Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa
File:                     b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa (raw, json)
Hash identifier:          dhSySIAuEP/zoyZL0vnq5fYfl+ADYBckn7bR1YIC9/U=
Subject key identifier:   18:48:F7:56:D7:DB:E1:30:B2:D6:78:89:68:79:D0:BE:0F:13:64:C9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B95A79D9613EA2C30BCAC6400
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     8987
IP address blocks:        130.137.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:9d:96:13:ea:2c:30:bc:ac:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2d88e840-ba14-45b1-ad9a-148db58c0deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e1:13:13:79:09:12:54:d4:4a:85:a8:31:89:
                    9f:2b:cd:80:6e:84:95:86:95:50:12:33:74:a8:eb:
                    d0:d2:65:03:cb:de:8c:9d:fa:2b:b7:4c:2f:b2:f5:
                    7b:8f:3e:3f:3b:be:c0:14:37:0d:aa:c2:0a:bc:38:
                    c3:37:da:c6:7a:80:70:ce:af:c1:85:c6:0c:ef:cb:
                    a8:31:35:96:b4:81:45:ba:ab:f8:55:79:70:86:9d:
                    3b:52:45:26:bb:93:a0:bb:9f:a2:ee:ef:2e:b6:d7:
                    8b:35:20:03:38:5d:e6:00:5c:23:59:b5:bb:d8:03:
                    f7:e3:63:67:bd:20:cc:5b:0b:57:01:43:39:81:d4:
                    d5:b8:c5:75:cf:8c:8c:2e:4a:94:ce:88:b4:4d:63:
                    20:2f:5a:c0:d9:48:a6:17:97:99:49:d6:d8:2c:fc:
                    0e:5d:fc:4c:cf:6f:28:78:68:bb:e0:f0:a5:de:8d:
                    28:62:54:b9:fb:0e:cd:c2:89:f6:dc:c1:1d:b2:dc:
                    b8:03:a0:1f:5e:07:da:68:47:2b:9d:96:72:2e:be:
                    f6:a8:00:7a:25:03:e3:f2:c9:66:82:51:09:27:02:
                    10:37:ab:8f:26:4c:c5:73:d8:8b:0d:4c:cb:d5:a3:
                    5f:eb:1d:a4:56:45:f6:37:84:8f:16:69:81:bd:23:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:F7:56:D7:DB:E1:30:B2:D6:78:89:68:79:D0:BE:0F:13:64:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0c:0e:d6:47:34:b6:d7:d6:57:61:d0:11:e2:d6:82:d8:5d:
         b6:f0:25:81:94:95:f0:f9:83:b3:0f:46:37:8d:e8:ca:e7:29:
         06:27:93:4e:47:fa:08:42:89:c4:87:fd:e8:ab:3f:26:80:e4:
         0a:e9:98:d0:b0:0d:b7:78:5e:83:e2:c7:69:50:a7:f9:24:27:
         dd:91:5f:b5:d0:d3:0d:7a:fd:50:1c:33:c0:0e:b1:ab:1c:e3:
         a5:cb:d2:d3:94:8f:78:37:81:f2:fb:41:2d:ec:c4:e8:03:c7:
         b4:81:cc:e6:cd:e7:98:27:bd:fc:36:f0:8d:31:60:e9:b7:93:
         90:0d:02:55:fb:ea:89:7c:fd:48:e2:e2:93:66:ef:43:7f:fa:
         5b:39:40:88:ca:ce:ae:39:4a:0e:48:c7:2d:cf:06:6d:ae:36:
         a7:bd:4e:46:8b:40:a2:f8:db:2b:16:e7:f8:d0:b4:ac:40:dd:
         eb:54:2c:fa:26:6c:00:09:24:2f:e0:96:be:ca:98:22:bd:06:
         9f:8c:71:42:33:bd:cb:d2:75:be:c7:86:ab:1a:da:3b:73:65:
         75:ef:93:45:c5:0e:9f:bc:40:b3:36:d3:b3:a3:31:45:d7:da:
         69:e3:3e:76:89:c0:3c:99:5d:f0:57:b5:d3:89:53:dd:51:d0:
         de:62:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:23 2025 by rpki-client