Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa
File:                     b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa (raw, json)
Hash identifier:          FCTQjH1UHvFun8gdO4IB9OgjeBLirZs7LN+Uh1+tQvE=
Subject key identifier:   EA:39:87:66:FB:EF:84:82:14:F9:5B:74:82:26:3A:71:B1:BF:9F:7F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849C904E2E5F0D396C7C09FE940
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        130.137.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e2:e5:f0:d3:96:c7:c0:9f:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=f91104dc-7da9-4fdd-9b0d-e69aa68db17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:1d:95:de:08:8a:bf:e1:66:1e:8e:51:98:
                    3d:05:47:eb:9c:3d:81:b6:65:ce:4b:a1:1c:e5:17:
                    08:3d:b6:b1:67:c0:97:a8:78:fa:2e:cd:d5:18:a5:
                    33:81:6e:ba:b2:10:c7:4d:33:39:7e:01:51:41:94:
                    d6:6f:22:61:96:6c:1c:80:a5:39:64:e1:15:46:6e:
                    f7:6b:3e:a9:ab:86:61:07:54:43:71:b2:c4:0e:cc:
                    05:04:e1:a6:9d:9a:3c:44:e9:2e:9d:f6:28:fe:2a:
                    39:2a:d4:7c:e6:d6:b3:45:cc:24:b9:8c:79:33:d8:
                    d4:61:8c:90:e1:34:6b:00:b4:c0:16:94:11:5a:e2:
                    a2:1c:7d:7a:96:e7:42:83:8e:b4:5c:ca:ee:0c:df:
                    10:6f:57:f4:50:d4:72:0b:d8:01:33:33:8f:24:6e:
                    62:c4:d6:8b:11:74:ff:80:30:c5:17:d9:54:b2:f9:
                    a5:53:a6:4e:be:13:2b:14:7a:a7:ff:ff:85:4b:d4:
                    44:f9:a2:c6:86:b4:2e:5d:ed:6e:c7:c3:57:1b:82:
                    22:c1:76:d7:31:41:e4:fc:d1:7b:fe:98:56:33:5b:
                    1e:7e:5e:7f:0e:09:68:ba:fc:40:db:cc:05:84:52:
                    2d:76:93:5a:7b:95:5e:5f:b1:10:23:5a:ae:63:03:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:87:66:FB:EF:84:82:14:F9:5B:74:82:26:3A:71:B1:BF:9F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b3281932-f29d-3e34-ba8c-1b2a5c7fe372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:a1:b9:4b:90:c4:5c:a4:60:b3:13:db:39:da:50:f0:d8:
         ae:47:5d:e0:7d:cd:2c:a8:b0:08:c1:dc:a1:89:f6:e4:b3:7c:
         2d:fd:8e:d4:2e:9a:a5:f6:ed:3f:e5:0d:a9:fc:bb:08:b5:99:
         5c:9d:32:ac:d7:e3:50:1a:fa:9c:90:13:8a:4d:ee:34:ea:ae:
         50:8f:50:9a:a0:0a:a4:19:6a:ec:41:f7:4a:55:8f:0e:9a:55:
         52:dc:2e:80:93:ad:ae:4d:87:94:33:f7:01:b3:89:f5:e9:0e:
         5b:97:5f:a3:27:4a:85:a2:1a:54:f9:a7:4a:03:a8:81:38:13:
         ae:ce:bb:fd:d3:97:60:2b:3a:2b:39:70:1d:4b:e5:aa:17:23:
         57:79:56:4d:c6:a4:c2:bd:b2:a5:7e:97:19:f9:2f:e9:d6:f6:
         42:05:a3:75:25:99:53:ad:91:34:3b:b0:17:d4:65:84:9a:2e:
         56:41:4d:88:3c:08:e7:25:40:6c:55:dd:43:b8:30:4f:88:07:
         82:95:40:dc:4d:e0:ed:71:ca:de:01:4f:37:1f:d7:82:af:69:
         6f:7d:52:03:fe:b8:11:19:80:aa:c1:8e:9b:df:5e:e5:9a:17:
         60:45:96:59:ef:17:20:b7:2d:e2:90:b6:9e:2b:a8:70:56:16:
         79:74:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:24:25 2025 by rpki-client