Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
File:                     155ef00e-8903-3078-b1a9-610088db3245.roa (raw, json)
Hash identifier:          xcKHi9BGXPGUUb3qKzEOsrNUNdtijMc86ZI+AFz/kcM=
Subject key identifier:   DA:C2:E3:A3:11:D5:1B:35:6C:BD:9C:7B:FB:F4:94:03:E4:0F:CD:0D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AAB2667FABA0FF2ED29D46E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        130.137.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:67:fa:ba:0f:f2:ed:29:d4:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=dedfce04-fd6a-4267-b538-cd4438404390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:7c:77:8b:2c:a5:df:b0:2e:e1:db:a3:98:
                    f4:16:70:b8:c2:61:45:39:ca:7b:20:c7:9e:bc:01:
                    46:71:43:e6:7b:6b:49:4a:94:80:9a:a8:eb:4a:0a:
                    e7:66:51:8a:f3:e6:5d:d7:ea:e8:2a:1a:e7:5c:7b:
                    5a:c2:3f:f4:95:06:bc:37:ef:a3:4b:be:02:0a:45:
                    a9:b5:07:a2:04:04:75:b9:6b:77:83:39:32:4e:19:
                    a2:6e:25:86:2b:69:a4:de:3a:3a:54:84:53:00:a9:
                    ef:98:44:7a:1f:56:89:65:71:19:f7:76:9b:d5:61:
                    97:2b:01:fa:a5:42:a3:cf:ed:bd:e2:bb:9b:f2:f3:
                    ea:64:bf:da:d6:2f:72:da:e3:55:a4:24:e9:1f:92:
                    a1:e0:04:93:5f:0b:e8:6f:d7:92:b9:c0:3f:bf:91:
                    54:d3:f5:81:f3:fe:b4:ef:69:0b:e5:a4:9f:95:73:
                    21:f3:56:24:cd:07:5d:ba:69:c6:2e:df:66:65:6b:
                    93:27:e9:c3:bc:b2:8b:75:9d:4a:15:04:a5:fb:6c:
                    cd:92:ec:8b:ee:92:99:2e:bf:6a:8a:aa:9a:77:26:
                    a3:38:48:c7:58:19:c2:89:47:af:f8:f2:6a:f7:7c:
                    13:a5:f1:c9:6f:f9:b1:65:b1:1b:4e:9d:b0:25:f7:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C2:E3:A3:11:D5:1B:35:6C:BD:9C:7B:FB:F4:94:03:E4:0F:CD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7c:68:56:5d:e9:37:e1:e3:fd:e1:86:ad:07:80:f5:9a:8b:
         d8:99:84:88:f8:4d:dc:ac:b1:29:6e:0b:52:62:9a:85:cf:d3:
         90:f3:a6:57:62:b4:fc:9e:85:09:01:a1:72:2f:7c:af:41:09:
         53:c0:5c:96:6d:21:74:f4:16:33:ec:12:a7:e7:33:f8:2c:ab:
         7e:97:36:86:bc:5e:53:ab:f1:3c:e2:30:ad:0c:c5:d0:c9:9a:
         cb:02:5e:97:f2:6c:d0:07:5d:ac:a1:1a:fb:68:f9:c0:85:8d:
         a2:c4:41:05:11:d6:30:72:bd:d2:30:4c:73:6e:79:37:79:19:
         bf:2f:c3:15:b0:de:c3:06:e5:19:f6:a4:42:50:41:4d:38:48:
         21:10:39:bf:9a:fc:7e:af:1e:d0:cb:68:36:13:5b:ac:01:3b:
         e9:c8:a4:34:1a:f0:71:cd:1a:01:99:d9:fc:89:3d:e5:0f:6f:
         49:c6:6a:b1:df:f2:b5:1e:1b:94:e2:5d:b6:bd:b8:30:cc:12:
         b8:01:93:6c:72:fa:e2:53:59:cf:08:be:ac:e1:8a:5f:0b:c1:
         cb:73:cc:f6:c4:66:07:80:94:50:cd:9b:bc:ae:a8:49:c5:d2:
         78:24:98:be:10:57:b0:ab:2c:10:41:61:9f:87:b8:13:47:14:
         ad:92:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:57 2025 by rpki-client