Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b9503e4f-19aa-3679-be67-e7e97d57ddbf.roa
File:                     b9503e4f-19aa-3679-be67-e7e97d57ddbf.roa (raw, json)
Hash identifier:          WVdP6vWd8Hbi5nQBIIY+RwiifkyZl7L3ZoPq+EErras=
Subject key identifier:   72:CF:84:3E:A9:06:36:96:C2:45:0E:C7:19:35:0D:30:4A:0D:EA:7E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491246AA02020B72131AF4E160
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b9503e4f-19aa-3679-be67-e7e97d57ddbf.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        130.137.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:aa:02:02:0b:72:13:1a:f4:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=963c1960-6af5-4bb8-bd2e-04f41e032f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:28:b0:8f:75:65:6c:1c:1f:49:48:51:d2:
                    a6:77:29:f2:ba:fb:70:c6:8a:e1:68:50:2e:ed:66:
                    89:4a:bb:c8:0f:9a:59:e4:3d:2f:ad:f7:be:37:33:
                    cb:b0:07:b9:e7:8f:f9:58:58:f5:15:56:56:27:8a:
                    86:a5:f7:a0:06:b1:c4:ab:78:e8:1a:a6:12:d7:a1:
                    b9:3c:b6:42:97:a3:45:1e:25:2e:10:bb:87:e5:f8:
                    b9:4a:45:1d:eb:3b:a4:8d:0d:ed:8d:fa:5f:11:44:
                    97:e9:7f:63:00:60:5d:61:0e:17:0c:7a:61:9e:53:
                    e3:44:8b:44:bc:27:73:8e:f7:c1:5c:d3:44:2d:1a:
                    94:33:40:b3:4a:e8:00:a2:3a:33:1f:28:3f:41:b6:
                    f0:f6:5c:cf:fc:e5:a8:50:72:51:87:46:7e:b3:ec:
                    6f:9b:8a:22:65:83:a1:c5:59:42:3e:bf:93:6f:c2:
                    17:ad:64:03:8b:b6:ca:e4:19:b7:14:82:de:3c:5e:
                    37:e2:82:49:ae:64:4f:24:95:78:61:a2:18:2a:d5:
                    32:20:4f:44:fd:fa:46:ab:df:be:82:76:a1:1b:8e:
                    54:ce:0c:83:e9:89:a6:0a:87:3c:de:86:8f:95:23:
                    2a:1d:0f:7b:ca:80:28:bb:67:fd:22:09:f7:da:89:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:84:3E:A9:06:36:96:C2:45:0E:C7:19:35:0D:30:4A:0D:EA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b9503e4f-19aa-3679-be67-e7e97d57ddbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:be:12:f4:fd:bf:8f:28:78:b3:41:23:ca:f5:b3:ad:3e:50:
         5d:ba:4e:61:bc:4d:dd:47:32:b7:de:bc:7a:71:89:fb:90:5d:
         05:da:26:4d:00:e7:61:91:7d:a9:f2:04:e0:69:1c:ad:1f:bf:
         26:1d:1a:17:39:c1:81:65:9d:22:8f:5b:a0:ab:3d:b4:34:aa:
         87:02:e5:a0:be:aa:2c:96:fd:c4:5e:65:f4:66:7a:de:33:8d:
         ff:c6:63:cd:f5:de:89:f8:f9:de:95:62:7f:eb:4c:f8:49:b2:
         e5:5b:74:f2:73:5e:75:f3:1a:9a:f2:de:11:ce:89:6d:8c:fb:
         8f:c5:af:f3:8d:ee:08:fc:2a:de:3c:f6:fd:4d:43:73:9d:f7:
         5f:ab:c8:5f:d5:90:b2:f5:38:b1:40:42:1d:0a:1a:e8:f6:db:
         d7:e5:43:5c:bd:d3:ab:b9:76:ae:51:4f:df:a5:51:18:a9:7b:
         b6:7e:51:1d:ba:11:f6:7e:85:1c:47:e8:86:03:aa:43:df:48:
         45:a4:0d:69:d9:07:61:af:ea:47:25:92:13:6a:54:6a:a9:08:
         05:3b:33:1d:cb:4b:96:3c:2a:93:40:f0:92:11:9b:41:d9:ae:
         ea:1f:05:87:eb:6f:54:d6:72:dd:c3:4c:3e:6e:32:5e:f3:21:
         8d:7c:37:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqoCAgtyExr04WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
OTYzYzE5NjAtNmFmNS00YmI4LWJkMmUtMDRmNDFlMDMyZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkIosI91ZWwcH0lIUdKmdynyuvtwxorhaFAu
7WaJSrvID5pZ5D0vrfe+NzPLsAe554/5WFj1FVZWJ4qGpfegBrHEq3joGqYS16G5
PLZCl6NFHiUuELuH5fi5SkUd6zukjQ3tjfpfEUSX6X9jAGBdYQ4XDHphnlPjRItE
vCdzjvfBXNNELRqUM0CzSugAojozHyg/Qbbw9lzP/OWoUHJRh0Z+s+xvm4oiZYOh
xVlCPr+Tb8IXrWQDi7bK5Bm3FILePF434oJJrmRPJJV4YaIYKtUyIE9E/fpGq9++
gnahG45UzgyD6YmmCoc83oaPlSMqHQ97yoAou2f9Ign32oknoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHLPhD6pBjaWwkUOxxk1DTBKDep+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjk1MDNlNGYtMTlhYS0z
Njc5LWJlNjctZTdlOTdkNTdkZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIC+EvT9v48oeLNBI8r1s60+UF26TmG8Td1HMrfevHpxifuQXQXaJk0A
52GRfanyBOBpHK0fvyYdGhc5wYFlnSKPW6CrPbQ0qocC5aC+qiyW/cReZfRmet4z
jf/GY8313on4+d6VYn/rTPhJsuVbdPJzXnXzGpry3hHOiW2M+4/Fr/ON7gj8Kt48
9v1NQ3Od91+ryF/VkLL1OLFAQh0KGuj229flQ1y906u5dq5RT9+lURipe7Z+UR26
EfZ+hRxH6IYDqkPfSEWkDWnZB2Gv6kclkhNqVGqpCAU7Mx3LS5Y8KpNA8JIRm0HZ
ruofBYfrb1TWct3DTD5uMl7zIY18N5o=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:59 2025 by rpki-client