Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ef338cd-c610-38f3-be69-d15fa5352ab1.roa
File:                     6ef338cd-c610-38f3-be69-d15fa5352ab1.roa (raw, json)
Hash identifier:          wbmg+cQJ1IKB6GJnnZBsHqPbfyjkeMpJhyx3PAYqz0Q=
Subject key identifier:   13:D7:8D:0A:55:F2:50:2E:E6:F2:B6:DF:EF:19:47:90:36:10:22:C1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85BA9D0BA45EE659B61AE00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ef338cd-c610-38f3-be69-d15fa5352ab1.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        130.137.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a9:d0:ba:45:ee:65:9b:61:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=d5d02dc6-b6ba-4b7a-8676-509e3c815bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:da:a0:e2:64:b8:fb:05:e2:5b:4a:b0:49:
                    a6:22:8c:86:ac:08:15:37:70:b5:18:11:e0:af:86:
                    46:3b:74:42:a1:85:d0:d6:bd:d5:63:85:e5:c8:5b:
                    ea:da:db:0b:d3:25:54:8e:05:20:00:16:eb:f1:54:
                    34:6d:51:50:72:2e:2e:f4:8a:3f:ea:73:b7:a4:2b:
                    21:48:95:40:06:50:42:cb:02:a6:5c:6f:c9:b4:a6:
                    13:4a:53:f9:8a:cc:56:99:06:c0:b3:4d:bc:f3:97:
                    54:c4:77:3a:44:e3:53:b1:9e:53:06:34:52:b5:e1:
                    cb:80:ec:ea:78:24:e9:0a:7b:41:97:be:a2:ce:50:
                    1d:b1:74:1b:a6:4d:b8:63:c2:f9:65:68:bf:0f:37:
                    88:c1:ab:7b:cc:75:0a:1a:12:1a:f4:6c:09:fb:6e:
                    5f:9f:b3:82:5e:02:59:7f:93:ce:16:23:3a:da:db:
                    b3:22:aa:71:e0:4b:67:65:33:ad:00:e4:71:b4:54:
                    29:05:dc:b9:5b:aa:21:cb:5e:c2:dc:4e:ef:ec:68:
                    da:54:14:63:a6:dd:e2:89:a0:8c:40:fc:f9:b7:31:
                    b4:ed:cd:a0:5e:7b:9d:a5:89:64:96:53:94:65:6b:
                    5f:8f:db:94:b1:77:5c:4a:c1:67:b9:f3:bf:fb:5c:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:8D:0A:55:F2:50:2E:E6:F2:B6:DF:EF:19:47:90:36:10:22:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ef338cd-c610-38f3-be69-d15fa5352ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:b2:6d:98:47:47:52:a9:70:a0:b6:7d:27:b4:27:a8:0e:
         29:58:0c:9e:c0:47:3d:1d:2c:98:2b:4c:be:3f:17:c9:75:29:
         71:4d:0c:aa:b4:22:d2:18:3b:e0:7c:82:33:a7:cd:5c:77:b4:
         9e:02:72:20:33:fc:eb:03:bb:e1:4a:c5:f7:dd:20:8d:4f:d7:
         41:f6:e7:b9:89:7a:8f:81:de:f7:c3:c7:e7:bb:f6:2a:75:ae:
         e6:c3:b9:af:e4:61:5b:da:ef:27:4c:b7:ad:22:2a:8d:21:ae:
         91:58:a5:fd:29:93:dc:c8:89:ab:c3:7a:ac:19:27:80:f1:65:
         d4:c0:be:92:26:08:a0:c6:a6:6c:5a:1c:f2:d3:6c:a8:6a:93:
         1b:4b:44:d9:e7:af:e6:32:e0:cd:eb:cd:74:69:80:b7:bb:9e:
         58:ff:33:33:d7:53:8f:b7:c4:8f:d9:61:0f:40:e6:8a:d0:a1:
         0c:07:ab:41:fe:18:2e:c1:bf:8a:16:8f:07:16:4d:91:bc:e1:
         07:b9:62:8a:b8:ad:b7:d7:f1:47:f1:d1:46:ad:47:18:f7:a5:
         70:32:3f:c2:0d:82:09:9a:9f:94:10:dd:47:0a:f0:1e:92:cf:
         c1:fe:c5:d6:41:50:96:31:93:d6:38:2e:f5:ba:c1:6e:55:50:
         ab:70:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:53 2025 by rpki-client