Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3a7b9254-ed5d-34ba-8b7b-c6451bdb79ce.roa
File:                     3a7b9254-ed5d-34ba-8b7b-c6451bdb79ce.roa (raw, json)
Hash identifier:          b0Q9I71HgEDFeCZ2VRdnISOPW0eyXNSMvtVI+4htk+s=
Subject key identifier:   46:0B:3E:3C:45:C6:C0:4B:EF:81:E4:E4:4D:ED:63:E9:27:15:CA:1C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBE402FBF23ACF1ABC5C9B200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3a7b9254-ed5d-34ba-8b7b-c6451bdb79ce.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        130.137.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:2f:bf:23:ac:f1:ab:c5:c9:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=14ff5968-3846-4c07-92f8-04017490476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:ff:ad:1f:d6:c4:29:09:65:a7:b9:c4:8f:
                    16:88:d9:8b:93:8e:74:10:31:fa:a7:32:2f:b9:e3:
                    82:f8:60:98:3e:c2:66:21:bb:98:c0:cf:1a:bc:07:
                    a8:0e:39:94:24:b7:0b:85:d3:31:69:71:fc:72:b8:
                    07:b6:62:30:86:d9:0f:ef:a4:a0:ea:b5:74:64:08:
                    27:55:53:ad:a9:e3:6e:a1:25:cb:31:4a:c0:e4:82:
                    0e:a5:76:d0:81:ab:57:08:ed:64:56:3a:b4:fd:a5:
                    6b:27:f2:6c:86:ba:a0:e6:e3:b0:d3:ee:a6:bd:92:
                    3d:22:6c:46:1c:ac:68:b0:48:25:d1:7d:a9:3f:8f:
                    6e:7e:6c:74:7e:14:0d:64:85:c0:b9:ff:4b:93:45:
                    f8:66:a1:de:f1:3d:b9:17:33:98:d0:95:e9:8c:36:
                    2f:c9:89:60:3d:a7:80:a0:76:06:dc:cf:fd:af:19:
                    d8:ae:f7:b1:0c:dd:0e:bf:4f:29:f0:12:66:d4:1b:
                    d4:b9:71:5b:8b:fc:a8:ac:c9:8b:b0:ed:3d:9f:aa:
                    eb:37:c6:34:85:62:a4:b0:24:3a:0a:a5:06:d5:b7:
                    fc:a3:1b:48:b2:24:72:de:51:87:92:40:9e:32:1f:
                    0b:74:4d:e5:17:be:b3:38:6d:42:29:38:8d:35:d1:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0B:3E:3C:45:C6:C0:4B:EF:81:E4:E4:4D:ED:63:E9:27:15:CA:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3a7b9254-ed5d-34ba-8b7b-c6451bdb79ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:06:76:9b:97:5a:c9:11:6a:c1:56:19:a4:2c:fb:af:28:e1:
         17:7b:c1:07:41:cd:e4:26:1d:d9:7d:a7:93:48:ff:1c:6d:27:
         9a:2e:16:ac:59:c9:9c:28:05:f2:64:c6:11:74:8f:b3:88:1e:
         ad:0b:cc:ae:71:4a:c8:b4:c5:84:3b:53:85:77:05:30:1d:e6:
         8d:9a:e3:e5:c5:3e:a4:5c:9f:93:56:87:d8:1d:d7:11:96:22:
         ff:bc:3e:2c:ee:ae:ef:83:ab:97:0b:61:b8:4c:55:65:3e:bb:
         29:31:81:30:12:6e:62:09:8b:a3:03:e7:a3:8c:56:d0:47:af:
         05:b1:b0:01:8a:ca:24:98:d0:61:54:47:76:5b:b5:25:1c:93:
         d5:89:84:02:0a:f1:8f:1c:f1:29:61:fa:1b:31:a9:bc:f9:cc:
         a8:b1:c3:6a:93:0a:3c:3e:c6:f2:63:67:e3:03:d1:21:05:21:
         11:69:20:53:7b:71:f2:93:ee:4c:43:d8:6d:51:1a:69:0d:d6:
         a1:fd:58:6f:36:b0:49:65:ad:32:1e:a8:32:3e:90:3f:11:a4:
         be:5f:ed:44:c5:19:67:d7:a5:76:f0:aa:a2:85:bc:de:87:f9:
         48:ed:20:37:33:5c:9e:7b:7c:64:41:50:bd:ab:b4:94:da:82:
         16:e4:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:36 2025 by rpki-client