Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa
File:                     cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa (raw, json)
Hash identifier:          Hpbbs6iGUAV5w5qS9uamRXrYAYWIjex7u5icke3V3Pc=
Subject key identifier:   CB:9C:2F:7D:68:65:CF:77:91:FD:FA:2A:69:C8:F2:90:DA:4F:E0:4F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483B4FFDF50D65C37354FE7880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        130.137.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:fd:f5:0d:65:c3:73:54:fe:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=a61b3e06-55c7-4ebc-8f75-e55bd256a658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:e8:5d:0d:1e:3a:27:9b:37:0a:87:9b:06:
                    ef:8d:b2:d7:03:39:63:b4:14:fc:7a:ba:ad:23:76:
                    f4:76:80:b5:b9:31:24:be:7a:83:cf:5d:d2:9e:3d:
                    38:d5:54:a7:0c:be:9e:86:8c:59:ac:5f:fc:40:c6:
                    ed:a8:ad:ed:a0:39:13:c3:20:35:1e:f9:0f:58:10:
                    5a:95:7f:c5:c2:d1:61:91:6c:6b:e4:7d:8d:fe:ba:
                    0e:61:2a:91:7b:9a:54:84:89:97:56:fd:2c:df:7d:
                    ae:29:7b:de:5d:f3:0b:4e:65:fe:3b:d9:30:9c:99:
                    d4:db:7e:d8:7c:90:ec:7b:d2:6b:ee:59:98:a3:02:
                    b3:cc:08:d3:62:f3:35:c1:d2:f9:ae:ba:83:c3:0a:
                    65:2a:8c:91:32:eb:26:f8:74:c7:88:61:b9:06:d0:
                    d2:b3:1e:3f:4f:e7:e2:dd:c3:a3:5c:89:4d:89:98:
                    b1:e7:b3:59:1d:0b:fa:3a:1a:fc:d7:c4:1f:44:c9:
                    79:48:54:d6:79:15:76:e0:a6:59:c0:23:da:0c:24:
                    c5:16:bf:17:8b:de:56:0d:fc:da:86:c1:f3:3f:ff:
                    e4:25:db:bf:0a:10:17:68:38:6f:c3:c9:32:d6:5d:
                    d3:89:13:90:59:74:40:64:c0:47:f3:d7:d0:d4:9a:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9C:2F:7D:68:65:CF:77:91:FD:FA:2A:69:C8:F2:90:DA:4F:E0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cab68961-fd6c-3af4-85fc-9de1b49f45d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:c9:17:cc:17:5d:69:21:ee:4f:ad:8b:b7:d9:20:65:9b:
         d6:6a:40:ed:b5:42:f4:97:d4:e1:72:33:e6:f8:8f:90:8e:25:
         8b:bc:98:d5:8f:75:54:3f:b1:7f:a1:c4:a9:d7:01:e7:f4:f6:
         99:c4:ff:94:02:f3:ee:b5:cf:46:4e:b4:19:49:89:48:07:64:
         86:83:c0:df:b0:db:2f:67:2c:5a:37:da:b9:fe:9c:a0:08:d9:
         f4:1e:79:e4:ce:e7:37:e5:f6:de:84:c5:93:af:e7:a0:bb:25:
         06:72:dc:9f:0d:c7:ff:0c:35:58:79:63:42:70:3e:13:5d:0f:
         b8:13:a5:97:9e:5d:02:63:71:59:da:a7:81:97:ba:d6:01:f1:
         d8:46:34:9c:0e:8d:ba:27:af:4b:a7:b3:a7:a9:3c:96:cb:c1:
         2e:ae:a8:f3:6b:ae:a4:40:5d:d8:22:64:e3:10:35:2d:5d:80:
         aa:6b:0a:af:2f:92:89:72:26:78:41:21:a4:f8:66:04:16:bc:
         eb:6a:1f:34:21:d3:bd:6d:ba:61:6c:76:3b:2c:fd:80:e9:e0:
         5d:4a:7f:e2:fb:09:80:68:15:bd:72:14:6a:81:4c:d4:37:92:
         f4:2c:28:44:7d:7a:80:8a:ae:ec:4f:27:bc:5b:e4:23:3b:1d:
         9b:50:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:43 2025 by rpki-client