Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f755116e-7d0f-34a5-8065-b531327349c4.roa
File:                     f755116e-7d0f-34a5-8065-b531327349c4.roa (raw, json)
Hash identifier:          zhMpyWAjX62lPxLFSyMfpff/jduz7Gn9a6TkRIaTAPE=
Subject key identifier:   95:58:68:33:CD:32:22:13:29:9D:4E:24:FF:91:B1:6F:71:7B:EE:B1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF2567486DBE5A649331E9C40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f755116e-7d0f-34a5-8065-b531327349c4.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        130.137.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:74:86:db:e5:a6:49:33:1e:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=64fb9835-0575-471e-80a3-859c6186dee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:b5:bd:f6:46:e7:02:ff:c4:9d:a4:bd:04:
                    b4:17:c3:18:f0:f9:20:09:66:e8:c9:f4:ea:32:6f:
                    2f:ff:97:fc:e4:d5:76:22:9f:21:7f:e4:60:28:4d:
                    49:55:09:ed:12:36:ce:e0:57:d9:3b:57:74:e9:21:
                    21:3d:ae:13:a7:5e:46:a1:47:82:b2:d6:97:c6:ea:
                    0f:cd:2f:00:d9:ef:dd:36:e2:6d:cd:36:2c:0e:e9:
                    82:b7:4b:2c:c8:73:82:55:49:8c:b0:b6:61:70:d9:
                    e1:d9:04:22:f7:55:7c:16:bd:3e:4b:22:ac:74:4b:
                    60:46:70:3a:42:aa:aa:56:87:08:4b:1d:c4:20:7c:
                    29:f3:38:8c:98:03:ec:af:d2:a2:4b:e2:8c:3d:fc:
                    09:9a:65:56:bd:10:02:fe:b7:a8:a5:b6:06:cc:ea:
                    05:81:88:9a:11:87:f5:c2:31:63:59:58:8f:cb:aa:
                    41:ab:7c:6d:70:99:d7:e1:c7:29:96:d0:9f:2b:ba:
                    ce:19:c0:7d:78:1f:5b:9e:84:8e:68:8f:e3:d6:88:
                    f2:8f:6a:59:0c:ad:28:2e:4f:0d:9b:cc:64:f0:b4:
                    fb:c5:dc:d8:58:0c:d9:dc:5e:62:ce:79:03:86:3e:
                    e3:0a:0f:15:6c:8c:65:fd:9a:64:b4:d4:2b:44:7f:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:68:33:CD:32:22:13:29:9D:4E:24:FF:91:B1:6F:71:7B:EE:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f755116e-7d0f-34a5-8065-b531327349c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:c5:8f:2e:f4:b2:eb:9f:1f:f0:1c:68:4a:d1:cb:29:84:
         96:2f:ae:f7:98:15:f1:bc:76:d5:92:7b:15:54:18:00:12:4c:
         0e:05:df:85:ca:3f:b8:a5:e0:65:f3:95:2d:b6:84:16:4c:ac:
         e5:b9:ba:69:67:8b:47:d9:44:64:06:3c:e2:4b:57:1e:75:0a:
         87:cf:58:d8:e5:4b:4f:1f:f7:96:d4:be:5a:5d:15:9a:5b:38:
         43:38:17:62:43:37:b8:de:a7:ef:1a:8c:82:9e:62:70:29:c9:
         ea:85:24:a5:84:b7:12:41:f4:05:91:c7:a8:3f:b4:42:e9:40:
         59:ae:12:7c:18:31:48:3e:a6:08:7e:e6:32:78:64:83:06:29:
         72:9d:34:dc:8d:c7:90:26:85:ae:68:a5:9b:41:90:84:be:11:
         a3:b9:d0:99:77:e9:30:4b:1e:f5:96:e1:17:b6:22:ff:50:a2:
         3f:b3:63:e5:0e:67:b1:7b:b0:4c:2a:3b:3a:05:83:d3:35:6c:
         8c:d9:5c:fb:e4:a0:ae:60:8d:09:23:96:be:58:69:1e:a6:ce:
         23:0f:bf:f3:2a:df:95:ad:0b:04:b9:40:ba:5e:b7:0a:fc:d2:
         ce:08:f8:b2:8b:c2:da:be:3c:00:28:54:1b:30:61:56:2c:02:
         ac:b4:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:12 2025 by rpki-client