Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa
File:                     19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa (raw, json)
Hash identifier:          zvCGOgKLAcguvB0BSAQIQe3WmVoG0yWQ1J9PdhnRnv8=
Subject key identifier:   28:64:4F:5B:FF:61:B5:7F:69:D6:E9:42:3A:7F:C2:EE:92:97:D4:31
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584ADECBBE25497CDF5C7D8393F0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        130.137.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:be:25:49:7c:df:5c:7d:83:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=df264280-0ff7-462c-90d4-7c059ef32125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:0b:1b:90:a2:f1:1b:1f:bb:b6:80:0e:32:
                    db:2b:29:dd:9d:55:ca:93:15:19:d6:5b:17:1a:ab:
                    81:90:16:46:a9:3c:c0:4e:a7:09:52:d4:fd:8a:ff:
                    66:a7:a3:66:f4:cd:73:fe:7b:86:47:11:f5:db:d8:
                    a8:d3:11:61:12:09:a7:90:2a:22:33:f0:24:44:46:
                    f0:40:67:b6:0c:9a:a9:65:b4:bb:c3:d9:52:5d:81:
                    ed:fb:46:65:c6:da:bc:64:1b:18:a6:a7:60:91:4f:
                    65:99:6c:88:9f:fd:b2:94:f9:46:07:3e:7a:5c:90:
                    61:7e:83:f4:ca:0c:5b:69:c2:8e:e9:ac:96:cc:c2:
                    47:7f:fa:4c:40:41:a8:12:a4:78:6e:2b:09:6f:a3:
                    86:70:0f:40:9f:44:ff:22:b8:92:92:bd:77:de:f4:
                    5b:e6:11:af:da:4c:7f:9a:37:d2:33:11:ab:c5:af:
                    db:d6:5a:e5:bd:26:63:4e:ff:40:3b:76:c9:c6:7a:
                    3a:88:30:44:3b:c7:5b:71:84:7e:2b:27:6b:65:ac:
                    d8:57:da:66:ef:07:43:08:bf:53:2c:cc:91:21:2b:
                    03:9c:48:8d:8d:dc:7d:3f:10:1c:a1:65:57:cc:ca:
                    30:36:6e:bd:78:70:c4:29:94:12:a7:8b:58:8d:df:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:4F:5B:FF:61:B5:7F:69:D6:E9:42:3A:7F:C2:EE:92:97:D4:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19c7da6f-0b63-3e7f-9ee5-04cc2bce160c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a8:fa:78:96:97:c8:54:9b:7a:77:b4:95:7a:18:54:c9:15:
         52:e1:19:38:de:06:37:c1:a0:f2:21:b5:b6:36:2b:bf:05:6b:
         31:9c:87:9c:9b:28:49:d7:e3:b7:85:e1:d8:e7:4b:6e:03:cf:
         05:e4:01:d9:92:16:0a:df:03:ff:fd:a7:72:9a:6c:0e:74:8f:
         a0:46:55:e5:22:11:6f:53:a3:d7:29:92:c4:8a:c1:4b:ad:94:
         be:50:e5:81:0a:38:3b:e6:a5:b1:5b:9b:a4:68:0e:14:bf:e0:
         c3:8b:fe:f1:68:2c:23:a5:60:d1:7c:ca:ea:b2:66:1f:f4:32:
         bf:e4:f7:80:3a:fc:0d:50:5e:c7:4f:2e:1b:67:25:95:26:51:
         54:dd:5b:cf:45:cb:f2:7a:68:12:e1:3b:61:ed:50:f1:93:fb:
         3f:c3:3d:02:c7:61:a2:60:10:56:ea:74:7e:1d:61:94:c6:31:
         3c:49:14:ec:dc:39:2d:37:70:8e:f2:72:77:68:09:89:4b:48:
         ff:ac:c6:82:fa:0f:57:16:91:19:95:50:b3:71:fc:2f:54:2e:
         3f:fb:e3:b6:0f:5c:42:26:99:75:44:51:e2:58:71:6e:8f:ae:
         32:00:21:1f:7f:9b:a2:87:aa:49:7e:54:7e:5a:29:a3:84:17:
         2b:f2:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:03 2025 by rpki-client