Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa
File:                     564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa (raw, json)
Hash identifier:          C7SjzNLGC8VL5FQhxPw6+whFU0EyUCO1WqA0/SEy87s=
Subject key identifier:   40:80:AC:1A:DB:C9:9D:D7:7B:33:6E:D7:BB:63:74:73:45:19:0D:2B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BB88D173665DFF27CA760DE00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        130.137.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:17:36:65:df:f2:7c:a7:60:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=68956464-e04e-447d-8f51-27ce660546a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:fb:95:2e:62:45:31:05:49:8f:36:d1:63:
                    f1:d6:d5:7c:73:59:6a:7a:90:c0:7d:a2:19:b2:0d:
                    4a:9c:a1:07:01:14:44:69:3e:ff:a1:b3:21:de:64:
                    8d:43:c0:c7:7c:ac:cb:16:f0:a2:d7:ad:b6:75:83:
                    b0:e3:84:47:84:c4:3d:99:76:2c:42:8b:d3:07:07:
                    28:63:b3:42:ae:d0:89:a3:67:6b:8f:19:7f:94:f9:
                    6c:71:ee:7c:6a:94:0a:d3:7a:01:3a:b9:8d:3c:2f:
                    12:e2:0a:86:c5:df:37:cd:6d:53:64:68:22:ff:3d:
                    89:05:c4:35:e0:ac:22:71:b5:7c:d1:60:ac:c0:51:
                    25:fd:12:54:94:66:98:a7:e1:16:79:fc:d2:97:07:
                    85:41:a0:34:96:75:30:57:f6:fe:3e:f1:91:97:23:
                    71:78:da:dd:f4:c5:f3:3f:27:97:eb:24:dd:3e:f0:
                    72:30:a0:43:6a:cd:e6:7d:d6:a3:21:21:62:fe:d8:
                    f5:48:cd:c4:ab:fd:00:7d:e0:74:e1:86:30:af:72:
                    92:23:a3:a3:5b:15:b0:39:b4:a4:67:ed:b8:b1:2c:
                    9e:ef:bd:bd:2a:e8:f6:41:d0:8e:3b:33:8e:0d:1f:
                    7f:68:05:f5:58:09:62:43:b6:2d:ec:1b:c6:05:eb:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:AC:1A:DB:C9:9D:D7:7B:33:6E:D7:BB:63:74:73:45:19:0D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:8a:50:2b:a1:31:39:1e:5b:dc:8a:48:2f:81:c4:34:0e:
         a0:ed:56:42:16:13:09:b8:3d:8f:36:af:0b:6a:f2:dd:26:6e:
         c5:30:a1:98:8d:26:15:09:f2:cf:b7:b4:1a:ef:eb:6d:b0:c2:
         83:2d:5d:35:56:4d:91:4b:d1:b6:2b:32:ff:d6:bf:5e:28:b5:
         d4:83:49:a7:38:c8:b8:7e:62:1d:32:b1:b7:3d:a9:2e:6b:a8:
         ba:3f:a3:dc:ec:da:fe:8a:c1:cf:4b:21:dd:42:1f:c4:c8:1a:
         76:8b:d6:89:28:38:56:0d:95:93:4c:54:99:36:88:a8:d2:84:
         ce:ca:39:68:3e:f9:95:1a:1e:35:fe:01:86:33:a8:86:14:01:
         9c:b0:db:ce:36:1d:59:b6:3b:51:cc:d5:90:0a:69:16:2f:6a:
         18:2a:68:b8:d9:f5:c2:eb:4e:c0:a8:3b:a0:ac:fe:4d:f2:a1:
         65:4a:69:34:ba:06:ec:28:bd:22:9c:b0:50:6d:04:45:e5:04:
         0a:71:5a:37:12:b9:5f:78:3a:7d:bc:fa:4c:b9:fe:0c:a9:8e:
         e0:65:f3:d6:8e:6b:03:e2:e9:80:37:b0:72:99:08:6d:b7:26:
         97:24:a5:61:43:7d:50:7c:07:49:5f:ae:68:b8:9b:bf:67:43:
         f8:57:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:20 2025 by rpki-client