Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3dbfc76-b06e-3ba8-82ad-c276ae78359e.roa
File:                     e3dbfc76-b06e-3ba8-82ad-c276ae78359e.roa (raw, json)
Hash identifier:          N8LEvCN+BDXqZ3BeoeDHmfjtqbURTJy6QKPC5UsYBrQ=
Subject key identifier:   AD:22:E1:5A:07:E7:AD:16:DB:F5:AB:0E:E3:44:12:9D:2D:DD:FE:6D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85BAC554777C412BBE1E880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3dbfc76-b06e-3ba8-82ad-c276ae78359e.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.137.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ac:55:47:77:c4:12:bb:e1:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=417ffec8-f8cb-4cf9-9c60-ffc18582b25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:3d:c9:91:a9:c3:4d:07:97:a0:e7:a8:1b:
                    52:2c:04:5f:c6:ad:28:1d:f8:c0:a0:11:1d:eb:06:
                    bd:4f:75:22:3c:3e:0c:6c:69:c4:eb:49:da:29:07:
                    22:16:bb:fb:13:45:38:a8:29:fa:41:9a:cc:c8:cc:
                    32:3f:0d:d3:4b:e0:9d:42:7c:4b:99:81:43:b4:47:
                    24:3c:5d:9b:89:88:e8:41:ae:cc:0d:e3:ef:1b:49:
                    5f:77:e8:41:f8:95:32:ee:40:74:a4:62:65:6a:1c:
                    9a:f7:98:bb:10:b6:71:23:f5:1a:bd:4b:24:9c:bc:
                    db:c4:75:29:d1:b8:41:11:d5:1d:e5:9a:9d:ff:d2:
                    5a:dc:b7:8b:17:0f:52:e1:f0:bd:fd:32:75:96:ad:
                    8f:7c:83:55:42:a8:ed:8f:36:ac:36:3d:83:ff:b3:
                    69:d8:56:43:42:12:02:f5:0b:ab:39:ac:f8:cb:b4:
                    2e:da:00:48:11:e4:5a:ca:c7:8f:e4:ef:60:f4:0b:
                    9e:c1:67:c3:42:fe:78:37:70:f9:5e:1c:44:53:c6:
                    c0:32:5c:1c:f5:be:77:67:2a:9e:ed:c7:87:f6:fa:
                    e8:a4:19:36:9d:89:30:ce:84:e5:b7:76:93:2d:7e:
                    a2:cd:6f:cf:10:83:be:6c:1d:bb:eb:c5:84:f1:33:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:E1:5A:07:E7:AD:16:DB:F5:AB:0E:E3:44:12:9D:2D:DD:FE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3dbfc76-b06e-3ba8-82ad-c276ae78359e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:fa:37:79:55:77:fe:c4:d1:e0:58:7e:e4:d0:98:51:a9:
         02:79:2e:1d:93:c8:e2:2d:5e:f0:84:1e:be:e0:d2:34:f3:f4:
         50:92:7c:25:26:79:68:7d:8c:23:04:8a:84:03:d1:68:16:53:
         71:d2:76:88:c9:ff:bc:59:87:43:35:ca:3e:7e:02:fb:16:1d:
         28:62:d5:3c:c7:89:61:3b:da:f0:39:ea:e5:04:3b:32:5e:b8:
         ba:43:cc:5b:07:6d:81:3b:83:a4:23:5f:85:48:a7:b1:2c:7f:
         21:e4:59:91:14:6c:a2:25:e1:ae:8f:c6:08:85:7d:5d:77:6c:
         5b:0b:55:22:13:75:1e:2f:fd:48:de:96:36:34:29:74:22:01:
         c6:f4:a6:e9:02:78:47:5d:3c:1e:16:e3:4d:9f:23:58:da:70:
         0a:c4:2f:81:07:39:05:13:dc:07:87:29:0d:9a:57:0b:42:70:
         1d:32:ec:c7:c2:99:14:df:e7:77:7d:e6:36:08:ed:07:76:fb:
         ea:18:90:91:2c:3f:e1:c9:49:da:2d:99:3d:b5:37:9e:da:e7:
         ea:53:a8:1e:28:98:73:1f:1e:d9:a8:c8:fb:4f:83:5d:e2:37:
         7e:5e:4a:d4:06:87:3f:0e:bf:e1:84:42:d3:4e:4c:78:18:59:
         9c:86:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:08:12 2025 by rpki-client