Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fe03dd1b-f1b6-3bf7-bb57-6f0aa5f6ff06.roa
File:                     fe03dd1b-f1b6-3bf7-bb57-6f0aa5f6ff06.roa (raw, json)
Hash identifier:          nOlG9tEsu4Wm6JBC0f46Lf57o0oLnv6PQnJTr5093f0=
Subject key identifier:   4D:BE:11:95:21:5B:0A:37:55:15:74:C3:1A:61:15:5E:25:C4:0F:EB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B891769F08AC110437DE19200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fe03dd1b-f1b6-3bf7-bb57-6f0aa5f6ff06.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:69:f0:8a:c1:10:43:7d:e1:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=5a3f5939-e263-4001-827c-8ded655b4dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:84:80:e3:41:9a:05:97:27:7d:30:df:cd:
                    68:d4:ee:78:07:fb:c6:52:f8:34:bb:b4:6f:7b:2b:
                    29:fc:56:18:02:1c:9b:52:c5:cd:cc:24:3a:48:75:
                    a8:a8:77:61:d4:2b:c2:36:07:28:fd:3e:a6:e9:2a:
                    d0:d8:b3:c3:6f:bf:15:e0:85:c5:96:ca:b6:91:0f:
                    10:07:72:3d:ed:33:bd:47:35:74:52:b0:20:37:53:
                    c9:40:15:29:aa:4a:af:d2:db:c1:32:27:e2:de:0f:
                    45:e7:64:a4:75:ba:49:15:b7:62:7e:3f:e3:40:36:
                    bd:7b:98:16:7e:7a:bb:bf:80:db:93:ac:4d:35:37:
                    69:ed:3d:00:5d:cb:bb:54:04:f5:68:2b:89:04:99:
                    f1:6f:82:dc:65:a6:e8:56:2b:c3:24:77:f8:69:81:
                    51:89:8e:26:f5:d6:31:d2:1f:3a:93:17:6a:32:82:
                    f6:91:6e:c8:68:d5:a1:58:fe:50:43:a7:56:5e:24:
                    a8:80:a7:6d:0e:78:7c:c4:06:a2:91:f4:86:e3:b4:
                    0b:c9:da:94:8d:f9:bf:3e:de:fc:b6:74:84:21:69:
                    18:fe:a6:f8:df:7f:b9:35:f9:91:35:95:cd:36:91:
                    25:69:37:1d:f1:8c:46:9b:49:4c:8d:ba:43:c5:1e:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BE:11:95:21:5B:0A:37:55:15:74:C3:1A:61:15:5E:25:C4:0F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fe03dd1b-f1b6-3bf7-bb57-6f0aa5f6ff06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:2a:33:8d:0f:35:09:7d:6c:1d:e3:99:6d:e4:47:37:b0:
         40:c0:10:1d:8b:5b:6b:e7:cb:99:3c:4c:64:bc:00:a4:2b:db:
         35:60:ee:1e:2b:80:4b:71:b7:11:5d:55:99:36:25:de:85:e2:
         e1:f7:3a:51:ef:a8:3a:c1:b8:9b:d1:a3:1a:ad:3b:c5:1e:f9:
         2d:7a:90:0f:af:d1:34:5f:4e:d6:53:e6:a4:43:e2:6e:bf:28:
         3f:0e:c1:9d:95:a2:f3:5b:53:e9:46:6c:81:42:81:7c:72:c3:
         a8:67:91:a1:68:3d:73:17:33:df:6a:9b:ea:4b:15:a2:f2:24:
         a5:73:ac:67:65:f1:30:17:fc:39:01:da:7a:12:c4:10:14:85:
         da:0b:20:11:7a:ea:93:0d:6d:c9:5f:7f:0b:55:0a:d8:ed:fc:
         fa:6f:b9:f3:29:1d:19:f2:1c:32:94:5e:a0:33:d2:60:06:24:
         ae:10:0c:28:90:cf:51:4f:af:bd:b8:49:4e:da:86:03:3d:8a:
         47:f0:a0:06:ca:51:0e:b6:49:ab:b1:ee:29:b6:22:51:c4:26:
         bf:42:12:fe:a4:25:b2:20:f1:d0:7a:c8:15:b3:8c:71:c0:93:
         d6:0e:9d:72:98:39:9c:20:25:54:5a:1e:c2:11:fc:14:50:99:
         e9:71:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:07:34 2025 by rpki-client