Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa
File:                     bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa (raw, json)
Hash identifier:          LEaoyZBr+/TZIbKKxi8bAoMpcaqFAKz/5FRSYxBldIM=
Subject key identifier:   12:42:B8:47:A4:FB:FC:9F:05:2C:F5:BE:F3:B7:5C:79:93:E3:6D:63
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBB75840EF2D24B76DB846C00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     8987
IP address blocks:        130.137.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:84:0e:f2:d2:4b:76:db:84:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=b5e5c2f3-1ab5-4c6b-9ef7-a644e2bb37ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:12:26:48:a4:0a:c6:92:51:65:19:b3:55:
                    32:1d:b1:93:5f:43:44:1d:eb:db:26:aa:71:d6:ae:
                    db:28:43:ea:17:e1:f3:86:62:3f:e2:a9:eb:d8:0a:
                    2a:a3:8d:df:1c:fc:60:58:74:f3:e4:8b:11:93:f8:
                    ea:36:3e:47:30:cd:77:b8:a6:5d:91:cc:3f:0d:66:
                    14:84:8e:19:17:a7:51:28:ab:d7:64:2d:4b:67:c8:
                    df:61:9f:8c:95:6e:92:98:36:e3:4c:e8:65:be:23:
                    76:99:ab:de:c8:b9:f5:a3:02:7d:56:cb:d5:f6:45:
                    52:4d:ae:21:c6:28:e4:66:7c:04:5f:90:f0:3e:20:
                    98:81:38:b1:73:68:2e:8b:6b:03:e9:f3:76:e9:86:
                    31:9b:41:8b:61:c7:f8:4f:0a:30:0d:ae:63:3e:fe:
                    80:71:17:42:80:ed:95:9e:80:5b:eb:97:8a:29:80:
                    40:e4:68:37:12:a3:2b:8e:7a:2c:a8:07:ec:35:ed:
                    c2:f8:90:5a:5b:cd:2e:3e:65:a5:26:54:af:b0:1e:
                    30:c5:07:84:aa:f2:64:19:2a:04:d9:d1:b8:33:c0:
                    74:e0:f7:90:be:9b:99:58:05:18:b2:73:41:f3:97:
                    bb:9d:a8:3c:37:09:d2:29:a4:cf:d3:f5:59:52:94:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:B8:47:A4:FB:FC:9F:05:2C:F5:BE:F3:B7:5C:79:93:E3:6D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbd5eaba-c55b-30ce-b358-6600f5b27c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:5c:95:d1:e8:82:e4:28:b0:9a:91:b8:7c:26:76:01:6f:
         dc:de:39:d8:ee:03:b9:e4:3e:0a:a5:43:a3:99:e9:f1:5e:4d:
         5d:35:e8:b4:78:97:d0:ca:f4:d3:87:e7:df:eb:10:a1:25:6f:
         8b:c5:cc:bd:0a:72:07:e1:79:56:a8:73:a9:2a:69:a6:26:f6:
         41:f6:cf:6b:bf:ff:0b:a4:cc:c0:f4:03:a3:3d:27:76:08:05:
         21:d1:ce:b7:f7:59:5f:01:50:28:a9:37:4f:53:64:4d:e5:13:
         4e:43:12:4a:f3:a8:a6:52:da:64:85:cb:4f:cf:00:37:b6:43:
         8b:46:22:5f:14:cc:2f:43:2d:64:9c:bb:0a:31:3a:bc:eb:40:
         4d:3e:d6:3e:87:c0:67:2e:82:d6:7e:4e:01:40:8c:40:c3:b8:
         25:a8:ae:85:3b:7b:c8:dd:6e:71:db:6e:5f:5f:e3:ab:80:5e:
         79:fb:8b:e9:23:0a:7f:52:0d:f0:24:73:89:d0:e8:70:a7:81:
         e2:b3:a6:8f:c3:65:c8:b5:4e:cc:19:b4:4d:65:b8:1f:00:e5:
         94:88:12:f4:3a:41:41:81:5b:0d:6d:2d:a2:76:cd:5a:9a:e0:
         dd:fd:53:29:ee:47:66:fa:df:6f:e3:47:06:cd:6a:7b:a2:f3:
         4e:78:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:05:25 2025 by rpki-client