Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ede5f64c-de4a-3c8b-8e17-c921799d8300.roa
File:                     ede5f64c-de4a-3c8b-8e17-c921799d8300.roa (raw, json)
Hash identifier:          ebzmiwle6hZNYe2Aa7IZdVryBqOF/BCSWcPc39jOKpM=
Subject key identifier:   95:40:50:C6:98:64:18:44:C8:A3:AD:5C:2E:58:0F:FD:E8:1A:13:48
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848547021CEB7BBEBA90C143A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ede5f64c-de4a-3c8b-8e17-c921799d8300.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        130.137.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:21:ce:b7:bb:eb:a9:0c:14:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=2ec8b01e-5165-49d6-bd1e-5ebdd81da33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:6d:ae:ac:4b:16:86:bb:33:0c:56:f8:55:
                    97:89:3d:15:b1:a2:23:9b:fc:0c:da:13:be:dd:e9:
                    d3:87:aa:70:a2:26:da:da:b9:86:ef:f1:7a:75:38:
                    80:f5:5a:2f:34:83:c5:2d:de:47:53:17:e1:8c:25:
                    0c:98:2b:97:e3:9b:5c:ff:97:ca:6e:10:1e:9e:85:
                    e8:8d:04:6d:8e:17:99:a6:d7:e1:8b:d1:5a:b3:a0:
                    a7:55:51:ee:fe:d7:f8:9e:5c:ac:03:7c:84:fe:df:
                    ad:9e:76:81:36:1a:65:dc:db:9a:b8:37:c4:40:cd:
                    9f:b9:af:14:45:8b:3b:ee:d1:c6:e6:e4:7e:4a:1a:
                    1a:a9:01:5e:7c:70:d3:84:46:9a:ad:d6:de:22:a2:
                    0f:65:87:e1:1f:12:56:cf:83:74:fc:43:56:60:5a:
                    f9:b8:e1:fb:6a:d9:8f:c1:2a:3d:03:ea:f9:df:55:
                    77:ed:1c:55:66:46:02:4c:f1:72:43:8d:47:6e:c4:
                    82:8d:92:4f:36:d3:2d:ce:2f:57:9e:5c:fb:f4:c1:
                    d2:5d:bc:c5:e0:27:49:fe:f8:19:33:a7:f6:62:b4:
                    0a:f3:b2:74:01:66:03:07:62:90:d4:7e:33:81:16:
                    48:ba:e8:ce:17:2e:ec:db:f1:a7:14:05:ec:15:97:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:40:50:C6:98:64:18:44:C8:A3:AD:5C:2E:58:0F:FD:E8:1A:13:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ede5f64c-de4a-3c8b-8e17-c921799d8300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6c:eb:49:84:35:10:81:62:b0:61:28:88:a7:b8:37:ff:f2:
         e6:ad:db:8f:ec:c5:d9:39:7f:27:80:04:d9:f8:fa:8a:58:c5:
         26:1e:1f:4f:2a:79:90:5b:d0:82:9a:d7:1d:4d:e9:97:4b:f8:
         64:97:3a:a9:1b:fe:d6:62:68:b1:e2:78:67:26:45:7b:5f:dd:
         70:e0:9e:da:3e:40:6d:d3:30:0f:4f:f6:d4:71:99:0b:fe:da:
         47:64:b4:08:0d:94:85:26:63:fa:47:cd:4b:b9:85:d0:e2:ae:
         7b:07:10:32:1a:b7:ad:1c:1e:5d:47:67:9d:25:56:7a:19:48:
         15:3d:f0:19:a1:fa:14:94:af:c1:d7:66:b9:f4:21:e7:b9:60:
         e2:cd:a4:32:b3:6f:07:14:75:8d:fd:f4:46:8d:89:07:ee:45:
         15:06:77:ac:76:b3:e5:f9:a1:6f:2c:5a:74:1d:c0:4f:90:53:
         71:80:97:2d:fd:52:52:f4:5c:14:54:8d:f6:86:fb:8e:52:18:
         39:64:f1:b7:c4:be:75:64:46:dd:bf:30:4d:a0:ac:e6:66:35:
         44:ed:38:ed:20:f1:b0:7e:14:99:d3:48:8d:f0:f7:2c:cc:2e:
         1b:6d:04:f1:96:72:c6:ef:ef:20:1a:ec:ff:1f:d1:f9:b1:79:
         9c:2b:29:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:31 2025 by rpki-client