Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/caea9708-e1cc-3ff8-a645-0654abcd94b7.roa
File:                     caea9708-e1cc-3ff8-a645-0654abcd94b7.roa (raw, json)
Hash identifier:          Lsg8PUPlgPzyD8bRfSoQ1CSmOGWbwyt1v21KoiGYfHQ=
Subject key identifier:   6E:37:71:7B:4A:65:E6:7E:70:B5:B7:D1:C4:F8:12:D7:96:3A:15:E7
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF25675108EEA0CC581457BC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/caea9708-e1cc-3ff8-a645-0654abcd94b7.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        130.137.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:75:10:8e:ea:0c:c5:81:45:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=46be7735-aaf2-4a92-a503-2e06483f43a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:f5:bf:5a:31:61:07:c7:44:02:ae:27:a3:
                    ea:8d:70:aa:9a:b1:1c:07:0c:76:1d:8a:4d:3e:92:
                    1a:dd:60:20:5d:78:70:e2:33:82:48:8f:a7:b6:ac:
                    2d:ce:98:db:d2:43:c0:66:60:1b:dd:a0:64:16:87:
                    c4:f2:8d:6f:92:fd:0f:5b:d8:ab:26:78:af:be:ca:
                    67:d2:9e:4a:d9:00:81:10:19:78:f5:96:07:bd:08:
                    5e:77:7a:5e:6b:ae:59:58:b4:be:49:e8:eb:43:b7:
                    bf:b2:57:65:c8:13:c7:43:d5:db:66:50:ac:e9:63:
                    dc:8d:9e:31:53:3a:c3:d0:b6:fc:bb:10:db:d1:21:
                    cb:18:a1:26:bd:f0:8c:67:39:71:a8:4f:8f:d3:19:
                    91:8b:c2:58:50:15:7a:10:03:47:c4:f9:2d:15:44:
                    e5:39:29:9b:90:dd:e9:65:19:fe:f7:73:d6:8c:d5:
                    bc:eb:68:69:1b:a1:9e:ed:63:ff:51:ca:06:78:ed:
                    95:ce:ed:a4:21:2c:17:25:df:d7:6f:9f:04:1e:87:
                    91:b5:cf:10:66:f0:7d:b7:fb:95:62:5c:f6:a3:c5:
                    31:7e:c3:8b:22:97:f2:6b:90:aa:80:b0:f1:c0:cd:
                    1f:52:0d:6d:eb:1a:f9:b3:17:5d:db:14:c9:7f:9c:
                    e0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:71:7B:4A:65:E6:7E:70:B5:B7:D1:C4:F8:12:D7:96:3A:15:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/caea9708-e1cc-3ff8-a645-0654abcd94b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:d8:93:dc:3d:ba:33:5a:b3:ba:93:01:84:c7:38:7f:df:
         e0:02:b3:f1:21:bd:40:c4:8a:91:8b:6a:ab:75:87:06:01:f2:
         bc:35:20:b3:56:63:21:48:41:65:0c:ce:6e:07:62:49:5a:75:
         b3:10:32:61:35:4c:b6:75:a7:79:66:a1:15:4f:3a:f2:f7:49:
         8d:2f:68:69:d9:58:81:5c:1f:a2:2e:c1:a3:c4:52:c7:45:02:
         ec:f5:fc:b0:45:48:05:25:43:0b:47:8c:c4:40:7d:b5:ba:08:
         1e:4b:c6:4b:30:72:dc:dc:4c:09:fd:a0:5b:08:88:c1:88:1c:
         51:2f:12:4a:14:06:33:c9:fa:1d:ef:93:ee:ab:42:b0:d6:42:
         63:9b:8c:ae:d6:13:b2:e4:71:ad:f8:d5:b2:44:85:51:fa:e0:
         ea:d1:79:36:14:3b:9c:c7:dd:4d:d4:2d:3c:86:c0:5c:cc:c4:
         6c:03:00:ed:04:72:c8:47:98:8c:21:52:9e:cd:d3:33:14:59:
         ac:c9:6c:78:87:68:02:dd:04:7a:36:b2:3b:ff:5b:cc:cf:91:
         30:81:5b:8a:f0:22:ca:06:fa:6d:c3:64:60:0f:e2:e0:1a:bf:
         b2:e9:71:a8:b1:9b:92:45:fa:0d:12:f9:57:ed:24:13:2a:88:
         f6:60:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:33 2025 by rpki-client