Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0cd6377a-8319-31d9-9bee-551c276c8ae9.roa
File:                     0cd6377a-8319-31d9-9bee-551c276c8ae9.roa (raw, json)
Hash identifier:          Gx4S/BvKItmaJzaYDZU8hrqnCQNwGtF5Kc5C8JAE2K0=
Subject key identifier:   55:DA:9F:C8:CC:4F:21:81:DD:EA:13:95:A4:54:5A:53:14:07:43:7E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B8BE22FFCCFDB45D51BBEFA80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0cd6377a-8319-31d9-9bee-551c276c8ae9.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2f:fc:cf:db:45:d5:1b:be:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=9069344c-af88-4652-ac7f-a13a4d9a542a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:3a:77:6f:63:23:6f:2d:39:cf:31:16:c3:
                    5b:92:a2:fd:40:d1:4b:aa:89:0c:79:50:53:8e:e5:
                    9d:35:d9:a2:8a:ca:13:91:a1:80:44:ed:ba:0f:2e:
                    cb:9c:26:3a:8a:1a:85:76:9e:0d:b3:eb:13:97:ae:
                    0b:8f:f2:90:b1:0d:37:be:6c:46:25:ed:95:c9:5a:
                    bf:9d:20:28:be:2c:a8:d1:5c:75:27:bf:8f:20:6d:
                    62:f1:ea:f0:be:cf:1e:da:90:6a:54:61:aa:50:76:
                    ef:21:d8:63:5f:b5:c4:b4:5f:a1:1d:39:da:1c:22:
                    14:45:20:fc:e8:15:3f:2a:4e:c9:07:81:1f:1b:a9:
                    f9:68:0c:37:f1:1e:ad:02:61:af:d0:69:6f:c1:73:
                    77:59:c6:96:05:2c:f1:9c:33:de:55:a9:6a:1b:e0:
                    e6:56:2d:43:d0:5a:d1:b6:9e:0f:ba:7a:28:43:53:
                    a8:ca:8f:a8:b7:e7:38:31:db:17:62:34:b0:87:e9:
                    98:2b:83:64:55:0b:c2:04:6d:77:eb:5c:5c:49:da:
                    8b:c8:85:8c:21:1b:f9:7f:73:d7:4d:a0:1c:71:27:
                    f5:00:5e:87:65:89:cf:06:83:de:00:3d:ea:ff:44:
                    a8:17:a0:b0:5e:bf:56:e3:bf:60:97:6a:2d:de:1a:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:9F:C8:CC:4F:21:81:DD:EA:13:95:A4:54:5A:53:14:07:43:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0cd6377a-8319-31d9-9bee-551c276c8ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:21:57:0f:3b:5f:ad:3f:01:04:45:ec:c9:a8:5b:1f:68:
         7a:95:c5:3c:53:9c:ec:94:ad:7a:57:5b:87:72:5a:65:68:9f:
         00:6a:30:4d:bd:8d:1c:39:3c:41:66:d0:f3:3a:d8:98:fa:50:
         19:9b:bd:b7:13:34:83:75:f3:de:6b:58:bc:a0:ef:7a:aa:94:
         7e:b5:c1:a5:fe:4f:84:40:e2:2a:52:72:3f:3d:c9:5d:40:f6:
         7b:5e:ca:3a:b9:ac:c7:bf:5c:22:56:c8:7b:68:02:01:20:1f:
         2c:85:e9:3a:1a:92:51:04:ad:34:3d:d5:b0:d2:d6:0f:60:4f:
         06:70:65:fa:82:63:1d:70:27:c6:a6:8d:e8:eb:a2:11:c4:4c:
         be:8e:50:4c:9c:c7:ad:1b:2a:88:07:03:42:49:01:78:ee:e3:
         58:07:92:4b:9e:a2:dc:ae:7c:6f:fe:cf:7a:a0:c0:75:77:dc:
         8f:e0:00:45:9a:f7:2c:bb:5c:c6:af:65:98:cd:dc:a1:ed:8c:
         ad:52:8d:39:4f:85:06:44:48:2f:c8:d8:42:db:ac:c5:43:bf:
         3b:3b:71:94:38:4c:6c:4f:5f:ec:a1:ff:2a:ff:07:4f:73:de:
         f1:19:3b:30:15:49:ef:17:bd:ae:b0:c6:66:f9:3b:d3:26:f9:
         8c:be:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:43:12 2025 by rpki-client