Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa
File:                     bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa (raw, json)
Hash identifier:          G5vFDTpsWHiDNDFGLyjeX5KBrZfWyNAvCud6kAnihLI=
Subject key identifier:   1E:45:93:7C:16:5A:E2:EE:EB:A2:A4:80:9C:1C:C1:B0:7C:3E:A8:7C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AD7D1144FF10501D051260680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        130.137.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:14:4f:f1:05:01:d0:51:26:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=00312220-39e1-4371-a93f-6871f5a5b5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:1e:13:98:28:ea:ea:45:fe:20:ec:00:78:
                    c6:b3:40:9b:b0:1c:37:5a:96:bd:78:01:0b:e3:40:
                    8c:bd:a5:94:94:68:cc:e9:cf:26:8d:f7:b0:33:8f:
                    c2:cc:ef:c8:fe:99:25:6d:bd:0b:bc:ef:d5:01:8e:
                    f3:6b:06:fe:a3:54:8f:d2:83:3d:96:a9:ef:c4:75:
                    ca:b7:0d:65:7f:1c:b4:87:fc:a2:1d:64:40:56:d7:
                    77:02:81:cd:2c:09:be:04:69:71:be:1e:8d:a7:08:
                    35:b3:7d:1f:61:26:96:67:c9:a6:86:1f:43:69:9a:
                    fd:3a:a1:bb:2c:fe:68:db:09:73:78:01:63:28:87:
                    99:fd:92:70:b8:f3:0c:1d:f2:51:56:ef:fb:43:2a:
                    1c:a1:3b:4e:b3:e9:c2:b2:67:4f:8d:2e:6e:b5:33:
                    75:c4:0f:e3:d5:8f:46:0f:6b:14:6a:5e:87:e6:64:
                    90:51:b8:5c:c3:a5:c3:d3:f5:28:8b:86:7a:31:40:
                    c9:91:3c:85:16:89:71:e9:f6:21:30:a9:7e:fa:a3:
                    34:04:c1:e2:ff:e1:63:be:87:ad:d6:fb:b5:63:eb:
                    cd:0e:8d:55:47:07:a0:0b:e5:00:16:88:40:d1:5f:
                    cd:d0:10:c1:ff:0d:83:bd:06:c2:1b:8f:f8:ab:39:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:45:93:7C:16:5A:E2:EE:EB:A2:A4:80:9C:1C:C1:B0:7C:3E:A8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:17:fa:7e:94:f0:ac:b5:3f:f6:e9:9a:56:a5:d8:f2:a3:
         d9:5e:33:c1:4a:97:91:b7:67:7f:6f:f9:37:a2:5e:7e:f9:40:
         7b:c4:0a:cf:b3:21:01:30:13:e3:a6:aa:20:c3:10:85:13:4e:
         a8:f3:80:2f:e3:70:4a:20:31:84:a4:62:dd:7c:0d:37:74:3c:
         a7:90:0d:07:47:52:b7:ce:3c:3e:fd:d4:7d:c7:12:25:9d:eb:
         0d:17:df:65:78:7a:4f:2a:b2:50:9b:a4:8e:83:f8:ed:bf:b7:
         bd:5b:6b:b1:88:2b:a4:ed:bb:0a:ff:9d:da:9f:9c:fb:6a:04:
         8c:c9:5f:21:e6:94:85:71:42:37:05:9c:0b:62:7d:06:92:d8:
         51:fa:98:39:d3:30:d3:c2:22:9d:0c:bf:db:07:89:31:6a:6e:
         77:ae:e9:5d:69:e8:8f:7c:6f:c8:8f:1c:a2:93:27:94:d6:6f:
         c6:3b:b4:aa:d6:0b:4f:c8:2d:fa:b4:62:ab:46:de:5a:69:88:
         52:15:44:72:6b:42:35:50:45:2f:42:a3:dc:72:4f:7a:ba:b0:
         49:83:43:fb:e6:20:09:19:31:12:e7:02:f3:ce:7f:0d:2e:2e:
         89:e5:8e:c2:a8:01:8c:ff:08:29:01:1e:ee:33:1e:37:b5:0a:
         a9:05:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:09:43 2025 by rpki-client