Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa
File:                     bbeca169-4170-30f0-b354-aa143422f326.roa (raw, json)
Hash identifier:          8I3qeBQc5ouRcmOKyBwOm5JpaP7bGv9em1i/5A89d+o=
Subject key identifier:   8F:AD:E6:D6:CD:B8:97:DF:44:87:97:BF:78:27:86:FF:55:A9:9F:BE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491D7174D705A3C928C09B19C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.137.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:74:d7:05:a3:c9:28:c0:9b:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=13a578ec-88d0-4ceb-9c84-343172cbf81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:43:50:a1:21:b8:20:f2:4e:37:f5:ce:c4:
                    f4:14:dc:0a:a9:20:0b:3d:fb:33:e6:17:55:f0:d1:
                    9a:6d:df:eb:8a:82:d7:6b:c7:b8:07:0f:80:6e:03:
                    93:b4:93:dd:f8:ab:0b:34:5c:23:6b:93:02:62:ef:
                    e2:6c:c1:4e:5e:23:bb:f4:cb:90:0a:e9:9a:87:af:
                    f4:65:9a:d3:72:3d:1c:1b:31:40:14:a0:03:e7:84:
                    7a:63:de:b3:cd:e2:95:72:a8:6a:3c:ab:65:45:ea:
                    b8:a2:4e:9f:d6:73:d9:ce:34:a9:4a:86:b8:46:de:
                    68:80:61:f0:c7:dc:aa:c0:e4:bf:c7:f3:12:71:e3:
                    94:b7:ba:67:2a:30:3e:10:09:b1:7c:11:5d:38:d4:
                    84:25:e9:5a:98:9a:ed:b5:a6:3e:b7:82:49:88:fa:
                    24:fd:cd:8f:63:68:ba:a4:2e:b1:04:17:5b:ef:cc:
                    17:a3:8b:86:b1:cd:08:ed:da:52:1c:8c:2b:a1:ed:
                    61:de:ed:73:93:59:6d:b0:84:17:0c:a4:ae:0d:6e:
                    f1:2c:57:03:97:c2:8f:39:26:5b:9a:6a:9d:bb:37:
                    e3:81:b6:7e:3d:11:18:fd:26:4f:54:c7:8d:92:49:
                    5e:69:84:15:12:15:e6:83:5f:52:d8:31:f3:c6:37:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AD:E6:D6:CD:B8:97:DF:44:87:97:BF:78:27:86:FF:55:A9:9F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:90:a3:93:e4:9b:7a:04:72:7a:ff:fb:e2:9e:20:3a:5a:4f:
         f4:67:cc:a6:65:be:a3:47:d7:1f:f7:d1:25:99:f8:02:96:db:
         53:0b:f6:ff:d9:cc:27:44:9c:55:db:ca:0d:68:d4:7a:1c:87:
         a1:cd:d5:21:8d:5d:1e:26:9d:bc:65:85:bd:c2:2e:ca:73:ba:
         42:ab:f0:b0:fd:70:02:ec:a8:ab:28:e2:37:0b:d6:71:51:d4:
         07:ea:df:9d:65:9c:80:20:3d:fc:c5:09:69:8f:78:93:33:ea:
         fc:9b:4e:d4:7b:0a:f0:db:3f:99:45:b0:f8:dd:99:59:64:ad:
         a9:8e:11:78:ee:83:b1:4f:4b:0f:94:3c:ed:42:70:5d:2a:21:
         ba:02:95:78:49:5b:18:0b:81:28:2d:cf:24:ee:6a:8f:c1:74:
         af:80:1a:64:4d:1c:96:33:9d:37:c3:eb:95:84:b2:43:86:03:
         ba:e9:b1:49:1d:95:8c:d1:45:76:6b:3a:7e:52:42:a6:43:df:
         d4:b0:0c:98:ab:2e:71:88:d6:76:6f:ce:02:c7:2c:c5:96:3d:
         0d:ab:2c:d4:f2:c3:7c:05:40:a3:f9:a6:cf:f6:ec:fc:10:c5:
         d4:02:da:01:16:32:5b:56:cc:b3:b0:1a:5d:b5:00:1f:a8:96:
         3b:33:43:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXTXBaPJKMCbGcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MTNhNTc4ZWMtODhkMC00Y2ViLTljODQtMzQzMTcyY2JmODFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVDUKEhuCDyTjf1zsT0FNwKqSALPfsz5hdV
8NGabd/rioLXa8e4Bw+AbgOTtJPd+KsLNFwja5MCYu/ibMFOXiO79MuQCumah6/0
ZZrTcj0cGzFAFKAD54R6Y96zzeKVcqhqPKtlReq4ok6f1nPZzjSpSoa4Rt5ogGHw
x9yqwOS/x/MSceOUt7pnKjA+EAmxfBFdONSEJelamJrttaY+t4JJiPok/c2PY2i6
pC6xBBdb78wXo4uGsc0I7dpSHIwroe1h3u1zk1ltsIQXDKSuDW7xLFcDl8KPOSZb
mmqduzfjgbZ+PREY/SZPVMeNkkleaYQVEhXmg19S2DHzxjeH8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+t5tbNuJffRIeXv3gnhv9VqZ++MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJlY2ExNjktNDE3MC0z
MGYwLWIzNTQtYWExNDM0MjJmMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWQo5Pkm3oEcnr/++KeIDpaT/RnzKZlvqNH1x/30SWZ+AKW21ML9v/Z
zCdEnFXbyg1o1Hoch6HN1SGNXR4mnbxlhb3CLspzukKr8LD9cALsqKso4jcL1nFR
1Afq351lnIAgPfzFCWmPeJMz6vybTtR7CvDbP5lFsPjdmVlkramOEXjug7FPSw+U
PO1CcF0qIboClXhJWxgLgSgtzyTuao/BdK+AGmRNHJYznTfD65WEskOGA7rpsUkd
lYzRRXZrOn5SQqZD39SwDJirLnGI1nZvzgLHLMWWPQ2rLNTyw3wFQKP5ps/27PwQ
xdQC2gEWMltWzLOwGl21AB+oljszQ8Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:52 2025 by rpki-client