Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bdbd3650-370e-33be-b0c1-622cd37450d9.roa
File:                     bdbd3650-370e-33be-b0c1-622cd37450d9.roa (raw, json)
Hash identifier:          en6eBm7aEzsngaiLZc1iZ8r1/u513lzMEin+OrPg57U=
Subject key identifier:   C0:A7:0D:9C:CA:16:5E:7F:7A:51:00:09:BB:63:0C:FC:09:60:2D:DB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBB7586CD821A582500B6B380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bdbd3650-370e-33be-b0c1-622cd37450d9.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        130.137.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:86:cd:82:1a:58:25:00:b6:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=6d89d5c1-3909-4966-b28e-e35cfe44a203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:46:fa:0a:1b:91:e5:45:3e:2b:6b:7b:7c:
                    75:c1:b2:03:9a:aa:86:a6:a7:26:b4:2b:f7:78:bf:
                    e2:af:3f:71:69:71:6a:4d:e6:34:31:41:3a:c2:e0:
                    9b:f1:cb:94:68:c0:17:4e:a6:21:c1:14:1c:75:ce:
                    27:48:fb:18:60:12:27:0c:b5:5b:1b:14:4a:b9:02:
                    43:88:c1:5e:c9:99:72:68:fa:f2:70:ff:c0:1b:62:
                    a1:c6:0d:ec:73:76:d5:84:00:64:7b:3b:9a:fb:51:
                    87:be:80:3a:44:b0:41:d4:99:78:9b:cd:80:dd:20:
                    4e:09:ec:ee:4f:79:f0:3f:17:8c:9b:de:b0:62:24:
                    a8:94:52:11:0d:14:51:f1:b6:49:1e:90:e3:5c:67:
                    f2:1c:99:63:76:87:11:78:2d:0a:74:29:28:59:a3:
                    6b:6f:05:b5:56:cc:50:0b:b2:57:56:91:c6:e8:2b:
                    c0:4a:fa:fa:eb:ef:b3:24:b5:0c:3c:1d:26:41:f4:
                    76:c0:f9:9e:d7:24:b3:e7:ef:83:b9:d4:91:d9:27:
                    ec:d3:ce:71:a9:2c:75:14:94:a9:e8:18:ff:01:d3:
                    d5:82:4a:06:24:f2:7c:f2:56:ff:3f:f7:e1:1e:a8:
                    9e:ea:4e:3b:cf:2d:6d:ca:6d:90:13:08:d5:8a:5a:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:0D:9C:CA:16:5E:7F:7A:51:00:09:BB:63:0C:FC:09:60:2D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bdbd3650-370e-33be-b0c1-622cd37450d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:95:82:11:6c:50:4a:53:b1:27:94:23:4b:a7:b3:fe:2c:
         7c:21:32:fa:94:5c:64:ef:22:b1:ec:f7:22:84:e0:37:ad:e9:
         49:a8:82:a1:a7:10:d7:60:46:cd:52:35:81:69:4b:5d:ae:d6:
         bf:04:e2:d2:0c:23:d3:c9:c6:0c:da:d9:d1:67:49:75:18:24:
         b8:db:87:22:c0:cf:3c:8d:d5:89:7c:d5:b1:43:a4:c3:89:54:
         a0:0f:c9:e7:2d:ec:61:1e:55:c0:f9:2e:a4:ea:2e:32:58:8c:
         80:11:f9:a6:d5:6d:ae:c3:7e:da:f4:cf:11:55:9c:88:a4:24:
         8d:57:43:69:a7:d5:b8:5b:ce:50:45:e3:41:ef:f6:09:50:59:
         79:ad:d0:c4:c2:ea:d4:75:ce:a0:99:8b:30:3e:29:a6:7e:83:
         af:38:ff:13:70:03:99:3d:07:35:ba:e1:d4:3f:cc:0a:8e:37:
         87:5c:44:5b:9b:4a:5e:0c:65:ee:ed:6c:ae:31:d2:f9:54:18:
         5d:61:5c:3e:ce:77:b3:b5:ea:87:fd:54:5e:b1:9e:d2:c7:00:
         46:86:11:0f:d0:30:32:52:b7:f3:ac:5e:41:1f:a5:ee:e7:de:
         1b:9c:e9:d2:95:3d:20:cf:f2:39:51:17:1c:1f:4d:1a:97:e4:
         8c:f3:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:14 2025 by rpki-client