Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa
File:                     53484dda-0bc6-350c-be01-5a462cf2fd84.roa (raw, json)
Hash identifier:          AEnPKqX94Bn0DbCe1Icb7A3RTb2r7Qlr1jqJ3IZideU=
Subject key identifier:   41:90:EC:AF:72:C9:B8:D4:00:09:A1:7C:58:AC:B3:D9:FB:1D:98:83
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AAB2668073513B989F7CC2F00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.137.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:68:07:35:13:b9:89:f7:cc:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=12da74e4-f92f-4bc4-95d3-e2d3400de718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:68:29:de:5a:ac:b7:2b:28:56:12:29:8b:
                    ea:fc:6e:c8:a7:3b:2b:d5:bc:c0:f4:92:eb:c4:6c:
                    d1:a6:c6:e3:a3:f2:e7:e6:97:af:a0:8e:5f:d1:7b:
                    85:b9:15:4d:1c:76:18:fa:ba:53:3b:d7:b0:df:87:
                    fa:95:a0:8d:3b:61:76:69:f9:14:29:58:a5:c0:ae:
                    b8:bd:bb:2e:47:4b:51:30:93:38:63:99:f0:ea:19:
                    b2:86:ff:2b:9d:a3:31:a7:d8:90:89:6b:72:8a:a6:
                    58:16:34:e3:20:91:bf:ff:16:c2:c8:d0:c4:cf:7e:
                    0f:ca:ce:b5:70:48:f7:db:93:49:cd:17:17:b7:74:
                    c3:6d:66:09:2d:c0:39:97:de:3d:7b:08:2a:f5:f3:
                    07:9d:6b:3e:dd:0e:a2:30:ea:2b:e4:ec:fa:a4:ee:
                    a9:88:a6:03:72:53:16:36:bc:33:fe:ca:a1:24:2d:
                    dc:b5:09:51:c9:d7:bc:f8:ec:6f:71:22:44:f4:00:
                    ea:26:86:31:82:a4:0b:1e:37:44:dd:c0:e0:2c:1e:
                    29:9c:67:08:24:7b:43:cd:d9:ab:20:54:d1:29:47:
                    fc:34:9d:26:4b:99:10:2a:8a:0c:07:ba:47:c9:a8:
                    51:4a:a9:86:39:61:fe:02:e7:4a:68:71:63:27:18:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:EC:AF:72:C9:B8:D4:00:09:A1:7C:58:AC:B3:D9:FB:1D:98:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/53484dda-0bc6-350c-be01-5a462cf2fd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1d:f0:d2:ae:de:3a:45:dd:53:c2:0b:fe:4a:0c:52:2d:46:
         5a:45:a0:c9:14:c1:75:82:7b:4b:3f:7d:45:ba:a9:0f:39:76:
         42:f6:b8:46:d3:d4:e4:c1:59:bc:ea:47:e8:42:69:35:df:f9:
         0a:1e:74:45:5d:f8:8d:86:f1:a7:61:cd:a4:2a:30:b0:ac:55:
         d3:fc:e7:5e:96:3c:0e:7c:bb:9c:df:d6:b1:68:0d:8f:13:50:
         5c:5c:cf:6d:20:00:3f:b9:c3:d7:27:3f:08:a5:ed:a5:3e:0b:
         cf:a1:e2:ba:4f:67:5f:f5:cd:0f:3e:59:19:3d:9b:d4:99:37:
         2e:b6:ff:d1:1c:ce:e2:92:be:ca:80:ad:06:6c:76:c3:5c:94:
         a7:6d:a3:75:8d:5b:75:54:78:7e:aa:e4:00:aa:fd:ad:01:8a:
         65:3e:95:16:7b:0b:bc:c4:cc:db:1c:cd:b0:5a:e0:51:7d:4b:
         50:90:55:5d:6c:9e:f3:a4:eb:91:1b:7c:99:48:f4:95:9f:61:
         ab:34:7e:10:fe:25:16:32:98:02:b4:c8:4d:60:18:f1:be:47:
         04:f8:d0:2e:61:4f:4d:ad:5b:58:a5:44:63:2e:c8:d9:eb:17:
         7d:c7:ae:53:55:af:f7:b1:b2:64:76:55:ed:9d:63:4f:f4:d8:
         86:44:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:16 2025 by rpki-client