Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a410aa32-819c-3445-83ff-379db6befb3f.roa
File:                     a410aa32-819c-3445-83ff-379db6befb3f.roa (raw, json)
Hash identifier:          qlVj/pX/xEJAty00gVkDQliq3zuhDbvxh/pp3wGuhfk=
Subject key identifier:   59:3C:A3:04:57:09:DE:E6:42:6F:F6:C4:F4:08:0F:D6:C1:EB:1A:8A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDCB45FB78722708D41D0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a410aa32-819c-3445-83ff-379db6befb3f.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     4294967290
IP address blocks:        130.137.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:dc:b4:5f:b7:87:22:70:8d:41:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=ac711792-cb6c-4ba7-ad78-ef763d165b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:1f:59:16:e1:cd:16:77:fd:90:0f:79:1e:
                    50:7a:cb:a5:2b:85:9b:46:a3:ce:28:68:3f:12:30:
                    52:35:b9:b5:72:1e:d1:e5:96:fd:77:10:4c:97:4b:
                    d7:93:a6:45:31:8b:46:a9:55:de:ab:ef:24:31:cc:
                    63:2c:d1:04:8d:18:c7:22:0f:42:a3:9d:29:b1:7f:
                    79:cd:89:d3:2b:f5:62:92:73:37:4c:ae:b8:34:9d:
                    ac:da:c4:69:72:82:c1:86:38:f4:90:ff:10:18:0a:
                    67:e2:d8:4e:b4:7d:b7:78:eb:f1:61:31:51:ac:d1:
                    24:2d:d4:24:9f:71:df:d2:7c:c8:a7:c6:cf:2f:e2:
                    ad:07:b9:20:1d:ff:b1:00:9e:85:22:8c:52:f0:33:
                    eb:cc:5b:d2:7c:69:ec:53:65:7f:75:d0:5b:da:ab:
                    38:ab:29:c1:8e:fa:26:f1:ed:f1:31:8e:ad:45:31:
                    00:6d:cc:ea:89:ed:2b:91:42:0b:1e:05:42:8c:74:
                    b7:de:0a:11:21:56:94:a3:35:af:45:36:21:f8:bd:
                    fd:e4:c2:7e:e1:f0:1c:6f:3b:ee:21:68:69:ff:9d:
                    1e:bc:9c:1c:cd:d7:32:af:ce:c8:89:66:ee:81:2b:
                    55:dc:a6:87:b5:19:a4:c0:be:a4:a8:38:1d:77:7a:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3C:A3:04:57:09:DE:E6:42:6F:F6:C4:F4:08:0F:D6:C1:EB:1A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a410aa32-819c-3445-83ff-379db6befb3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:70:18:3a:af:f9:94:f6:9d:65:87:0b:bc:ae:39:2d:f4:d2:
         a5:7d:59:67:e5:d1:62:23:e9:1b:61:50:43:b7:80:3e:01:ff:
         5c:32:80:63:00:4f:74:14:71:bc:9c:28:f9:37:58:9e:86:42:
         56:a8:29:d9:9b:e7:1e:1d:b7:57:b6:a1:6c:27:28:96:8a:94:
         84:ce:a8:fa:91:38:d7:6a:e5:33:5b:4d:42:a1:10:81:8a:20:
         17:4d:76:20:3e:3f:86:3e:35:72:37:31:2d:12:84:9a:57:9b:
         4e:ce:e8:f4:b9:d3:f3:81:ae:3a:10:49:76:fc:4f:a0:3f:d0:
         58:32:cd:d2:e7:0c:7c:d2:3a:c4:34:76:2f:ad:e0:fc:2a:bb:
         5f:91:b3:bc:02:57:e9:15:70:14:30:e2:28:67:5f:0a:03:63:
         51:93:55:d1:b5:f7:99:f3:48:03:ce:d2:b0:04:ec:b0:f7:3e:
         58:24:24:4b:eb:a5:5c:0e:2e:2f:6a:bd:85:87:6b:4d:73:d7:
         f6:24:08:e3:02:9b:1d:47:ad:9b:2c:f9:cc:3d:17:83:74:68:
         c7:8c:d1:5b:f1:7a:3f:00:42:58:3e:a0:a4:bd:28:2f:ba:ef:
         58:f4:4c:ad:b7:aa:c0:bf:a6:00:9c:b9:50:1e:14:76:19:61:
         8b:a4:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:32 2025 by rpki-client