Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1d1d486a-fdcc-3e9c-8c91-555827840f05.roa
File:                     1d1d486a-fdcc-3e9c-8c91-555827840f05.roa (raw, json)
Hash identifier:          Ykqm+Bp+OmF05Sz9VY88hba4KdXImusEVBmhuCIaA60=
Subject key identifier:   1A:CF:F1:3C:69:D3:E9:FA:37:F7:59:4D:3A:FE:C6:73:6A:94:C5:3E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BB88D0EC25112D5620C213AC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1d1d486a-fdcc-3e9c-8c91-555827840f05.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        130.137.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:0e:c2:51:12:d5:62:0c:21:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=801dcb01-4052-4e51-8fe1-c3879466a5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:91:b3:2d:28:c0:9c:0c:82:da:46:c2:9f:
                    2f:1f:51:09:b4:4e:92:ec:b0:f8:7d:5f:c1:c0:6f:
                    71:4c:cf:88:7a:4c:b8:af:23:38:f0:59:96:51:11:
                    85:1e:26:f7:da:f0:da:ca:c9:ab:8b:3a:8e:ee:63:
                    20:b8:44:8b:aa:74:12:82:47:64:de:37:59:c2:d9:
                    fa:90:f0:35:c6:9d:a3:7b:a7:e8:da:76:c2:52:dd:
                    07:bc:28:03:9a:19:01:bb:7c:80:87:61:4e:38:89:
                    6e:62:bd:31:7c:06:6a:33:84:20:13:dc:61:82:29:
                    f6:02:cc:ec:3b:42:01:b7:89:70:72:c3:f1:85:f0:
                    1f:72:82:b3:50:bd:fb:07:7d:7f:bc:8d:78:27:b5:
                    c7:a1:6f:d4:38:a2:bf:3c:75:c9:87:94:d4:05:97:
                    2d:3a:cd:af:40:85:83:98:51:d0:6e:e3:fe:2d:5c:
                    35:0c:a6:5a:61:18:30:1c:9d:e3:29:56:52:c8:c1:
                    79:66:00:1f:a2:2e:5b:02:36:29:7b:58:8e:5a:7f:
                    70:19:d4:64:76:e8:f9:58:45:3f:52:92:1a:96:d4:
                    db:1e:18:a8:33:9e:30:be:9f:bd:ac:76:4d:a8:86:
                    6c:50:cc:cd:97:8b:58:16:92:24:0b:d0:fa:46:61:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:F1:3C:69:D3:E9:FA:37:F7:59:4D:3A:FE:C6:73:6A:94:C5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1d1d486a-fdcc-3e9c-8c91-555827840f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:13:1b:a9:78:06:df:a2:50:50:fa:60:df:2b:ad:ac:12:
         e8:47:16:d0:b7:5d:2e:5d:a2:57:77:81:1f:0e:5e:e8:df:cc:
         c6:ed:49:85:9e:4a:67:81:49:79:ff:b1:6e:79:f8:4e:c3:de:
         3a:0d:c1:fa:9b:cb:bc:7a:85:c9:67:76:1e:a8:a3:fe:9b:4b:
         24:d4:09:17:e7:79:ab:de:f8:bf:f3:29:6f:bf:a4:8d:35:f8:
         10:04:45:f6:3b:e9:1c:06:eb:42:41:b6:74:d1:9e:22:c7:19:
         08:96:7d:ea:17:76:14:6e:9d:c3:94:ce:6a:44:09:af:ed:e2:
         60:8f:47:0a:1d:12:26:8a:f3:f0:50:42:96:ac:22:f6:b1:9d:
         55:c4:b5:b6:e9:75:27:e7:c2:fa:1b:ef:4a:35:56:d9:7d:f2:
         e9:ea:d2:ab:c0:01:c9:2a:06:2e:9e:85:fa:75:82:da:63:70:
         b2:17:77:c1:37:d9:67:1e:d8:cf:4d:9d:75:15:9e:f7:f6:44:
         0d:d6:85:61:82:5b:9f:5b:3f:8f:58:0b:d9:08:2e:59:21:59:
         76:03:6c:47:a4:e2:af:20:79:23:8d:56:9a:fa:a9:f0:52:23:
         a3:6d:1d:a0:02:9f:41:e8:50:10:1c:92:81:6a:d4:06:12:6e:
         6a:47:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:04 2025 by rpki-client