Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b7b3f44b-3ae6-3b69-9052-4e7af99f42a9.roa
File:                     b7b3f44b-3ae6-3b69-9052-4e7af99f42a9.roa (raw, json)
Hash identifier:          teS31Dw9TTnnBI4l7H8fZ4Jiu45YryGpJQrU+TweMnc=
Subject key identifier:   85:AA:88:23:67:E8:3B:58:41:23:C3:15:10:86:EC:3C:7C:4A:D8:DA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848E9CBDD11A369701C650F9D80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b7b3f44b-3ae6-3b69-9052-4e7af99f42a9.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:dd:11:a3:69:70:1c:65:0f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=fcfc4c55-08ca-420c-b2e3-583fa486bd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:ce:eb:cf:9a:8a:18:4b:1f:1e:30:bf:33:
                    ee:e5:a8:15:8b:4c:3c:ff:04:dd:06:e2:2b:65:15:
                    b6:14:78:f7:66:13:ca:40:38:a5:16:fc:00:92:40:
                    cb:0b:50:d1:5c:a4:06:fb:e2:b0:87:e2:75:d9:05:
                    ff:31:3b:c5:0b:65:a3:d3:fa:81:2c:13:95:ad:64:
                    b7:ae:53:77:70:ac:b0:e0:61:18:5a:a0:39:2b:42:
                    65:22:f5:e2:97:8a:3c:dd:cd:0c:05:34:96:74:96:
                    9b:34:c5:9e:02:ac:99:a8:6e:a9:c5:62:1b:49:0b:
                    d4:11:91:56:d0:53:16:a8:18:f8:f3:1b:29:92:d4:
                    f9:75:da:a7:fe:5a:42:f6:25:f1:61:27:33:4a:e0:
                    3b:11:5f:e2:fc:1a:60:2b:29:75:af:b9:20:f7:67:
                    38:5c:e2:f8:64:1b:dd:be:62:05:ec:4d:e1:f3:43:
                    c0:9b:42:3f:00:a9:3c:fd:b8:73:cc:fa:48:60:f6:
                    76:ec:45:5a:6b:42:14:64:e0:c3:cc:f3:9e:1b:ba:
                    2b:1e:5f:37:57:09:26:c5:60:3c:0f:37:86:79:63:
                    5c:ac:9e:c8:a5:8d:b6:de:10:bc:c0:f9:49:a1:44:
                    82:8a:4a:35:f6:8c:9f:39:bb:6b:85:4b:57:f7:a7:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AA:88:23:67:E8:3B:58:41:23:C3:15:10:86:EC:3C:7C:4A:D8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b7b3f44b-3ae6-3b69-9052-4e7af99f42a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:33:e4:1f:62:92:19:35:13:ac:c4:bc:51:2e:fc:f5:f0:f0:
         63:25:48:1e:12:cb:65:13:ca:6a:a5:97:5b:e5:36:7b:ae:33:
         6b:68:d0:7e:dd:56:21:9f:3d:9b:8e:d1:c3:37:99:23:89:9f:
         e0:fc:67:e8:fd:c9:9c:53:fd:e2:00:64:e9:fa:c3:64:d8:01:
         8e:51:f6:a9:8f:86:7a:11:6d:81:a5:5f:20:9c:cb:4a:cc:7c:
         0c:af:66:05:7b:71:f3:d6:22:4d:71:6e:43:69:8b:11:e4:90:
         2d:09:c3:0b:14:15:f1:98:3c:b9:21:e9:a6:95:b4:dd:1a:ff:
         12:4f:1d:a5:70:a9:96:c2:38:4f:0e:5d:b8:aa:04:89:01:d4:
         92:61:99:6e:36:6f:7e:ad:f7:19:50:3b:8c:3e:61:a1:9a:41:
         79:b0:32:4d:c3:f3:86:53:d9:46:7b:90:63:93:97:9a:41:74:
         16:a1:f1:71:ce:49:3e:82:5b:d3:75:0d:66:9a:17:ad:5d:39:
         a1:82:c2:1b:a1:98:19:f9:35:c2:bd:cc:a8:e3:a2:0c:3e:40:
         8b:81:02:b7:e3:b8:40:6e:f3:8d:4b:ab:6b:be:44:31:66:64:
         8c:80:aa:61:4f:b6:95:d3:f7:cc:09:c7:19:ed:7d:1a:fd:b3:
         bc:4c:8b:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy90Ro2lwHGUPnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZmNmYzRjNTUtMDhjYS00MjBjLWIyZTMtNTgzZmE0ODZiZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD3O68+aihhLHx4wvzPu5agVi0w8/wTdBuIr
ZRW2FHj3ZhPKQDilFvwAkkDLC1DRXKQG++Kwh+J12QX/MTvFC2Wj0/qBLBOVrWS3
rlN3cKyw4GEYWqA5K0JlIvXil4o83c0MBTSWdJabNMWeAqyZqG6pxWIbSQvUEZFW
0FMWqBj48xspktT5ddqn/lpC9iXxYSczSuA7EV/i/BpgKyl1r7kg92c4XOL4ZBvd
vmIF7E3h80PAm0I/AKk8/bhzzPpIYPZ27EVaa0IUZODDzPOeG7orHl83VwkmxWA8
DzeGeWNcrJ7IpY223hC8wPlJoUSCiko19oyfObtrhUtX96cqKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWqiCNn6DtYQSPDFRCG7Dx8StjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjdiM2Y0NGItM2FlNi0z
YjY5LTkwNTItNGU3YWY5OWY0MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAz5B9ikhk1E6zEvFEu/PXw8GMlSB4Sy2UTymqll1vlNnuuM2to0H7d
ViGfPZuO0cM3mSOJn+D8Z+j9yZxT/eIAZOn6w2TYAY5R9qmPhnoRbYGlXyCcy0rM
fAyvZgV7cfPWIk1xbkNpixHkkC0JwwsUFfGYPLkh6aaVtN0a/xJPHaVwqZbCOE8O
XbiqBIkB1JJhmW42b36t9xlQO4w+YaGaQXmwMk3D84ZT2UZ7kGOTl5pBdBah8XHO
ST6CW9N1DWaaF61dOaGCwhuhmBn5NcK9zKjjogw+QIuBArfjuEBu841Lq2u+RDFm
ZIyAqmFPtpXT98wJxxntfRr9s7xMixg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:36 2025 by rpki-client