Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fbc7d525-c88b-3f2f-8d52-cf01bfda8e65.roa
File:                     fbc7d525-c88b-3f2f-8d52-cf01bfda8e65.roa (raw, json)
Hash identifier:          fly2inB2vkrOS7bKcOaAKjDD9zPhLbNQZDx/5F4/6iA=
Subject key identifier:   38:6D:2A:EE:A6:65:43:22:F9:01:FC:7E:11:89:51:7E:21:5A:02:FC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF2567540CA48A0C2DA816C80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fbc7d525-c88b-3f2f-8d52-cf01bfda8e65.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        130.137.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:75:40:ca:48:a0:c2:da:81:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=bec467d3-47c0-47f9-ba2f-9d150bc28622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:90:d8:cc:e6:8c:56:2d:34:7e:1c:04:0d:
                    27:45:9e:98:96:77:92:4e:b8:c9:1b:45:23:6b:ee:
                    af:d8:ec:10:0a:a5:73:e1:ac:2e:a7:b1:78:93:4a:
                    37:41:bf:66:ca:c5:c7:03:df:24:79:12:9f:a9:e3:
                    8b:16:2e:9e:aa:68:6e:9c:a8:e6:9e:77:ae:a6:da:
                    6f:1e:0d:d2:b2:e7:cc:a6:8d:60:b2:ed:cd:0f:d6:
                    f1:8f:ec:af:46:44:a4:4f:c5:12:cf:f4:ca:eb:39:
                    24:d0:41:be:ff:d6:c8:ad:e0:56:45:fe:10:9a:70:
                    bd:a0:50:01:95:aa:f6:34:52:5d:95:f8:01:e5:2f:
                    1c:3b:c3:32:a1:ea:65:b5:06:bb:e9:f3:7c:c1:34:
                    40:71:e1:2b:33:65:1f:f5:2a:36:ad:cf:b3:0b:71:
                    57:c6:04:80:71:38:4b:b8:99:2c:05:b9:de:40:d6:
                    46:8a:b0:00:f5:f7:d6:fd:37:19:7d:9c:4a:9c:a4:
                    b7:e3:dd:e8:da:bb:06:82:73:da:73:61:4c:0a:40:
                    ae:cc:8b:0c:35:41:66:f6:b6:e8:e9:93:7e:56:52:
                    7e:e1:0d:24:87:43:46:24:67:93:f3:8b:70:f4:e0:
                    60:ff:e9:d6:47:4f:33:5c:07:15:93:5b:66:2a:57:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:2A:EE:A6:65:43:22:F9:01:FC:7E:11:89:51:7E:21:5A:02:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fbc7d525-c88b-3f2f-8d52-cf01bfda8e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:d6:4e:fd:54:b4:d9:b3:bf:13:11:78:7e:3a:16:2c:ca:
         64:11:25:f0:1c:6e:c2:8f:d3:d0:6b:93:5c:e2:f5:33:a4:f8:
         e7:a1:a2:f1:3d:c7:3b:7f:19:0b:08:b9:cb:61:e8:2c:51:26:
         7c:a9:ec:01:53:58:75:bf:ac:8b:76:92:08:7f:84:78:f2:42:
         9e:c9:5e:70:53:a0:78:dd:45:14:43:99:0f:88:4b:60:c9:b8:
         7d:03:ec:e0:6d:1b:df:0a:2c:cc:52:11:40:d0:68:09:67:1a:
         31:d5:5b:5f:17:60:86:28:b5:66:38:83:53:1f:c3:4a:40:e9:
         10:89:d5:fa:bc:c9:fa:1b:e5:e2:d4:a7:2d:78:c5:b4:68:56:
         31:6c:3f:74:bc:e4:ab:26:e5:56:71:d1:4e:70:06:f8:b8:28:
         b4:86:0e:77:ee:ba:68:7a:91:2a:1a:ec:b9:1a:e4:f5:9a:ac:
         d6:a4:c1:d8:fa:76:47:dd:d5:7e:94:15:23:9a:08:42:12:b8:
         54:f3:de:c5:b2:51:aa:40:d8:50:d0:07:a2:8f:08:bb:34:55:
         f6:62:3e:05:69:fa:ac:8e:41:9b:99:0a:a3:de:54:7d:e5:2e:
         d6:e6:e1:6d:12:86:4e:e6:06:01:9d:1c:32:a7:3b:bf:91:ec:
         a7:c8:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:54 2025 by rpki-client