Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa
File:                     493c73b8-e93a-392d-a47e-c686238919bb.roa (raw, json)
Hash identifier:          kVAdEkgjYEvYhFjBz+SN4U8AjBBKhRFFpFQ7+kda7S0=
Subject key identifier:   9E:E0:90:B7:FF:61:A3:67:1E:53:83:45:D2:6E:4D:48:D5:B9:2B:F4
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF5212B8B51B0570B19C35D00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        130.137.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2b:8b:51:b0:57:0b:19:c3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=f6c16b3e-1892-48a9-82eb-612d2a1f2b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:07:19:66:39:81:70:44:64:cc:3c:a5:bb:
                    e3:d0:9b:4c:5d:6b:0b:71:2e:e6:3b:72:cb:c3:0b:
                    52:02:08:18:2e:55:83:73:99:bb:42:6c:5d:79:02:
                    73:1e:d7:b0:33:47:cd:9d:d6:73:99:ce:b7:b6:71:
                    0a:d7:5b:26:25:b9:58:82:8d:17:cb:86:b7:3a:6b:
                    36:c5:a3:32:27:e3:a0:e1:c7:90:2b:db:71:83:bc:
                    f5:ba:36:96:96:40:1a:91:ef:c9:fd:c5:d8:90:bb:
                    9e:8f:0b:8f:25:49:b1:f1:df:fb:10:c2:b1:0c:6b:
                    4b:d6:31:d8:9e:e9:3b:41:81:6c:0c:a3:96:7e:1c:
                    9d:d9:da:e8:5e:e8:14:02:f5:7e:3b:32:d3:62:04:
                    6f:0e:db:f3:e8:23:c2:46:fb:94:56:71:08:f3:4e:
                    2c:eb:14:4e:53:61:97:6c:af:b8:7f:f2:97:0a:69:
                    1c:82:25:ef:a3:ef:88:26:23:4b:29:3e:77:63:11:
                    36:96:fb:51:a9:5b:78:c9:16:be:fa:60:6d:74:28:
                    91:dd:68:75:69:02:96:1b:4b:1f:8e:74:e6:03:d7:
                    31:53:08:78:ca:d4:8d:b3:d4:e9:64:51:d1:98:ba:
                    6b:61:9a:be:9b:9b:37:54:b5:40:d4:4b:39:60:46:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E0:90:B7:FF:61:A3:67:1E:53:83:45:D2:6E:4D:48:D5:B9:2B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1f:c6:56:5d:5a:c8:73:b4:96:08:51:fe:80:6f:6d:c6:06:
         5a:50:d8:03:6c:67:fb:c4:fc:82:a6:26:14:12:08:61:e6:78:
         7d:64:18:b1:39:4b:dc:36:c5:e7:52:a5:34:96:41:9b:eb:de:
         54:ef:2a:71:9d:e4:28:9c:42:8d:37:36:20:8e:06:31:fa:da:
         7f:17:2f:46:40:c1:fd:54:e0:10:77:db:66:98:05:56:07:41:
         87:7b:74:66:b2:19:cd:96:f9:18:dc:f0:11:d3:2f:7c:52:27:
         d5:a3:31:a7:ca:40:82:e9:51:5c:28:bd:9c:73:a0:73:40:2d:
         d3:86:4e:fb:70:be:18:75:85:bd:2c:24:35:32:89:13:cb:93:
         79:f5:9a:57:bd:86:85:fb:91:b2:1b:6c:dd:79:73:da:3d:c3:
         0b:e5:00:04:88:20:42:27:23:a4:10:e1:f4:a6:09:c1:5b:6a:
         1b:0b:17:9b:8d:8e:5b:e7:81:e6:c8:f8:c6:48:a0:88:32:82:
         43:70:5b:e1:2c:71:a3:7e:45:70:92:59:d4:08:62:9d:51:37:
         dc:09:db:1e:e0:83:31:05:27:a6:39:a3:a2:8c:70:0d:1e:41:
         b3:e2:30:b4:23:3e:81:7f:5e:6d:32:7d:c5:94:5a:dc:b8:70:
         5c:12:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 22:05:19 2025 by rpki-client