Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa
File:                     499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa (raw, json)
Hash identifier:          lSm1WXCEKFg3R5C2S6Njcrgq0fqrge2n4mEqNbLQiFM=
Subject key identifier:   FA:96:9E:4A:E7:F4:5D:56:8C:4E:6D:FE:1F:21:EC:9F:53:E1:C2:81
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF25679E8E240DFB1E5A637C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        130.137.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:79:e8:e2:40:df:b1:e5:a6:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=98cc0f22-27f9-4def-b1a9-3552d6f47d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:74:89:a5:4a:2e:21:34:a6:d2:e4:6d:b4:
                    3a:74:ca:3e:5a:12:ad:40:fa:d0:da:03:b5:b0:62:
                    8a:41:15:56:b9:3b:05:8e:84:58:b1:0a:ec:d9:59:
                    63:26:81:5e:30:f1:e5:95:5e:89:53:b5:cc:dd:6f:
                    81:d0:83:75:32:6c:c2:88:4d:43:73:61:db:a5:52:
                    18:a3:21:78:b3:48:3b:68:0c:d6:91:e9:16:6a:2e:
                    e1:5c:04:9d:5f:dc:5e:89:38:ad:d3:a3:20:f3:a4:
                    cc:5e:3b:01:ba:80:0d:8d:71:b7:6b:4f:81:ff:76:
                    69:e1:b8:ae:8a:a3:5f:f7:bc:2b:6b:d3:72:1a:60:
                    a3:f0:fb:bb:54:92:f6:5a:63:5e:20:18:fc:fe:12:
                    60:d8:f4:44:a8:54:28:ad:d3:a8:a1:0b:ca:2e:75:
                    31:7c:c2:7e:ee:81:91:67:d6:d7:34:a6:a6:a4:a7:
                    9f:9b:a6:61:ea:09:23:9c:da:65:69:da:78:57:c1:
                    b8:22:0f:48:39:2d:0a:65:fb:ff:ca:2c:e6:9b:7d:
                    bf:97:ca:ec:ca:e1:c5:d5:35:86:8e:15:1a:17:db:
                    9f:8b:35:91:ea:e6:f2:82:7b:d9:4a:60:c8:f2:50:
                    29:ec:2e:ff:d5:61:d0:f8:d7:68:7c:b3:27:01:99:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:96:9E:4A:E7:F4:5D:56:8C:4E:6D:FE:1F:21:EC:9F:53:E1:C2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:25:b1:af:33:02:08:69:9b:8f:c6:76:2c:80:89:74:ca:
         c5:59:a5:c8:4c:f3:37:6f:b2:79:82:1b:b6:f1:69:7c:0a:c9:
         3e:1f:50:f8:24:c9:e0:b9:b4:52:19:70:4e:1e:01:3a:0c:f5:
         e2:cd:ad:06:51:be:33:ea:7a:63:0c:2b:96:5e:75:f0:eb:b7:
         81:54:77:3a:6a:97:7f:80:de:15:70:b2:53:93:95:22:a8:3b:
         0b:38:66:ef:e5:be:00:38:f6:a8:b4:81:85:0e:2f:62:c9:1b:
         9d:4b:f7:90:47:dd:a9:2a:be:b5:ea:cb:8d:78:69:2a:cb:4c:
         a3:5f:b4:00:7f:0a:6b:93:e6:2d:b2:a6:e4:7c:f6:10:cb:13:
         1b:10:56:f0:98:e8:b5:4e:55:34:64:87:92:af:74:69:7d:83:
         2c:8e:6b:d1:af:f5:b6:89:14:d6:10:a4:e9:45:d3:f3:3b:2d:
         34:d8:9c:c7:2d:a1:9d:05:fc:52:a0:20:f2:f0:84:a8:9d:77:
         c7:33:b4:13:12:18:75:4d:e6:42:f8:23:a6:b9:ea:1f:b5:85:
         06:79:3d:14:fe:ed:50:e1:e3:28:a5:5d:72:15:3b:00:5d:46:
         c9:76:29:1e:58:da:51:d9:a2:65:52:95:98:d5:14:74:9f:9a:
         0e:a5:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:30 2025 by rpki-client