Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0332aedc-95c1-37e8-9209-30a498b49ce0.roa
File:                     0332aedc-95c1-37e8-9209-30a498b49ce0.roa (raw, json)
Hash identifier:          QW2U2rJImVkvA5PF+2FhAS4sHKY0NEH0ipQIi4j3QJg=
Subject key identifier:   3E:75:EB:32:45:0B:92:2A:E4:09:8F:D5:70:80:EB:87:29:1D:C5:DC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBE402ECBBE209D0D09988700
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0332aedc-95c1-37e8-9209-30a498b49ce0.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     8987
IP address blocks:        130.137.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:2e:cb:be:20:9d:0d:09:98:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=6f72ae31-4bed-4efe-9890-fbfbc66773ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dd:ac:57:c5:af:80:10:84:da:98:65:73:9d:
                    25:d0:18:a1:cd:cd:73:23:8b:5a:a8:80:fe:3f:62:
                    04:a0:11:32:c5:bd:3b:63:48:2f:ab:f8:b4:ad:ec:
                    4e:9b:6c:ee:7d:04:57:a5:45:48:dd:06:f3:d8:25:
                    42:8b:3a:31:55:49:1f:e7:3c:a0:a7:d5:e0:a8:2b:
                    38:50:a1:2e:d2:23:d5:e2:ae:5a:05:3e:08:ea:e9:
                    63:89:15:84:63:89:21:9c:b1:e1:ac:52:7f:f2:dc:
                    65:cf:ef:81:a6:9d:ce:51:1c:25:b6:0e:dd:6a:2e:
                    fe:fc:b5:d2:f0:94:63:bb:ec:28:dd:2c:40:6c:7e:
                    d3:9e:5b:65:50:8c:0c:29:3a:20:01:b4:d3:e9:ef:
                    7a:21:09:c9:1b:2c:16:d8:ee:eb:6a:33:92:e6:84:
                    fc:85:98:dc:a5:ff:a9:35:d5:42:3c:83:86:f9:e3:
                    e4:f0:b5:90:6a:b3:3a:8c:7a:a6:17:46:f3:12:29:
                    a8:ec:ed:4e:f4:6e:40:df:8c:1b:1c:3a:3b:cf:22:
                    80:e3:6d:92:03:8b:de:80:3b:50:b9:0f:37:98:ab:
                    11:ae:1e:48:89:16:2a:a3:0c:14:f5:87:c0:02:b0:
                    bf:43:ea:be:d4:1e:7f:db:52:de:cf:6d:eb:d2:78:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:EB:32:45:0B:92:2A:E4:09:8F:D5:70:80:EB:87:29:1D:C5:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0332aedc-95c1-37e8-9209-30a498b49ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:04:11:bd:08:56:cc:08:93:c1:ef:c8:8c:46:34:8f:f4:79:
         19:2e:18:88:f9:ae:89:a9:57:4a:2a:5c:a5:96:7f:6c:a1:24:
         a0:0f:71:de:d4:e1:e2:2a:30:2d:2c:e0:24:df:34:9e:86:65:
         9a:51:d8:33:7e:81:e5:f8:07:87:9c:20:ad:5e:f8:17:27:16:
         cd:89:99:b4:97:49:7d:de:c4:3a:1f:ce:3d:90:2d:8a:5c:9c:
         77:ac:ce:b3:9f:29:f7:bc:b2:be:35:50:54:d2:e9:04:ea:8d:
         76:fe:72:ce:86:8d:2e:6a:85:b4:6c:e6:e6:22:50:33:ec:d4:
         55:ae:a5:b5:3f:ae:51:2f:3a:63:b1:30:a3:a6:e4:88:25:5f:
         f0:34:0e:ae:20:03:8a:a2:31:f8:c5:21:b4:cc:90:24:6f:95:
         63:f5:c7:7a:4b:51:44:83:6c:63:5e:9c:1d:3c:89:42:96:fb:
         cf:91:9f:bd:bc:f8:3e:13:f4:87:a9:87:ba:9b:e1:f1:c8:96:
         5c:0d:6f:cc:f8:bb:52:c6:03:64:94:33:65:72:dd:46:d9:fe:
         fb:7a:be:8b:f7:53:0d:96:df:2a:31:aa:fa:bd:14:8c:15:d8:
         25:da:00:8c:ef:58:6b:49:1d:24:37:02:a3:ec:92:c4:fc:20:
         8b:93:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:00:12 2025 by rpki-client