Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
File:                     3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa (raw, json)
Hash identifier:          r1xrtiCzNT5uGCICAGCf8/t4eTAGE3BIuNu7vNILfSE=
Subject key identifier:   60:3D:D6:F1:DA:AB:80:90:46:58:92:BF:4D:51:8B:3C:6E:80:D7:41
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85BAB1E9F1CC13697A09618
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.137.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ab:1e:9f:1c:c1:36:97:a0:96:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=7fe18e19-23cb-4571-924a-f3597fe6791d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:22:ee:2f:c3:c9:4f:20:c1:de:6a:01:ea:
                    dc:9a:65:fc:e7:5e:81:d5:4b:4c:dc:c4:64:cc:25:
                    b2:e9:99:6e:68:bb:05:18:6b:9e:c2:fa:9d:17:2b:
                    da:ec:65:7a:3b:1e:b9:4a:86:2a:71:17:2e:d9:57:
                    8a:e2:6f:d8:d2:f6:92:dd:71:d7:8a:43:2f:17:70:
                    62:4f:13:de:3f:2c:2f:76:a5:a1:49:27:53:f8:d9:
                    9f:63:23:4f:32:7c:80:c1:4e:c1:a6:9a:24:f2:c6:
                    13:c8:e2:b5:e1:72:49:6c:ac:e8:a2:7b:3c:75:7f:
                    6f:8b:05:af:8d:83:97:74:4e:ab:91:6a:e2:38:bb:
                    9f:f1:1b:b2:d0:37:83:b2:f3:9e:80:3a:e7:7f:5d:
                    93:0f:b0:11:65:30:2f:ec:d7:1b:41:3c:b3:7e:ae:
                    5d:7e:53:ca:ca:08:52:28:b9:fc:ff:61:0c:d3:98:
                    f2:3a:35:5e:48:f4:d4:df:88:de:36:8a:b4:5c:3d:
                    8a:5b:56:c1:79:1a:21:44:3e:26:a5:75:e6:1e:27:
                    10:de:30:c5:fc:6a:65:3c:f9:64:46:86:25:9c:da:
                    89:d4:c1:d5:84:d1:2b:78:b9:4a:4f:68:c1:bc:1c:
                    86:90:06:20:6a:73:7d:50:33:c3:48:3e:08:79:05:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:D6:F1:DA:AB:80:90:46:58:92:BF:4D:51:8B:3C:6E:80:D7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:d6:0d:4d:e8:04:57:ac:7d:67:9e:94:eb:73:61:ee:ec:
         3a:0f:fa:2d:d7:19:b4:4b:93:3b:88:4a:a6:ab:c3:40:ca:0d:
         03:cd:46:41:1b:3a:58:06:52:1e:52:4b:fe:3b:6c:ab:38:bd:
         5b:45:3c:ae:53:cb:1d:bf:62:49:06:60:05:7d:54:69:80:e3:
         7d:ec:8f:65:00:8e:5f:1e:4e:c9:d6:a5:5c:a1:7d:aa:93:9b:
         08:31:b7:36:9a:99:04:d0:94:cf:5b:6d:cf:ab:0a:78:bd:88:
         c2:f4:28:5c:9a:d0:a0:b1:37:88:ac:c0:d8:94:76:f5:75:fa:
         b5:75:f3:e3:a2:44:9f:a4:52:47:d6:57:b0:88:ac:ef:d3:fc:
         f5:2e:f2:11:95:6e:6f:dd:c0:e7:91:e9:8d:6e:2f:7f:00:53:
         77:ca:fa:8b:c8:43:e7:de:65:ad:38:4f:a5:89:71:cf:3d:fb:
         f8:1d:f1:96:8f:cd:0d:4a:25:1d:4e:3b:a5:69:55:7e:7c:ee:
         2e:5e:c2:d2:a7:f0:6a:32:9b:97:16:03:5c:3f:23:10:06:bf:
         c6:b4:9f:dc:0b:63:91:4c:3a:59:9a:29:67:97:7a:d5:ca:ce:
         21:f2:a1:13:53:41:9e:64:a1:dc:fa:30:1c:6d:18:73:55:1c:
         5e:b3:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:30 2025 by rpki-client