Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/384990ca-07ff-377a-8550-89ab3a8dc100.roa
File:                     384990ca-07ff-377a-8550-89ab3a8dc100.roa (raw, json)
Hash identifier:          3xLyiRPUMx9XeQduNvVkWMjgJdByT03WT9efSSPMFts=
Subject key identifier:   FA:A5:F4:4A:B9:AD:0E:67:CF:52:3B:D3:EA:E0:20:BC:B8:0B:43:94
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AD7D1139E1A2B7A2435078640
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/384990ca-07ff-377a-8550-89ab3a8dc100.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        130.137.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:13:9e:1a:2b:7a:24:35:07:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8185431c-af3e-4f87-8391-e907223c590c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:01:b6:dc:24:64:39:2d:b1:87:f8:e7:2e:
                    b7:f9:6c:71:e1:bf:fa:23:b2:73:06:cb:b0:1e:96:
                    32:bf:be:d7:25:a2:e3:e6:2c:a4:81:83:30:cb:4c:
                    9f:3f:44:d5:16:51:33:3c:5d:46:2c:3e:a3:80:6a:
                    7f:5e:b6:d1:c8:69:7b:dd:77:40:72:65:71:fa:e6:
                    a9:d8:fe:f5:37:16:e8:58:5b:68:6d:02:b0:82:56:
                    4e:6f:03:e4:28:1d:8e:ab:f8:9a:83:9d:fd:28:96:
                    d6:b8:ef:aa:6b:f4:38:dc:f9:85:42:2a:60:64:5e:
                    20:32:b7:7d:81:5c:7b:9f:ab:85:a9:c8:3e:cb:b3:
                    c2:99:d6:7b:2b:74:55:a2:ee:8d:8b:65:b3:fa:4d:
                    94:44:4b:86:b0:74:b2:8a:4d:01:e4:20:8c:44:4d:
                    67:ff:7b:7d:c7:33:01:2f:5b:21:46:8d:99:ea:88:
                    f1:a2:18:34:eb:94:b6:89:15:2a:16:75:a0:1a:3a:
                    28:03:d4:b2:8a:e2:b6:35:cb:86:3f:d7:43:4a:e9:
                    0c:30:b6:6a:e8:5c:63:88:37:4c:d6:84:69:fb:8f:
                    e8:e6:21:07:f9:4c:21:dc:68:fb:f0:dd:06:7a:98:
                    90:0d:7b:34:81:20:3f:00:13:30:0a:8f:fd:1a:15:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A5:F4:4A:B9:AD:0E:67:CF:52:3B:D3:EA:E0:20:BC:B8:0B:43:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/384990ca-07ff-377a-8550-89ab3a8dc100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:b4:4b:c6:1c:87:e2:18:86:0f:14:33:98:97:2f:40:fd:
         7f:a8:dc:b7:a8:c1:0b:e4:8c:73:03:51:b3:46:f5:f5:d5:7e:
         0e:6c:cf:db:9f:43:a5:50:db:0b:a5:db:ee:56:61:9a:e1:e5:
         70:bc:95:69:50:9b:ee:b2:c5:2f:fb:7e:0f:1f:4a:e8:23:10:
         af:60:c9:57:5d:1c:e1:38:fa:48:01:51:19:4c:b9:bd:84:0d:
         fc:19:d7:32:5a:6d:ca:69:7f:34:da:a5:48:25:df:37:63:17:
         6a:0a:6e:f2:be:b5:a9:2b:1a:6b:4a:83:0d:f8:e8:af:b4:ad:
         a3:c7:84:c1:6f:e2:fe:30:15:97:61:5a:1a:39:ef:e4:fb:7a:
         c2:d6:1e:d4:29:4f:c7:59:9d:9e:41:5f:72:3c:90:32:f6:ea:
         b1:9b:cf:de:8b:2d:42:cb:43:0f:5b:44:ff:33:24:f9:3c:71:
         e6:15:85:ea:5e:79:db:6b:89:79:30:a5:68:66:e3:81:d2:1f:
         38:57:80:0c:13:a8:48:cc:2f:ee:49:80:e2:5a:ce:fe:3d:54:
         d9:de:7b:65:1d:16:a4:f9:cd:8f:9b:52:b6:86:45:9c:81:db:
         0d:40:0e:de:ea:b8:c4:00:41:af:0b:83:bf:2e:d6:f6:5b:b4:
         07:c5:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:43 2025 by rpki-client