Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa
File:                     2ac6c5b1-6113-336e-9800-aec40e75f251.roa (raw, json)
Hash identifier:          Pd2k/kAYIy/W/zWWMrxBq9j8OQAZHY0hr0hThHjH87E=
Subject key identifier:   91:75:B7:F4:60:1B:FE:1A:E3:8F:D5:72:5A:77:C5:14:B0:0F:05:55
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B13D6AF52E8944B05865F5E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        130.137.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:af:52:e8:94:4b:05:86:5f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=df2214a3-5090-4a52-83cd-70638096299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:6e:68:92:94:b2:c6:20:3a:63:d5:f8:94:
                    78:96:ec:6c:78:79:62:c0:22:83:22:72:e1:bb:8a:
                    7c:72:a7:0c:82:95:0b:e4:c4:47:59:3c:af:ee:c5:
                    eb:6e:54:87:23:42:0d:71:96:43:42:09:88:e4:4c:
                    61:f1:4e:04:fd:c8:4a:e2:34:be:1e:22:65:bf:e7:
                    11:08:a5:32:08:a4:9e:1c:bd:66:da:33:a7:76:5d:
                    6e:93:59:84:4e:b9:97:70:58:97:7b:0d:a5:b0:a4:
                    da:70:9f:d1:56:91:c6:e4:6a:84:92:35:99:73:cc:
                    fc:37:07:16:70:9a:13:79:1a:6b:b3:19:5f:38:e1:
                    d3:09:f6:c5:94:cc:26:18:b0:76:7a:c5:7a:5e:3c:
                    97:7f:b8:cd:ad:da:a7:a9:e8:03:17:3c:35:30:ee:
                    7d:7c:30:47:4a:93:5b:a9:0b:4c:d8:aa:fc:bc:77:
                    9d:b7:42:05:21:77:bf:70:3b:fa:2b:28:78:b8:c9:
                    9a:77:48:4a:d7:4a:7f:ac:8d:7c:1b:4a:47:f4:3f:
                    f4:99:a9:0e:36:7d:74:7f:e8:03:dc:b2:26:5a:ad:
                    fa:11:47:56:12:04:91:36:15:9b:8c:92:f4:9f:97:
                    89:87:81:c7:95:b3:1d:2b:f7:1d:48:04:6a:d7:95:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:75:B7:F4:60:1B:FE:1A:E3:8F:D5:72:5A:77:C5:14:B0:0F:05:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:26:b7:9f:b4:0b:af:e6:8b:69:e5:31:fa:87:56:2f:74:37:
         7d:ba:48:90:c3:77:b9:2f:d1:43:9b:01:c9:cb:64:92:1a:37:
         dd:e1:de:6a:3e:b7:26:63:46:ff:6f:7e:95:dc:c6:7a:44:55:
         ef:df:1f:42:40:16:38:7e:9d:97:ef:b5:0c:85:69:b2:e2:75:
         e0:cd:14:38:04:d8:13:21:b3:b0:f0:fd:8c:e0:86:76:70:6e:
         3f:6f:84:35:21:bf:84:30:da:6c:47:d7:db:a3:69:3c:55:7f:
         6c:1f:22:4a:07:7c:89:0d:86:97:72:27:6b:f4:6e:31:ba:f3:
         7b:7a:ba:cc:03:1d:94:15:7c:9f:e2:de:38:87:55:92:6c:3d:
         d8:a1:e1:85:d2:9c:8f:e6:d7:c9:5b:9d:24:9c:97:56:54:80:
         d5:f2:08:ad:1d:d4:13:fc:18:b4:41:82:5b:d8:47:44:cc:b0:
         4d:54:fb:cb:1e:04:da:9c:6b:26:a0:0c:92:bc:ec:73:94:a6:
         21:e5:36:4f:31:82:e1:23:64:72:b0:a8:19:b3:90:8e:7b:08:
         ab:66:b2:4f:b5:4e:0d:49:f9:64:ca:5f:c3:0e:1b:1c:ee:3e:
         61:ab:21:c6:92:19:2a:ed:2f:6c:f9:0a:63:80:3d:9a:64:84:
         31:93:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:24:56 2025 by rpki-client