Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/81b287f0-c2a7-3f5b-8ec0-f63bd4dbcab9.roa
File:                     81b287f0-c2a7-3f5b-8ec0-f63bd4dbcab9.roa (raw, json)
Hash identifier:          UI12+28OkLKdMrhaWMj8n4/2CA+4tWCrCuWKtsqyEIM=
Subject key identifier:   D1:5F:F5:B0:72:9C:39:FB:01:4E:03:F2:37:08:79:19:1A:75:7D:38
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B583C8F3B4A175A4B71211100
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/81b287f0-c2a7-3f5b-8ec0-f63bd4dbcab9.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     21664
IP address blocks:        130.137.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:8f:3b:4a:17:5a:4b:71:21:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=3ad1cfdc-1881-45c9-b1f1-1adc5492922d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:d2:5d:92:e9:6d:2e:38:0b:9e:47:a5:d7:
                    ae:a5:b4:18:a3:d6:45:42:c0:20:da:48:16:56:30:
                    36:e0:14:a0:bd:b1:ae:f7:44:24:63:a2:a7:45:e0:
                    fa:bd:b0:82:38:71:07:e5:9b:61:66:8a:10:cb:0a:
                    18:83:03:96:6e:c2:80:b6:33:dc:df:b6:55:3e:b7:
                    97:2a:bd:d9:fa:90:0d:6d:72:3c:7d:f0:fd:8d:be:
                    50:67:8b:aa:67:3d:07:30:03:48:63:f0:8c:dc:20:
                    d8:90:b9:02:f8:79:9e:30:2f:3e:26:92:73:0f:f4:
                    b7:20:f8:9d:85:d0:44:df:4c:bc:40:dd:e2:5b:6a:
                    f5:6f:c2:96:9f:f1:26:2a:1c:86:b3:99:aa:c1:26:
                    2c:40:a5:13:6e:17:eb:2c:43:ef:ce:54:2c:ec:6b:
                    19:56:b9:44:0d:ca:bb:62:06:50:df:87:4f:b0:7f:
                    e9:8a:5d:16:4c:b3:f6:c2:c3:6b:78:5a:4f:fb:4b:
                    1a:63:65:4b:23:6e:95:8a:de:33:de:0d:d0:17:bb:
                    a0:1a:f1:9c:5c:9d:3b:71:5e:ae:f7:6a:96:7f:9a:
                    b7:10:34:28:24:66:15:71:db:29:23:dd:a5:19:18:
                    1b:7c:65:83:0e:12:7f:d0:3e:89:c6:50:77:1c:cc:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5F:F5:B0:72:9C:39:FB:01:4E:03:F2:37:08:79:19:1A:75:7D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/81b287f0-c2a7-3f5b-8ec0-f63bd4dbcab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:f2:0f:b4:e6:e7:d5:d3:6e:7d:34:c3:88:06:2f:5c:b1:
         16:f8:e0:34:6a:09:5d:1e:55:19:e8:5e:e4:3e:f8:54:5b:f2:
         53:ea:d9:49:5b:d0:a4:3d:76:d7:25:4d:7e:e9:b7:ac:ab:3f:
         9c:ae:ce:97:09:f4:da:44:95:2d:62:4e:c3:10:62:8f:48:51:
         43:9d:3f:41:16:d4:8a:5f:54:77:fc:19:18:f7:1d:22:34:f9:
         71:0a:d0:3e:40:98:c1:23:1b:68:84:92:20:13:9c:3b:bc:48:
         5a:e9:25:d1:55:97:31:a1:7b:92:87:6a:9b:1d:35:fe:a6:d7:
         b3:ce:a7:3c:ca:26:7d:25:62:ff:53:81:67:11:9d:09:77:16:
         0c:86:69:5e:e3:d5:80:32:9a:12:26:0d:87:85:f8:f7:a9:d3:
         38:71:c5:16:22:fe:2a:9c:00:23:bd:48:3d:22:b4:e0:3d:f7:
         10:c5:13:2a:01:75:73:1d:3a:0e:9e:ca:db:88:1c:22:02:9c:
         5f:df:05:51:a3:2c:5f:09:59:3c:4d:5a:01:bd:b7:3c:81:bf:
         45:25:68:f1:72:de:71:fb:5f:f5:81:bb:21:2c:f5:df:e5:3f:
         a1:c5:eb:8d:c2:a6:53:1e:7e:5c:d4:dd:9d:49:3c:10:ca:1b:
         75:64:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:13 2025 by rpki-client