Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc014274-5329-31d5-817f-4be53e76febb.roa
File:                     cc014274-5329-31d5-817f-4be53e76febb.roa (raw, json)
Hash identifier:          Vayl9Kln22v8axE/C9tDX4Tq8qP/zX0WeJ3tsZ+v5Kc=
Subject key identifier:   D0:53:56:24:27:16:E3:EC:97:8C:6C:15:AA:2C:5F:B5:B0:B9:24:A2
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584913AC1B6A635DDF365D408000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc014274-5329-31d5-817f-4be53e76febb.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1b:6a:63:5d:df:36:5d:40:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=be83ed27-0fb2-4fad-9c1a-1a32a7341c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:70:d8:26:89:1b:b0:bc:3f:26:93:20:b8:
                    e6:d3:5a:b7:3e:a7:a0:44:32:44:64:31:18:0a:ca:
                    01:c0:08:40:fa:98:44:8d:59:c2:64:9f:c6:62:17:
                    75:b5:70:89:c9:46:5a:22:2b:dd:bc:a8:11:92:86:
                    38:de:44:3d:a2:0f:bf:e3:df:c9:48:d4:f4:4b:f5:
                    ac:88:ed:ba:b1:f1:f8:b4:08:70:f7:3c:98:a0:d2:
                    fe:b2:70:3c:a0:1b:9c:c6:9b:ae:85:5f:ea:c6:7e:
                    34:cf:7d:19:99:b8:4f:62:d1:8b:87:8d:ef:47:ac:
                    8b:9f:eb:ba:17:f2:d4:cf:28:ee:48:79:0d:04:58:
                    92:e5:89:3e:7c:98:5c:67:f7:15:09:94:93:27:40:
                    7d:70:9e:aa:71:ae:37:a0:c3:70:e5:f8:46:e6:00:
                    7a:fc:3b:f2:e0:23:1d:a6:e5:ea:89:72:ed:13:bf:
                    0a:40:68:14:13:85:83:cf:6e:60:9b:ad:ab:97:ba:
                    5d:6c:53:29:d8:3b:c0:91:ec:c1:0d:a3:4d:cd:4e:
                    d6:e7:db:72:ab:52:e0:86:06:11:87:ac:dc:b7:8c:
                    d4:4a:ad:87:a2:48:b5:08:4c:5a:ca:ce:ab:d8:af:
                    b9:6f:ce:da:32:2c:e3:d4:ce:e7:16:6a:ca:ff:d7:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:56:24:27:16:E3:EC:97:8C:6C:15:AA:2C:5F:B5:B0:B9:24:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc014274-5329-31d5-817f-4be53e76febb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:2d:3a:2e:9e:ac:37:56:74:8c:da:a8:c3:55:9a:11:95:
         09:8b:3b:c8:d9:f8:fb:b9:40:d1:f6:f4:05:9b:ae:d5:66:dc:
         84:52:8a:44:b9:85:03:22:b4:07:4c:eb:06:98:4d:41:9c:41:
         a3:3e:7d:11:1e:05:56:49:d4:37:48:db:46:8b:b5:b6:6e:02:
         7a:cb:16:16:53:0b:fa:cc:38:09:18:11:4c:e9:fb:bc:22:e8:
         1e:71:00:20:7f:d6:00:5d:f4:59:d2:32:8e:70:3d:03:9b:34:
         5b:0a:0c:f1:50:ad:e8:b9:cd:fa:b5:a3:df:de:03:35:b6:9d:
         e4:0e:2d:cd:dd:cf:22:7d:9e:48:7f:8e:61:f4:8d:94:7c:ae:
         d4:d4:e2:e7:3d:b5:fe:17:77:22:f2:3b:70:44:21:d1:09:73:
         74:6d:e6:92:1f:eb:e5:d5:52:a0:29:72:0c:af:6a:89:f2:66:
         24:75:71:49:9e:a9:45:ce:41:8b:2d:a9:7a:36:35:9f:27:8f:
         f6:da:48:c9:02:4a:ea:14:83:eb:d0:89:6a:9a:89:40:b6:db:
         7c:a7:f4:d7:48:e5:af:12:cb:e3:00:35:65:ca:e2:f6:74:a4:
         a7:94:0d:f7:da:5e:f4:a4:2a:79:91:1b:d2:c1:a5:44:48:77:
         7b:c3:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:28:02 2025 by rpki-client