Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa
File:                     ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa (raw, json)
Hash identifier:          5+HdU9nv7+yIk2pRj1ZV5Z+y7PeFPE7nmIdsOMIgxp8=
Subject key identifier:   BA:14:3F:81:BA:4A:41:2B:8D:37:35:47:E1:95:95:E2:FB:95:26:76
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BABFCFE40F08573E61810C5A0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        130.137.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fc:fe:40:f0:85:73:e6:18:10:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=2c391217-1587-4dfe-a328-de8dd013fd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:3c:4b:89:17:5c:aa:11:f0:ad:03:80:95:
                    ec:ec:3c:5d:1f:14:1c:e3:6c:36:f8:c3:33:4a:00:
                    ad:9d:b3:56:6d:ee:13:0c:64:b7:d6:c4:21:e2:6c:
                    39:5b:fd:a0:d6:7f:51:5e:70:2f:ae:eb:36:7c:8a:
                    41:be:56:81:85:f6:4a:f2:2d:50:8a:72:ee:2f:82:
                    88:71:c3:ee:68:15:81:35:55:20:c1:02:06:d0:86:
                    37:c2:a9:05:8b:59:b6:0b:91:49:43:14:60:57:ed:
                    9f:70:13:76:ad:34:9c:18:bf:33:35:e5:f0:69:f1:
                    18:da:01:9a:b5:17:40:47:32:a5:1b:03:b4:b1:56:
                    31:f5:b2:b5:7b:83:6e:1e:cd:80:6f:2b:a5:17:a3:
                    e6:a5:c2:24:3f:ac:ae:15:bd:73:c8:a2:a4:03:4c:
                    61:c3:9f:76:cb:d7:df:e1:c3:2d:a6:a0:fd:93:9b:
                    9e:48:1d:7a:76:9c:4c:58:1a:03:a5:64:f3:5e:a5:
                    dd:e1:e0:ca:eb:0a:ba:97:d5:1c:63:0e:29:62:35:
                    00:1d:2d:b3:1a:fe:28:f7:86:d4:7a:92:81:42:64:
                    88:25:65:17:51:ee:74:14:fe:72:fd:f7:92:4c:c0:
                    f7:53:5d:30:19:b5:8c:74:a0:90:fc:83:b5:ef:c9:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:14:3F:81:BA:4A:41:2B:8D:37:35:47:E1:95:95:E2:FB:95:26:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d8:04:24:1e:dc:26:98:93:97:0f:20:62:16:34:a2:f7:70:
         af:51:9f:b5:20:3a:81:a9:6b:54:6e:22:f5:4d:46:df:bf:ca:
         54:55:e4:2f:3d:86:14:e4:eb:a2:ce:62:bd:4c:8b:cd:e2:22:
         dc:61:1a:e5:1f:6e:62:73:44:ec:48:ea:9e:4a:42:85:9d:90:
         a4:b3:a6:48:3d:13:7e:0c:3a:72:e2:91:8a:bc:d3:01:dd:54:
         3d:77:44:75:e5:38:39:8c:bc:89:05:69:30:f4:b6:53:a7:63:
         65:de:e7:19:f7:bb:1a:4d:d5:5a:d7:cc:c9:c8:c9:ab:de:66:
         6e:60:ee:8a:fd:c9:69:28:82:08:bb:d2:a3:8c:d1:5d:69:ad:
         2e:26:19:b1:9f:42:d3:37:ed:f1:21:27:63:8f:35:d8:4a:f6:
         8e:0d:1f:cc:31:00:bd:ee:2f:e1:16:d1:5c:17:95:17:0b:e8:
         4f:5e:a9:e5:77:c0:31:83:ba:2e:04:f9:dc:40:ea:b8:5f:22:
         b0:39:16:da:91:43:17:e9:55:cc:2f:7d:6b:dd:0d:98:71:67:
         0a:c9:c1:b3:41:67:c2:c0:5f:e8:21:c0:d0:9e:d7:6b:d9:48:
         a7:c8:27:d1:6d:89:80:f8:a9:a9:60:05:d2:bc:0e:d5:88:2b:
         3e:a6:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:05 2025 by rpki-client