Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f75cacc3-b2f8-3cda-80bd-b9b3f313e438.roa
File:                     f75cacc3-b2f8-3cda-80bd-b9b3f313e438.roa (raw, json)
Hash identifier:          nU2F4LrL3HgoudJLVFV/xePSVvggZ3/56pvmrYGaQlw=
Subject key identifier:   D7:37:52:F1:4C:98:E2:A5:1F:AB:83:10:8F:CD:80:75:EC:00:74:63
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF2567A0A7863FD275C3A8448
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f75cacc3-b2f8-3cda-80bd-b9b3f313e438.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        130.137.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7a:0a:78:63:fd:27:5c:3a:84:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=a197e31c-57c4-4fe1-997c-305feee4ad23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:7c:49:33:d6:20:69:64:a4:84:a5:ec:cb:
                    8e:57:29:ad:28:31:d4:c3:97:21:76:26:e7:c2:99:
                    77:6a:ca:4f:91:3b:38:cf:9a:d1:d5:18:1a:17:4a:
                    20:12:28:72:a6:ab:e4:f5:2c:05:66:d4:f3:dd:00:
                    b1:2d:3e:2f:de:36:58:0a:88:54:69:ea:dc:d0:8e:
                    e0:30:84:68:d1:98:d0:53:c0:c9:ee:80:40:9d:e2:
                    76:40:35:be:fd:10:e1:53:c9:ca:4d:3b:31:be:7a:
                    8c:df:c7:f2:42:54:51:af:b7:b2:7a:6e:73:32:97:
                    9b:85:19:f1:22:ca:e9:19:8a:f0:9c:7a:41:ea:d3:
                    1f:02:58:ce:8a:58:fd:49:51:34:8d:8c:8f:eb:6b:
                    29:bb:1e:42:63:b5:b2:97:f7:a3:36:c5:3a:b6:f1:
                    93:41:97:ff:80:42:b8:b7:d5:33:9d:07:ae:1e:54:
                    d8:22:8a:0f:56:39:d9:8f:a7:ce:df:ac:26:35:39:
                    43:22:cb:4f:0f:31:0d:be:5b:fa:3b:e6:68:10:b3:
                    5d:06:e5:55:51:27:a5:79:22:00:ba:03:04:f8:b2:
                    fe:74:6d:50:d5:fa:5a:7a:16:0b:f3:55:52:3d:80:
                    0b:b1:53:30:6f:e6:8b:fd:7d:99:62:a2:68:0c:fa:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:52:F1:4C:98:E2:A5:1F:AB:83:10:8F:CD:80:75:EC:00:74:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f75cacc3-b2f8-3cda-80bd-b9b3f313e438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a8:78:84:ae:18:2c:3f:b0:23:2a:4c:62:ac:41:2a:48:7d:
         dc:cd:d8:65:41:0d:e7:18:f5:21:df:fb:10:72:b0:6e:23:4e:
         69:b3:17:8f:ea:70:4b:a5:80:1c:85:e8:8d:2f:71:a7:c7:29:
         6d:df:0a:8f:bf:8f:91:88:33:2a:51:42:40:c4:60:38:fb:98:
         9b:9c:bc:00:da:9b:43:fd:bc:ef:b4:36:fe:3f:5a:ff:3f:98:
         07:3e:4d:b4:59:74:5e:ce:51:99:c0:23:01:52:35:43:8f:34:
         e3:b0:bd:2e:06:36:73:4f:c4:b7:83:f0:ec:1d:5c:93:44:5f:
         2e:b4:25:c6:4f:f1:f4:34:93:01:e9:f1:8d:05:d3:55:df:2b:
         4b:ff:21:f2:28:14:b9:19:d9:1c:71:32:02:98:11:7c:9e:65:
         59:90:10:e5:fb:1c:7a:91:63:f2:ed:53:ff:7e:32:4e:48:64:
         00:b6:fd:6b:f9:2d:d3:f7:8d:87:d6:35:1d:97:0a:bb:2c:2b:
         72:b7:81:d5:e2:0d:2d:e6:67:ab:f0:c5:73:fe:52:d6:3e:b7:
         43:f0:81:37:27:81:ae:77:51:b7:52:17:ab:60:6e:e2:f0:a9:
         5b:e6:ba:3c:fe:57:06:86:f7:4b:bf:f6:78:b1:3d:44:c2:53:
         76:e3:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:08 2025 by rpki-client