Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6527b571-57ae-333e-9b41-6dd2bb022933.roa
File:                     6527b571-57ae-333e-9b41-6dd2bb022933.roa (raw, json)
Hash identifier:          rEWTcVe6yrAfhqcWcplPkIPPIN0+SqnmFXb1SUgKR34=
Subject key identifier:   55:C8:C5:28:ED:67:33:B5:B4:91:67:7C:9A:D1:45:0E:D7:CB:49:DB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A8575F6F24FEA71743DB782E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6527b571-57ae-333e-9b41-6dd2bb022933.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        130.137.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f6:f2:4f:ea:71:74:3d:b7:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=869c8aae-17f6-4c3e-9ef4-7cf064fc41e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:d4:93:7c:83:c3:95:f3:d8:3b:4f:34:fd:
                    30:5f:12:77:a6:43:9e:84:65:b4:92:2b:cb:98:d8:
                    6f:da:34:6d:a0:8c:3c:13:4d:10:57:b3:34:8a:e2:
                    8e:e1:a9:61:0c:9f:8c:b3:01:64:36:f5:5d:b6:81:
                    0e:0b:bd:88:8a:f8:bb:d2:0e:ab:0c:37:ce:b9:7d:
                    f7:69:9a:89:d2:ff:ae:cf:f1:ea:61:b7:df:39:6f:
                    ca:11:65:62:3e:0d:28:31:54:e1:0f:e2:12:f6:bf:
                    d9:b8:26:e1:9c:52:a4:e6:d3:05:67:07:e1:12:ee:
                    21:78:b2:aa:7c:4b:1e:c5:dc:05:37:30:14:67:85:
                    dd:bb:65:2f:13:1e:8e:8d:06:63:a3:02:41:b4:10:
                    fa:2a:b7:fe:f4:a5:8a:62:ee:a7:dc:23:4c:1e:43:
                    54:45:a8:51:20:07:da:4c:82:69:6f:60:04:78:bb:
                    df:fa:50:f6:76:5e:d2:99:29:d8:9c:7a:5e:bf:95:
                    40:cc:d5:7f:41:43:90:35:6e:4d:ef:6c:47:8a:ef:
                    90:a3:60:7c:6d:47:ce:02:32:77:79:96:77:4a:97:
                    e6:ef:2b:7f:35:7b:1e:e3:7f:d0:ed:bd:a7:bd:1e:
                    2f:b9:9c:77:5a:0c:f3:4e:cc:da:45:a7:1e:8d:90:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:C5:28:ED:67:33:B5:B4:91:67:7C:9A:D1:45:0E:D7:CB:49:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6527b571-57ae-333e-9b41-6dd2bb022933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:df:59:40:ee:88:4d:42:81:78:5a:1c:6c:99:c8:9b:68:
         ea:1a:d5:8f:71:74:c5:d4:16:79:aa:a3:c0:00:90:08:59:7e:
         f1:24:91:69:85:24:4e:50:cb:f8:9f:93:4b:76:95:2c:00:f8:
         d1:6b:73:f1:fc:d7:4f:14:d6:11:ed:40:16:e3:12:58:58:c2:
         34:90:cd:10:00:d5:14:70:95:27:fe:0e:f9:1d:aa:f7:a2:74:
         47:a2:2d:51:aa:6b:1a:29:8f:8a:b1:de:74:53:f3:96:2c:a0:
         1e:34:09:cb:37:fd:aa:69:4e:04:8e:31:b8:01:fe:a0:31:8a:
         aa:94:8f:0b:f9:56:40:32:5c:f3:92:3b:4a:1c:c7:1f:a8:51:
         77:31:eb:7e:79:45:63:5c:e1:ab:2d:df:58:fc:f2:ed:e6:7f:
         15:0b:99:a5:50:d6:3b:1b:5c:01:fd:21:77:90:ce:be:75:6a:
         80:3f:7c:da:53:12:0d:27:00:20:33:e9:ed:a6:d7:df:a3:fa:
         cb:36:b3:17:60:b2:3c:ae:83:2e:ad:f3:0d:82:8c:0d:b4:e3:
         cd:66:69:33:f0:39:8f:76:19:ac:77:4f:e5:07:cd:ee:42:3e:
         12:e6:6b:3c:d6:cc:87:4b:53:eb:75:ac:c3:50:0c:29:70:77:
         1e:df:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:26 2025 by rpki-client