:
         e2:74:63:85:4a:15:df:10:fd:cd:a2:bf:99:c6:40:d3:a1:4f:
         fc:1a:52:e3:d9:06:fb:54:17:5e:12:de:a7:0e:f1:8f:73:ca:
         2a:f2:27:9a:e6:00:17:d4:59:4d:88:ee:8a:5d:c1:56:e0:99:
         20:2a:00:ed:a4:f0:5a:24:e9:0b:ef:6f:58:45:c2:19:1d:80:
         d3:48:a5:87:fc:62:a1:46:fa:fa:cc:c0:b9:61:86:ca:4a:36:
         15:27:fb:6a:a1:db:af:f5:29:ff:e4:3a:20:0e:e9:37:90:3d:
         e5:b4:6c:95:db:cb:53:1d:73:ce:d0:60:99:f7:b8:e4:4c:b8:
         cc:ba:e9:9c:0c:a3:f1:d4:d6:30:43:f5:2a:f4:ee:86:c2:2c:
         b3:29:54:17:3c:bf:30:a9:3c:91:d5:e9:97:15:d8:cf:45:32:
         25:6a:eb:a8:f0:42:69:64:c1:04:71:cf:7e:72:b1:06:4b:95:
         38:b4:f8:80:e9:4b:3e:cb:4f:e3:30:77:89:63:c4:0e:8d:13:
         0f:58:34:1f:79:ec:7a:51:58:80:bc:53:9e:a0:a6:ac:cd:f2:
         55:b5:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:18 2025 by rpki-client