Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/63eab2d2-5713-3d9e-8e6a-dbcf44ebf5d0.roa
File:                     63eab2d2-5713-3d9e-8e6a-dbcf44ebf5d0.roa (raw, json)
Hash identifier:          b+RUZsHuRqaAQYYgU/GL4mSPNGgnyoEhy3uoKo3vAS4=
Subject key identifier:   BD:9A:C6:8F:94:92:D2:5F:04:E0:0C:47:AC:33:11:1F:2F:F6:84:B8
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AE89126B4EBEEF04D95C85900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/63eab2d2-5713-3d9e-8e6a-dbcf44ebf5d0.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        130.137.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:26:b4:eb:ee:f0:4d:95:c8:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=074eb145-a623-4475-872f-a72a4353a33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:0f:c7:91:28:44:b1:28:e8:d5:a6:04:b1:
                    55:1c:c1:71:6a:55:ef:ab:3d:d2:11:b2:7b:c9:ae:
                    c5:e6:3e:a7:c9:c8:c1:46:f2:c3:fb:66:12:70:62:
                    96:7e:6c:d4:c5:32:39:7f:28:1c:1e:d3:34:85:72:
                    83:33:bd:a2:97:9f:ed:e3:ff:25:ee:f5:2b:dc:a7:
                    38:72:20:fc:81:2e:79:8b:ba:b3:b8:ee:a6:43:a3:
                    9e:df:c7:ff:1e:3b:37:89:53:02:ec:df:a7:3d:47:
                    e9:4c:77:b3:0c:58:e0:7d:cd:7b:67:83:f9:4f:8b:
                    bf:bc:ae:04:93:47:76:56:95:ff:11:8c:4f:2f:60:
                    ae:6e:a1:6c:c6:12:a4:71:05:aa:d6:fa:25:e7:bb:
                    c9:1c:b2:7b:35:1c:0e:c1:28:86:7e:dc:95:56:df:
                    f1:df:36:23:b5:86:08:59:18:2b:77:50:fc:a0:1e:
                    9a:46:50:62:a3:a6:fc:b8:b1:24:97:0a:29:98:e6:
                    f1:e7:2f:a8:4b:92:d7:85:b3:54:8d:5d:69:3b:e9:
                    38:86:82:3d:2d:c9:8e:29:64:e0:49:be:ba:bc:6e:
                    04:cc:ff:8f:4e:b6:da:3c:7e:52:94:54:7c:92:e6:
                    9f:e1:af:46:b0:5c:0b:62:d1:e0:92:29:0d:f0:39:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:C6:8F:94:92:D2:5F:04:E0:0C:47:AC:33:11:1F:2F:F6:84:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/63eab2d2-5713-3d9e-8e6a-dbcf44ebf5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:39:8d:a7:2c:cc:63:bf:74:4c:9c:f6:24:49:2e:1c:42:
         12:b7:b8:ac:0e:43:e8:b5:35:b5:5a:35:70:b9:57:e8:1c:ed:
         81:12:34:ae:26:8f:cf:1c:66:35:10:44:92:70:36:3f:d6:60:
         29:1d:91:5a:8c:a2:07:28:32:82:17:13:18:dc:2b:7d:7e:b8:
         92:1f:96:55:66:86:c7:94:a2:44:bd:19:e1:95:f9:6f:85:1e:
         15:9c:ed:17:d9:22:ac:d4:fd:af:be:09:17:24:1f:26:d5:ec:
         39:bc:12:3d:0d:74:f6:7b:c4:c5:e7:74:8f:ce:15:44:d0:09:
         b8:0c:48:5c:a1:9c:c9:5d:07:48:3d:80:77:e2:f1:3b:08:0a:
         e3:54:e7:a5:d1:a9:df:be:c4:3a:f7:0d:db:81:7b:e2:e7:00:
         1e:ee:6c:a9:81:34:d0:bb:46:56:03:51:4c:83:37:00:a6:9a:
         79:2b:7f:0a:18:1f:61:4b:75:21:60:1c:21:2a:cc:a6:9e:5a:
         b5:fe:24:84:8f:bd:a4:70:b7:4a:3b:d2:d6:f8:76:6b:d1:9f:
         8e:0d:b6:b5:26:7d:e9:e0:ee:40:e7:1a:fe:ce:2a:2b:ca:f2:
         1f:9c:f3:1a:9e:85:63:de:27:f7:a9:f5:a7:b5:ed:18:e4:5c:
         2c:b5:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:08 2025 by rpki-client