Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e461a3ea-c034-3b45-b6c6-f9949efb360a.roa
File:                     e461a3ea-c034-3b45-b6c6-f9949efb360a.roa (raw, json)
Hash identifier:          Vf3xWR2Nt4x54CfliU1RJzm4riG+uN4bGTbp6G838UY=
Subject key identifier:   81:2D:C3:22:14:09:A0:D5:DF:28:D0:BB:68:8E:EB:F0:DA:9A:FC:A1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BA93251273126AB15D3849100
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e461a3ea-c034-3b45-b6c6-f9949efb360a.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        130.137.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:51:27:31:26:ab:15:d3:84:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=2107f927-d180-4519-8f35-f97ceb4f3542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d3:e0:c8:bd:a1:56:34:b6:12:a1:92:ac:5c:
                    5c:25:44:ce:71:08:d7:b6:5f:ea:a7:bf:c3:7a:f8:
                    ed:f2:b0:f8:96:d8:d6:5e:08:40:22:db:33:08:1b:
                    91:a6:19:2a:76:8f:d3:f2:e2:54:ae:15:e2:2d:3b:
                    c9:8c:9b:76:80:31:a1:12:4c:d3:43:d2:94:09:d3:
                    b4:ce:86:29:2d:0a:fe:68:33:10:db:28:a5:f4:b6:
                    63:f5:9f:07:8e:c2:ac:05:95:e7:f3:f3:8f:82:25:
                    f3:13:51:10:7f:f2:35:99:17:1f:74:fb:59:7f:20:
                    cc:34:f5:27:e0:e7:de:8d:dd:38:c9:32:be:90:80:
                    58:0d:36:22:87:c1:7c:3d:e7:ac:d4:2c:0b:40:ee:
                    3a:d1:43:d7:d3:27:46:18:76:74:a9:d1:7f:37:ad:
                    98:ce:c2:b7:a9:a1:67:fa:e5:02:b5:45:c5:7f:90:
                    03:3d:11:26:0c:7e:fb:2a:26:93:b3:4e:ee:af:a4:
                    ca:06:ea:b3:90:89:23:12:d6:94:ff:c3:24:65:f0:
                    14:65:98:1e:be:b9:8c:cb:a8:a8:e9:d0:5c:c3:0c:
                    eb:61:4d:d5:10:9a:82:ee:23:4d:3f:6c:b8:35:5f:
                    f7:c1:84:c9:dd:c4:5b:b8:fb:3f:21:66:c2:6d:de:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2D:C3:22:14:09:A0:D5:DF:28:D0:BB:68:8E:EB:F0:DA:9A:FC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e461a3ea-c034-3b45-b6c6-f9949efb360a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:b4:fd:99:f7:62:ba:ab:76:e5:91:43:2b:70:a8:db:d1:
         27:13:07:b7:92:40:24:91:e7:9c:25:de:84:69:f5:01:83:14:
         ed:06:33:22:c7:f9:d4:70:a5:e2:62:f3:7d:c4:08:1d:24:66:
         5d:16:d3:cd:e0:cd:69:66:73:93:17:de:ff:e8:11:42:cd:4d:
         20:1a:2f:eb:af:51:ae:e5:65:50:09:4f:63:5b:ee:72:0e:c8:
         32:93:94:78:48:71:60:e7:7b:bc:8c:0b:31:b0:32:b7:8f:9b:
         d4:b1:25:4b:f9:d4:f3:d8:1e:a1:14:e6:fe:25:35:a9:81:ea:
         5c:bc:34:64:c7:16:24:36:7a:31:46:f6:0e:17:3f:81:94:8a:
         36:7c:2b:50:20:74:f2:fa:77:49:8a:97:05:d5:4d:ce:f2:15:
         33:12:15:1f:3e:d0:03:86:0c:38:db:ed:32:ce:28:e5:d2:b2:
         a0:1f:c0:54:5c:cd:42:33:b2:a9:d7:8a:60:ae:91:d0:18:52:
         3e:b3:38:ba:1a:84:a4:d2:d2:9f:d2:11:bc:3f:32:44:92:4f:
         79:b1:98:4c:f8:dd:d8:4c:20:b5:90:7f:2d:e9:c5:fb:44:c9:
         79:38:87:c7:0b:bb:d5:da:8f:76:a6:4a:20:41:fc:d4:35:ee:
         ed:0a:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:44 2025 by rpki-client