Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa
File:                     cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa (raw, json)
Hash identifier:          WtcG/SQUjMs8Dw0WbQeRptUxNXR/rpjScQE4S26/iT4=
Subject key identifier:   B6:1B:C6:91:97:D1:A8:5A:9C:A5:D8:0A:04:B2:56:61:E2:85:CA:E2
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584913AC1B89D8C663C820466900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1b:89:d8:c6:63:c8:20:46:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=db01f42c-a148-406e-83cd-ff1d6bf40b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:14:0a:91:20:f7:e3:8f:8e:32:36:f3:28:11:
                    ed:25:75:62:6f:4f:df:02:35:37:34:cb:53:94:d1:
                    7a:da:f9:93:e6:8b:01:fb:de:df:6d:72:45:d4:94:
                    1d:8f:e0:02:07:58:ee:07:78:07:7a:d9:f3:bf:99:
                    53:59:a2:56:61:bc:f9:43:64:32:1f:12:02:cf:16:
                    03:2b:20:f2:78:d1:5e:d8:a4:d2:6a:44:30:cf:73:
                    b4:f7:6f:8a:91:e5:05:f3:c5:e4:67:11:75:7b:6f:
                    35:ac:35:a0:4a:31:d7:1d:9a:14:3f:1c:0f:b5:53:
                    18:b9:ef:2f:8f:47:13:c4:4a:fa:3c:69:f6:77:5d:
                    7a:aa:4b:57:f2:f8:e1:9b:c9:41:ee:15:e7:c2:56:
                    8a:52:7e:e0:91:f2:bd:00:9e:99:6c:86:dd:c0:7b:
                    04:cf:db:6e:08:f6:7e:ab:95:99:fa:90:fc:3c:e4:
                    98:dc:95:2d:56:a4:da:a5:e2:d1:ff:5a:a4:d3:16:
                    51:e7:bb:ba:db:37:7f:1b:ad:bf:0a:d0:c1:60:1b:
                    52:22:c6:4c:a2:bf:e7:dd:27:55:b0:2f:b1:2c:63:
                    a3:cd:8d:8f:9c:e7:42:78:94:43:91:8d:95:f4:55:
                    d8:84:cc:bc:ec:79:c9:f7:04:e6:d8:ed:dc:ef:25:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:C6:91:97:D1:A8:5A:9C:A5:D8:0A:04:B2:56:61:E2:85:CA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cae00bd0-1e39-3bf3-ad69-dc02d8dd214a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:46:f2:e4:b3:a0:ab:0d:4e:ef:4d:0c:f0:6e:25:9c:ec:23:
         5c:ff:9f:3e:31:ef:77:b9:15:97:6e:5b:37:5b:2b:6c:74:ad:
         b3:b3:76:f7:f8:1a:18:4f:c8:f1:57:9c:5e:40:83:7a:4b:89:
         8f:8e:bd:51:e5:2e:e0:4a:b5:b5:06:36:d4:5f:fe:3c:ff:ab:
         67:a8:d9:f1:46:63:c2:56:0b:69:54:35:77:0e:2a:15:05:d6:
         c4:28:cf:ba:d1:05:f5:4d:14:f8:04:82:30:44:dd:85:25:18:
         0f:b1:4b:90:fc:af:22:7d:df:95:83:44:67:9d:de:86:41:dc:
         be:cd:1a:75:e4:96:f4:1e:d4:53:40:93:ce:1f:a8:d6:03:73:
         b1:6c:c4:f8:b1:16:c5:e2:ad:43:20:6d:94:c7:1a:cd:58:0e:
         76:c5:4b:d6:4a:ee:56:a1:17:f6:b0:a6:58:0c:d1:d4:5b:d6:
         c3:a4:70:b6:09:ff:e9:b0:70:6f:e2:38:e3:e1:f8:78:f0:07:
         26:e4:ff:e5:3d:f5:a7:59:a3:89:0d:21:ef:e1:d5:7f:f0:b2:
         d7:8c:68:c8:53:3a:70:c3:ac:77:27:87:34:53:8c:27:b2:2f:
         4d:05:b7:29:c9:00:be:d9:fb:3c:be:de:b3:04:b6:2d:b6:82:
         0d:6f:bc:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBuJ2MZjyCBGaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZGIwMWY0MmMtYTE0OC00MDZlLTgzY2QtZmYxZDZiZjQwYjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hQKkSD344+OMjbzKBHtJXVib0/fAjU3NMtT
lNF62vmT5osB+97fbXJF1JQdj+ACB1juB3gHetnzv5lTWaJWYbz5Q2QyHxICzxYD
KyDyeNFe2KTSakQwz3O092+KkeUF88XkZxF1e281rDWgSjHXHZoUPxwPtVMYue8v
j0cTxEr6PGn2d116qktX8vjhm8lB7hXnwlaKUn7gkfK9AJ6ZbIbdwHsEz9tuCPZ+
q5WZ+pD8POSY3JUtVqTapeLR/1qk0xZR57u62zd/G62/CtDBYBtSIsZMor/n3SdV
sC+xLGOjzY2PnOdCeJRDkY2V9FXYhMy87HnJ9wTm2O3c7yUjjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYbxpGX0ahanKXYCgSyVmHihcriMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2FlMDBiZDAtMWUzOS0z
YmYzLWFkNjktZGMwMmQ4ZGQyMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJG8uSzoKsNTu9NDPBuJZzsI1z/nz4x73e5FZduWzdbK2x0rbOzdvf4
GhhPyPFXnF5Ag3pLiY+OvVHlLuBKtbUGNtRf/jz/q2eo2fFGY8JWC2lUNXcOKhUF
1sQoz7rRBfVNFPgEgjBE3YUlGA+xS5D8ryJ935WDRGed3oZB3L7NGnXklvQe1FNA
k84fqNYDc7FsxPixFsXirUMgbZTHGs1YDnbFS9ZK7lahF/awplgM0dRb1sOkcLYJ
/+mwcG/iOOPh+HjwBybk/+U99adZo4kNIe/h1X/wsteMaMhTOnDDrHcnhzRTjCey
L00FtynJAL7Z+zy+3rMEti22gg1vvC8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:36:23 2025 by rpki-client