Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab9d8265-8346-349a-818a-4fbeed382122.roa
File:                     ab9d8265-8346-349a-818a-4fbeed382122.roa (raw, json)
Hash identifier:          s5M3M147jGhTkzsPnnKYGlEeebmqTo1zsH97xiapX98=
Subject key identifier:   D6:EC:0F:36:EC:07:E4:CA:E0:71:7F:C9:05:82:F4:9D:21:1F:7D:3F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85BAC46A01B774586B15680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab9d8265-8346-349a-818a-4fbeed382122.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.137.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ac:46:a0:1b:77:45:86:b1:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=0a3c1746-eb08-4bd7-90a1-2233e137251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:72:5b:ed:66:7a:94:47:55:f5:60:45:53:
                    f3:64:f2:f9:79:f2:79:97:a9:11:f8:83:a6:3c:30:
                    e2:fd:68:c2:65:54:8c:8a:06:59:c1:26:fd:8c:c0:
                    10:4d:dd:8c:2e:a1:43:d5:7c:22:de:61:6c:a1:e9:
                    fe:0f:4c:53:58:f2:ac:90:c8:52:22:2a:93:55:1a:
                    6b:75:c7:de:3a:82:d8:cc:fc:93:c1:87:73:2a:8d:
                    f8:0c:48:b5:49:8a:92:de:2d:b8:c1:97:7b:06:34:
                    d4:b9:99:a0:e9:01:d4:98:23:d7:b3:8a:b7:a8:73:
                    0a:45:28:d5:08:88:44:53:b0:c6:e0:0f:12:ff:e7:
                    2c:fb:fe:d7:55:73:df:ea:da:9d:f1:d5:dc:e9:48:
                    85:57:1e:f9:0c:74:41:ee:2a:9f:e7:1c:d5:eb:f1:
                    c7:5f:51:eb:7e:54:3f:5c:c9:99:b1:98:48:8d:c4:
                    c1:c5:bb:fd:a4:ad:78:eb:e4:eb:c0:0d:cf:dc:3e:
                    25:e9:6f:4f:8c:49:00:34:25:37:c5:76:03:a2:23:
                    10:08:1e:bd:4c:91:97:8c:07:b3:21:d9:9c:a3:64:
                    42:7e:a4:a1:56:87:51:26:00:64:6b:30:b5:a9:7d:
                    c1:3a:fe:09:5e:08:a9:f6:25:a4:52:64:fb:7a:52:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:0F:36:EC:07:E4:CA:E0:71:7F:C9:05:82:F4:9D:21:1F:7D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab9d8265-8346-349a-818a-4fbeed382122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:36:bc:68:6e:61:40:9e:f7:9e:36:5f:00:92:74:05:0b:20:
         96:48:03:ee:b4:91:b5:18:1c:4a:1d:4c:14:4b:ce:c2:8d:50:
         5a:62:87:29:fa:5c:9d:e3:f7:24:3e:11:8c:e3:6c:5f:76:1a:
         40:c2:2d:5b:36:b5:a6:68:c0:b2:ca:02:8f:ea:da:be:0e:44:
         e4:58:74:0b:c7:f8:3a:83:28:57:ed:80:da:d6:06:f7:96:4b:
         b6:cb:4c:2f:82:64:87:20:6b:0b:5f:18:c8:86:db:6b:f1:d9:
         44:c6:e3:ca:ca:ef:f8:ef:0e:9e:c0:0b:94:46:01:3f:e6:40:
         e1:8f:70:6f:04:ee:70:41:d4:0c:c7:93:ad:c5:9b:4d:7c:9c:
         9f:cd:b8:9a:3b:d6:a0:a1:e3:69:08:29:03:15:c0:ae:4e:c7:
         06:90:e4:37:6c:5d:ec:f4:9c:cb:1c:cf:8e:9d:3a:07:a7:d2:
         40:16:ec:7f:22:fe:e0:a1:b2:d1:94:04:f9:25:c1:8b:5a:21:
         31:eb:02:37:fc:66:2f:a3:e6:aa:2a:ae:14:12:85:cc:67:88:
         3e:27:2c:eb:42:0c:45:aa:fa:4a:de:de:c1:c8:4a:e1:22:3e:
         61:2c:ca:13:62:c8:8e:5a:3f:8d:e4:f1:5c:b3:57:cd:dc:b0:
         f2:35:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:45 2025 by rpki-client