Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0afd874-a50f-3631-9446-949fb732024c.roa
File:                     a0afd874-a50f-3631-9446-949fb732024c.roa (raw, json)
Hash identifier:          n4UlKRjPINxJN3YeUsRgtxTKHmJdPqkWuuffpoaqk3o=
Subject key identifier:   E7:0B:74:68:09:00:AD:BC:1C:FB:8C:75:7D:BC:4A:09:5E:05:55:12
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584ADD666F3B42563CF66FBD5580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0afd874-a50f-3631-9446-949fb732024c.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        130.137.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6f:3b:42:56:3c:f6:6f:bd:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=a30dce90-c382-4430-af31-969e07bb75d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:c1:9c:71:9b:80:7d:b8:8d:b2:d9:58:99:
                    61:16:c2:c2:b1:0b:51:07:47:62:f5:c4:83:e6:79:
                    74:b1:86:89:c9:e6:b6:67:8e:84:94:f4:ef:cc:19:
                    ab:7c:81:8a:70:f0:b1:4b:b1:06:5b:20:69:88:ff:
                    25:46:54:0f:c9:24:2c:ff:90:fd:44:ae:ed:44:dc:
                    a0:e5:42:cf:1f:8d:21:ec:de:5d:6e:f4:3f:43:b5:
                    23:64:2f:78:01:6a:9b:79:1b:0a:a3:7e:ec:64:db:
                    da:73:14:c1:14:cb:91:24:57:f8:0d:8c:59:2c:69:
                    e9:50:96:73:0e:b7:4b:2e:4b:86:17:72:35:01:bd:
                    b3:d6:3e:72:6c:3f:d2:d5:f9:69:fc:90:b8:b8:ce:
                    19:44:1e:60:48:4a:58:43:ba:fe:0e:f1:34:17:ea:
                    c5:c8:f8:14:c3:78:db:0d:d8:47:29:e9:ed:d4:ba:
                    fa:5f:3d:d7:2d:b6:9e:fc:ff:8a:7c:e6:11:78:6e:
                    77:df:9b:d1:a5:56:c0:31:c1:48:90:3d:76:46:fb:
                    ad:2d:ba:a3:c0:94:40:31:17:72:b4:a8:55:f0:e0:
                    51:46:b5:4a:8e:34:c7:25:de:74:a3:ab:68:10:61:
                    38:14:82:19:32:fd:90:41:0f:1d:95:fa:22:10:57:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:74:68:09:00:AD:BC:1C:FB:8C:75:7D:BC:4A:09:5E:05:55:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0afd874-a50f-3631-9446-949fb732024c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:79:1d:03:6a:ef:de:dc:2e:e9:e7:60:53:d5:ab:2a:54:eb:
         3e:af:67:ec:8b:dc:70:46:ee:94:75:4b:5d:ba:67:03:eb:ec:
         55:44:67:e6:8e:9c:3b:b8:25:4a:0e:a4:10:33:1a:1d:74:ee:
         03:9e:e0:f5:fd:b0:7b:26:1a:c0:2c:35:d4:55:be:c7:7c:1e:
         4a:f6:5a:ba:53:9d:25:da:fc:03:61:fe:ad:05:30:af:d3:c2:
         85:57:50:60:eb:08:62:90:e3:64:2d:ec:d2:8a:1e:5c:81:08:
         2e:7c:36:a5:73:ba:63:2c:d7:7d:3b:a0:03:20:27:87:72:59:
         76:79:ce:f0:cb:52:f8:2e:a1:98:e1:c0:28:7b:a0:41:fa:55:
         f5:14:8f:3e:f3:d2:5f:f1:1e:a3:40:ff:a6:fa:6e:1a:15:35:
         4a:fa:7a:6c:92:47:b9:27:03:fa:b6:fd:65:56:6f:76:08:61:
         0c:b7:cd:22:92:a5:ad:18:90:31:ce:ee:9e:d7:47:9e:86:4e:
         21:c2:ae:82:6e:0f:43:cf:28:c7:07:20:30:46:2e:d8:a6:1d:
         88:fc:8a:bf:65:1d:5e:bb:fb:b2:ef:e3:6a:ee:99:c1:26:65:
         0e:75:16:21:99:b4:75:42:be:a4:9a:3d:cb:74:73:06:ea:26:
         b2:16:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:12 2025 by rpki-client