Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
File:                     0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json)
Hash identifier:          X/91T6BRaaSS/YxDXBSTLrsKIBsZUd5PqpSoI9y2zAk=
Subject key identifier:   FE:23:90:07:4A:BC:EB:9D:80:D9:EC:BB:E8:84:2C:C4:4E:BC:A1:93
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AD7D113F2297228042C508B80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        130.137.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:13:f2:29:72:28:04:2c:50:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=21ecae13-0627-437d-913c-f479dff99a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:ae:bb:1d:1c:3f:09:96:6f:fd:c1:f0:fe:
                    6d:71:c5:43:4c:89:6c:3d:74:28:74:3f:e1:fa:d3:
                    d5:c5:92:54:19:bb:63:8e:b9:88:a2:0e:db:6e:cc:
                    f5:05:07:28:35:8e:46:31:28:64:bb:f5:78:12:a4:
                    5e:de:5d:f0:3c:d5:70:48:b3:55:bf:fc:3f:6a:0f:
                    96:99:25:c1:95:6c:b3:81:c5:ec:60:76:10:6d:1b:
                    20:15:3b:d3:85:ae:a9:91:cd:02:10:2e:32:4e:e2:
                    a6:c0:72:ea:12:53:12:87:76:a6:a9:81:05:ac:43:
                    6d:ef:43:20:42:47:7a:ef:0f:cf:3c:71:04:86:c4:
                    d6:65:0f:fd:7e:96:34:b5:a2:f4:3d:3c:3b:fa:45:
                    d0:c5:e3:31:42:bb:1e:6f:48:44:37:f6:51:69:72:
                    2b:b4:5c:27:7d:a8:2e:50:99:dc:25:45:5c:6a:36:
                    56:83:bb:d7:18:35:2d:70:2a:bf:85:37:b1:3b:19:
                    c6:f9:f4:dc:c8:da:6b:7a:56:bb:b9:ec:16:00:ed:
                    38:0f:80:a3:e5:66:a8:5f:b0:2b:79:c0:8c:e3:de:
                    ae:9c:81:c0:e8:b7:b7:e8:98:0b:6c:7f:50:fd:59:
                    e9:73:ad:66:6c:7f:b2:bc:c4:ee:44:bf:1c:32:0d:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:23:90:07:4A:BC:EB:9D:80:D9:EC:BB:E8:84:2C:C4:4E:BC:A1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:17:53:4f:3b:67:dd:15:d5:22:1c:1a:23:f8:cc:64:e6:71:
         eb:4a:d6:b6:43:3f:3e:2b:88:5c:ac:cc:65:57:d6:cd:98:af:
         7f:fb:72:da:7f:00:10:24:0a:d9:e9:9f:aa:1d:8a:f8:db:f8:
         91:0f:ea:26:76:bd:19:46:32:bb:35:38:08:37:ae:58:5b:07:
         2c:9f:b8:6e:69:de:67:62:d2:5b:c2:f9:87:7c:b0:3d:7d:6c:
         ca:96:76:a6:0a:81:bd:e0:ff:b9:fe:d9:ac:ec:02:70:52:fe:
         66:18:7f:a5:82:51:4a:a3:19:c2:e4:e3:37:9d:f1:9a:cb:bd:
         b2:34:be:5c:0f:9b:af:0e:97:fe:36:8a:1d:6c:36:db:6a:d2:
         4f:5e:d7:7d:3b:36:e0:97:27:e7:12:89:3f:fb:c4:d5:47:dc:
         76:fc:14:83:6a:29:83:58:2e:f9:ce:86:71:58:18:08:8f:98:
         82:df:bb:27:c5:32:fa:f8:ff:7d:94:52:dc:a0:1c:50:37:37:
         3d:c2:00:63:bf:c9:c1:72:1d:92:ba:81:47:f9:1a:42:06:dc:
         bd:66:6c:34:a4:f7:c7:66:cf:9f:c6:53:65:0a:43:08:d0:92:
         8a:dc:a5:74:eb:31:ea:d9:e5:26:28:be:a9:34:a0:62:21:b2:
         20:b9:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:45 2025 by rpki-client