Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0a566540-fbfd-3add-a44a-881ff2a9db5d.roa
File:                     0a566540-fbfd-3add-a44a-881ff2a9db5d.roa (raw, json)
Hash identifier:          eDGf4dQ/NzFPKIRnYlpm3byZNW3irPQ9FMkvVXD8jCM=
Subject key identifier:   38:26:2A:A9:46:AD:2D:5C:FC:20:0F:7A:3E:19:2D:8A:85:FB:4F:5E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BB88D169CF88EAB9E2AFB3B40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0a566540-fbfd-3add-a44a-881ff2a9db5d.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        130.137.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:16:9c:f8:8e:ab:9e:2a:fb:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=152e16ee-cad9-4fd4-9b2d-80a96c0e1ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:75:51:2f:51:ad:0f:89:49:19:7d:c0:95:
                    b9:c1:cb:34:aa:b6:26:65:08:bb:d2:83:40:07:34:
                    34:66:42:97:8d:7e:78:8d:73:d5:3f:af:e4:cb:6a:
                    a6:a7:e7:f2:57:54:31:6c:f1:fb:b4:d2:f6:e0:1b:
                    41:4b:bc:e2:94:2d:25:72:9a:4b:17:62:e4:a8:35:
                    33:af:62:3b:1f:ae:a0:11:a6:21:4f:1a:1a:d3:5e:
                    a1:d6:73:17:4f:f3:ac:3a:3f:4c:b4:44:a5:8b:9b:
                    d3:44:61:0d:cd:9d:6c:73:34:05:88:2d:bd:65:ea:
                    53:b0:59:d1:58:21:d9:cf:09:ac:fe:c3:78:a1:7e:
                    93:02:22:ea:45:2c:3f:93:c4:f9:6b:47:a6:08:8c:
                    aa:b2:d7:4a:f0:8e:b5:d7:f9:47:35:7d:bf:9d:66:
                    ec:67:10:12:18:56:81:07:81:28:29:df:fd:65:e7:
                    ed:f1:4e:76:fb:1a:ea:71:00:fa:24:bf:ea:9d:a0:
                    14:80:f3:52:2e:ea:2c:49:0b:b6:f4:c5:d0:96:82:
                    10:4c:34:61:d1:68:4e:8a:cf:d9:e8:14:af:f3:51:
                    3c:fd:27:52:ab:89:13:19:3c:f1:71:86:36:7f:6c:
                    20:ce:62:42:fe:1e:94:be:a3:ca:b4:e7:c0:b0:72:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:2A:A9:46:AD:2D:5C:FC:20:0F:7A:3E:19:2D:8A:85:FB:4F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0a566540-fbfd-3add-a44a-881ff2a9db5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:36:02:cc:af:8d:e3:b8:ae:a9:90:e9:b7:55:d4:6b:c6:79:
         0f:8a:47:a3:70:07:00:3b:62:9d:10:c7:f2:28:0d:09:be:4d:
         e4:41:cb:50:46:42:7a:0a:78:cd:73:f1:ab:e5:b4:1b:f9:8c:
         dc:2f:a8:f8:5d:25:c6:40:d9:c3:f1:93:76:0c:74:23:9a:6e:
         7e:e4:37:46:ff:ea:91:c2:18:b9:ee:2c:ba:5a:d0:f5:32:b0:
         92:db:22:86:b6:af:85:e2:de:9a:33:c6:72:06:a2:fc:9f:86:
         d2:62:ff:1a:a4:c8:9e:05:bd:91:2f:fc:aa:7a:5e:33:56:ec:
         04:f4:91:ee:bf:43:5a:12:4a:f4:85:4e:8a:98:a1:0a:dd:70:
         59:87:6b:64:3c:c8:4d:7d:d7:5e:52:01:20:ac:38:4f:0e:7f:
         90:c9:06:13:e8:80:73:40:08:92:07:2c:31:f5:87:26:39:dc:
         91:73:bb:9f:f2:d3:c1:b9:1d:93:b6:dd:ef:a8:25:fe:65:df:
         01:b1:40:fd:2d:34:a1:a0:ef:b9:e0:6b:41:ae:9b:45:19:af:
         e9:19:f5:e0:9d:bf:17:0c:8f:29:f4:03:37:25:8d:59:be:bb:
         33:c9:4c:1c:74:e9:29:83:e0:3e:21:dd:1f:73:47:ce:4c:f2:
         5e:a1:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:51:59 2025 by rpki-client