Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa
File:                     f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa (raw, json)
Hash identifier:          USh5sstcM7+E7lb4fUnpJxY/jaSAiZueRtt3BwSt7Nc=
Subject key identifier:   7E:8B:41:C8:AD:85:48:9A:61:1A:43:B1:3D:5D:CB:56:87:51:24:44
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584ADD66656867FF5CF601FACB98
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        130.137.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:65:68:67:ff:5c:f6:01:fa:cb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=9b1e14b8-e433-4d82-b1b1-76a2698905f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:1c:00:49:6e:e9:d8:0f:42:de:eb:bb:d5:
                    07:3f:f8:07:25:09:22:7a:e7:05:0f:4c:bd:15:66:
                    86:e9:ce:83:c2:ed:c7:ba:ac:d2:cf:68:11:9d:69:
                    da:85:53:6d:b5:84:2f:58:37:9b:90:9b:6b:c0:9e:
                    1b:b0:55:19:69:a4:c3:3b:48:74:b1:ff:62:b8:ae:
                    b1:c0:01:9c:ee:d3:72:e2:a4:1f:77:50:b5:d4:e8:
                    bb:85:4e:c8:f5:28:c3:75:da:da:a3:3d:8a:23:16:
                    fe:c0:44:b4:34:ed:6f:6e:08:f6:0b:1e:8e:c0:8c:
                    a0:9d:2c:16:2e:33:06:37:29:8d:4b:e4:09:75:82:
                    78:e8:ce:17:a7:0f:d5:f4:54:54:9a:fc:50:f3:af:
                    da:62:51:e9:54:c9:ba:77:26:bc:72:7a:8e:6d:23:
                    23:58:2d:eb:ca:3b:35:6f:e6:80:e7:06:d2:2e:6a:
                    9d:fe:be:c2:0b:74:8a:b3:9b:01:8d:1f:89:30:ba:
                    96:b0:1e:77:73:fa:28:b8:88:61:e3:c2:33:9e:9f:
                    53:88:b8:0b:77:a8:58:18:a7:cd:d9:32:09:33:9c:
                    fd:ee:be:6a:98:e7:57:f4:23:db:b7:fb:80:15:f2:
                    63:ec:36:f4:f4:5a:47:a3:db:f6:17:68:1d:c7:f6:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:41:C8:AD:85:48:9A:61:1A:43:B1:3D:5D:CB:56:87:51:24:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:de:38:28:20:50:16:be:d9:2a:c6:8d:b9:a0:a4:d9:d4:
         81:95:f4:60:aa:13:9d:c0:bd:d1:c4:af:7a:fe:63:b4:58:f0:
         57:24:a5:c7:1a:1b:34:13:fb:1f:68:fb:4c:73:60:41:88:1b:
         48:61:70:c3:93:02:6f:e1:5a:f3:c0:e1:a6:dd:12:ff:3f:b4:
         02:ca:fb:0c:14:0b:e7:ca:06:35:91:e5:d4:dd:60:d4:3c:21:
         2e:08:6b:d7:fb:18:6a:37:ef:a3:f9:f8:cc:c8:ff:63:29:e0:
         96:14:a6:30:06:c3:a0:f0:29:69:0f:54:34:c3:67:04:fa:86:
         d9:48:5b:b6:7d:42:3e:ac:cc:e4:d4:da:2b:2c:6b:26:2b:26:
         8e:76:a0:77:7c:c5:6f:05:d1:60:14:dd:32:c1:43:f2:3f:df:
         53:96:48:1a:77:3b:de:c4:16:62:3d:11:68:30:ee:a1:29:b3:
         32:9e:91:4b:d0:6e:25:be:cd:e9:d4:d5:c6:67:46:fd:f4:a3:
         7e:ec:e6:b6:77:47:48:d2:51:02:5b:2f:88:6a:e2:3e:29:d2:
         34:68:be:80:9f:47:09:7e:32:8d:d3:2c:11:44:3f:ed:f9:e1:
         f5:19:18:8a:2d:ef:39:39:e9:c7:a4:ce:c4:f2:5d:0d:9b:30:
         45:55:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:23 2025 by rpki-client