Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b37765d7-9512-3340-a584-906866a7739a.roa
File:                     b37765d7-9512-3340-a584-906866a7739a.roa (raw, json)
Hash identifier:          3pxgqhIBnVhGqTtWKET6H7Y5tH0nB537Sp628H+62sE=
Subject key identifier:   7D:10:62:30:0C:43:22:97:9F:B1:C6:D1:F1:5A:E1:D2:B7:44:D0:C7
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584953C418A67C00CC390ED1E480
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b37765d7-9512-3340-a584-906866a7739a.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.137.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:18:a6:7c:00:cc:39:0e:d1:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=16fe9cd8-669a-4f7e-a587-ad0939c38bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:99:af:36:01:0e:16:42:8d:8b:67:4e:9d:
                    1f:22:3e:97:04:4f:59:02:d4:b2:6b:03:3f:a6:81:
                    e7:c3:d1:d1:4a:82:97:62:1c:d4:b8:9e:6b:7d:58:
                    bf:a9:bd:b6:6d:4f:2e:e7:cd:6b:11:6c:b7:bb:52:
                    98:e4:b8:04:28:6e:b8:2a:3f:d4:e4:0f:1f:75:6b:
                    08:70:36:28:1a:ad:a5:64:fe:0d:1d:e4:88:b8:1b:
                    5a:54:cf:70:ef:98:e7:f0:b9:a6:ba:63:ef:60:e6:
                    23:5a:a2:f1:e8:4c:1b:12:51:17:8a:6e:e9:9a:b3:
                    db:92:52:26:ee:f3:17:dc:96:2e:f1:c0:d2:dd:dd:
                    79:c2:60:52:e1:52:68:0c:1c:d0:20:ba:fa:de:a3:
                    d1:17:66:63:a8:d0:8a:9c:c2:96:6a:02:a2:59:71:
                    73:22:ad:80:eb:1e:83:c0:e7:b6:f4:dd:97:fa:d1:
                    4a:80:b6:04:37:70:be:df:c2:e5:41:78:b6:1b:a6:
                    39:c0:73:c2:c4:8f:1c:8c:e5:5e:45:0c:bb:0a:e5:
                    b8:1a:05:13:c7:86:e1:d9:cd:9e:6f:c2:34:dc:df:
                    66:f1:f2:94:49:a5:e2:6c:8e:a0:5e:30:35:99:d7:
                    85:ca:f4:9f:4e:c5:79:3e:d4:13:6e:25:e6:95:9d:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:10:62:30:0C:43:22:97:9F:B1:C6:D1:F1:5A:E1:D2:B7:44:D0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b37765d7-9512-3340-a584-906866a7739a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:47:0b:ab:43:5c:68:30:d3:8f:24:de:49:69:e0:c7:22:
         36:1a:ea:f8:11:d0:53:f3:87:da:af:27:84:58:fb:80:21:6a:
         af:ed:03:58:88:23:8f:45:b3:14:0a:f3:db:43:fc:bc:e1:f3:
         6a:ef:2f:06:42:4e:37:09:bc:b4:78:26:03:65:e0:53:41:4b:
         ac:42:6e:6f:e3:32:60:c5:18:87:87:01:a1:a0:e0:77:0b:0d:
         c2:8e:22:b8:26:88:71:f0:1d:ed:b8:91:c0:39:e7:39:f7:c5:
         99:7d:2a:68:67:34:7b:14:ea:02:5f:52:53:1d:a9:51:ec:f3:
         51:64:c7:26:e2:61:52:7b:0e:63:4d:94:94:10:20:68:a3:f5:
         98:63:bf:b7:b0:8f:ac:ac:ab:4b:0a:50:49:7d:c2:d2:bc:8c:
         1c:1b:a2:6b:35:99:4a:2c:77:b6:c7:c2:98:02:fb:14:54:80:
         df:e2:5a:ee:3a:62:a6:21:c0:d7:c9:d4:f4:e1:e0:be:30:84:
         08:25:54:0b:ae:e7:f6:b4:5c:47:d9:dc:10:03:3c:58:70:96:
         69:79:54:f2:df:8e:b0:24:82:23:11:0d:9b:3a:f2:1f:40:5f:
         99:cd:bf:c3:a7:f5:bc:ad:92:cd:2e:b3:37:b3:d8:4d:9c:4a:
         16:da:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:04 2025 by rpki-client