Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
File:                     3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa (raw, json)
Hash identifier:          7A/fQrinI4a0auMpWcJKGMjQ2VQrrI5pMOE8bAu8ZYQ=
Subject key identifier:   B7:E4:5C:D0:9C:06:4E:B1:54:35:FE:6A:D4:9A:50:E6:E4:1F:A3:49
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B89176B8725C5E36623109C00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:6b:87:25:c5:e3:66:23:10:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=c7de5ba6-2ecb-4179-82ce-4b43b9f12ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:3f:aa:d3:82:a5:58:03:8f:7f:97:b4:c9:
                    02:b2:1c:95:c7:40:0c:8a:88:4d:30:7e:f2:65:a6:
                    13:b9:d4:98:4e:a5:36:16:1d:82:04:ad:2b:3e:63:
                    99:15:ac:a9:f0:99:cd:58:08:05:78:9c:c8:c0:ca:
                    20:58:ce:d5:18:a3:40:b7:36:65:c2:fd:81:48:e3:
                    21:54:13:5e:82:e7:33:17:57:3e:97:02:ed:42:cd:
                    24:90:20:d6:25:f5:2a:4c:a4:c8:a2:23:af:94:d0:
                    ac:1b:c5:43:c9:4c:43:22:fc:80:ad:d8:ba:67:09:
                    05:fc:36:16:ab:09:16:57:c9:b9:f3:b4:57:c2:f1:
                    e1:ac:52:23:87:7c:a5:99:d7:f7:23:0e:41:88:36:
                    88:b1:72:59:83:c5:b7:4c:dc:9f:28:bd:7f:0e:aa:
                    35:31:9c:a2:5d:36:e7:b7:6b:b4:c5:2f:71:ae:13:
                    d3:29:ee:8c:a2:83:65:76:78:48:7a:30:67:d4:dd:
                    bc:56:39:59:20:78:c8:78:7d:92:b4:d7:19:07:3d:
                    8f:31:b5:30:63:a8:42:5b:6f:48:28:98:0a:83:96:
                    e0:27:70:6c:84:62:3b:37:71:16:f6:f6:b4:23:c2:
                    0d:1a:3a:a7:0e:42:71:4c:ff:32:1d:94:da:b2:ef:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:5C:D0:9C:06:4E:B1:54:35:FE:6A:D4:9A:50:E6:E4:1F:A3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:eb:04:e2:23:3d:fe:54:dd:27:6b:6d:9a:2d:ca:c8:97:
         3f:a9:09:b1:f1:29:af:0a:5e:a9:8e:84:25:ca:4b:43:1a:27:
         9f:02:cf:cf:9f:90:1a:a7:2e:26:34:fe:9f:c2:ba:82:c6:3c:
         2e:c7:49:7e:05:f5:8a:fe:c3:d2:35:49:20:a3:61:bf:2f:e0:
         7b:ac:52:66:a1:3f:7d:81:4e:9d:27:00:fb:60:b8:2b:d7:20:
         ea:03:7a:3f:3f:64:2f:23:77:34:11:63:94:c2:14:f3:b8:3f:
         4a:65:c1:b3:85:be:7a:0a:d9:f7:94:17:68:9a:22:5b:e4:34:
         61:e7:a3:1a:48:19:59:1b:09:a7:97:a3:16:35:04:51:d3:01:
         d2:3f:8c:fa:5e:f2:a7:d6:6f:63:b7:59:dd:66:2a:cc:c0:cb:
         6c:b9:68:d7:fa:8b:b4:7c:e5:33:8c:19:58:0d:31:9b:d3:5f:
         9b:1d:62:05:e2:93:83:56:73:27:3c:09:92:7b:73:d7:d8:07:
         5d:c4:37:c6:37:3f:85:c6:9c:8c:ff:32:02:27:e2:e6:e1:e9:
         4e:4c:9e:1d:99:c7:9c:87:cc:ca:44:b1:78:3d:80:af:1a:56:
         67:7b:d9:2e:87:7b:d8:c8:6e:4c:5b:da:cf:01:69:4b:96:bc:
         6b:37:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:21 2025 by rpki-client