Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa
File:                     3eb727f7-429d-3153-84bc-bca2a65f45a7.roa (raw, json)
Hash identifier:          qSU5ASSAzBSLDkFOg5VHpQHsQ1yPkBW2N+YNKSGjjrQ=
Subject key identifier:   BE:C5:CC:A5:D5:95:25:38:12:87:05:CE:C1:7E:08:81:B1:73:61:98
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBB758420D5CC38224201FB80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        130.137.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:84:20:d5:cc:38:22:42:01:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=d381aaed-934b-4df2-9cfa-13558bbe6d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ab:1c:23:7e:c0:11:9a:77:39:94:01:ce:53:
                    ee:6a:3b:be:3d:95:17:a4:ce:98:fe:01:ed:c9:63:
                    ef:ea:41:d8:84:92:bb:e2:db:62:c0:32:1f:37:c3:
                    b8:48:1f:3b:38:fa:f1:bd:8e:2a:d5:07:13:8e:b1:
                    0c:3d:79:be:1a:85:08:04:76:ff:7e:20:b3:44:66:
                    95:20:73:1a:39:cf:3f:a4:c3:08:5a:09:77:cd:09:
                    3e:4d:c0:a8:7d:5b:59:8f:35:f9:8c:dd:46:cd:3c:
                    cb:34:8a:94:ea:4f:f6:3e:a0:f2:f3:3c:1f:85:23:
                    54:f0:a4:be:92:b7:61:3b:6f:7b:49:85:b9:ea:f9:
                    31:09:09:e4:c5:50:ed:27:32:c6:67:46:71:6b:24:
                    42:29:c5:df:14:4a:07:34:c9:58:da:af:48:c8:47:
                    5b:62:d7:7f:3c:8f:ba:3c:68:d4:61:53:dd:df:6c:
                    f6:f0:21:dd:69:92:f2:eb:ef:f4:73:c3:a8:a9:24:
                    9e:a7:fd:47:a8:31:23:60:ba:91:cf:3a:46:05:39:
                    30:3c:f5:37:6d:d7:8c:0c:87:b7:63:1a:a9:0d:a8:
                    97:ea:a8:11:85:f4:4e:94:66:f3:89:bb:8c:61:90:
                    f3:3a:1c:13:c2:5e:bd:54:d9:20:26:33:5c:c8:3c:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C5:CC:A5:D5:95:25:38:12:87:05:CE:C1:7E:08:81:B1:73:61:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:1b:45:66:e9:b4:2b:86:ce:e5:fd:65:37:78:f8:77:28:
         bf:f7:79:0e:65:b3:51:66:be:c3:1b:2e:7d:a6:6b:64:fc:83:
         17:d7:e1:10:db:70:dd:38:e2:95:3a:a6:aa:66:36:ad:06:53:
         3c:c2:9b:e9:b1:61:ff:a0:77:8f:78:8d:c4:ed:cd:aa:7e:4f:
         50:26:d8:09:cd:79:3e:e5:c8:5c:00:9b:2c:f6:ce:a4:07:b3:
         80:19:22:2c:83:6a:04:28:95:cd:97:a9:c8:46:3e:d5:75:58:
         c9:33:21:91:45:a7:4f:92:9e:b9:de:6e:9f:83:04:bf:f0:38:
         0b:2a:84:86:6b:fd:97:ca:be:7f:bf:c0:1e:e0:bd:14:63:4d:
         72:02:1c:8f:57:fe:4c:da:e1:b1:3a:4e:17:aa:16:54:0f:11:
         03:dd:8a:4d:01:7b:70:d9:a0:03:81:ae:1c:d6:57:06:95:5c:
         8d:aa:a5:62:cf:e3:62:40:ac:78:8d:de:6d:c3:68:5c:c6:df:
         64:1d:6c:58:d6:04:6e:1b:89:9d:de:61:b2:9d:22:6f:b7:03:
         74:1a:10:93:12:76:ea:ad:a2:b2:02:23:85:d6:70:7f:3c:dc:
         e0:7f:0e:8c:ba:98:7f:2f:88:78:57:c6:c3:56:e9:58:33:6f:
         6d:e9:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:00 2025 by rpki-client