Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7835e4df-0b5b-3167-aaec-203327fa4802.roa
File:                     7835e4df-0b5b-3167-aaec-203327fa4802.roa (raw, json)
Hash identifier:          1IX0BWfMtHcu7+xs0L0U+DInQF91Z1B21eijBtmziwE=
Subject key identifier:   B8:46:16:98:4A:51:40:CA:F3:46:2B:71:73:C1:64:B1:90:39:F4:68
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B89176B28427129BFABE8CA00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7835e4df-0b5b-3167-aaec-203327fa4802.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:6b:28:42:71:29:bf:ab:e8:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=674e1e55-3663-40c7-8a10-2542b5b483a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:04:01:11:4a:c0:7c:7b:89:ba:76:b0:54:
                    07:db:11:5e:44:d7:d2:20:d1:84:97:85:87:e1:97:
                    e0:67:9b:92:3f:31:04:98:0c:7c:69:21:e8:58:c5:
                    1d:8d:de:2d:4a:e2:6a:e0:6f:8c:d1:82:24:c7:69:
                    95:e4:0a:0e:75:ed:93:ca:af:9c:56:d0:09:9d:bc:
                    09:fd:6d:da:14:02:c2:93:55:69:82:61:0e:07:f2:
                    a3:e9:f7:e0:df:70:f8:e1:96:0e:8d:dd:41:3f:41:
                    b4:f9:57:63:84:7a:4e:0f:c4:8b:fd:ff:98:df:84:
                    3e:bc:a1:bb:26:87:a1:39:ea:3e:cc:74:d0:17:9a:
                    c3:a8:d4:7d:40:48:2d:54:2e:b2:8d:92:b6:53:32:
                    42:06:6e:6e:5b:2f:66:91:36:c5:1a:9e:dd:40:37:
                    d1:69:b9:95:ff:60:98:1c:fb:64:57:28:72:fa:99:
                    ff:f8:e9:65:0b:41:26:e1:67:96:af:e3:c1:01:60:
                    44:36:3c:15:44:d3:9c:2a:00:6c:6a:9a:ab:33:f0:
                    38:75:de:69:ed:69:bc:7a:6e:72:f7:77:70:bf:a4:
                    95:33:7e:1e:41:8f:52:a4:56:c0:20:15:1c:65:41:
                    11:d2:81:fb:6b:1b:de:e3:53:f4:6b:5c:6d:73:2b:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:46:16:98:4A:51:40:CA:F3:46:2B:71:73:C1:64:B1:90:39:F4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7835e4df-0b5b-3167-aaec-203327fa4802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:92:1c:87:62:96:c8:36:ac:74:fd:f7:b4:44:51:4d:32:
         ce:cc:34:f6:ea:71:c0:c8:94:92:44:ce:f0:3d:d8:03:c0:05:
         29:66:0d:bd:63:d2:5f:26:63:e1:e5:a3:ba:bc:e0:7b:9d:40:
         1e:20:78:c9:52:2e:16:70:f6:42:14:f8:98:99:57:2b:d7:a4:
         2b:99:9d:76:77:ce:48:ca:f1:26:4c:e6:3f:a5:8d:d4:d9:d6:
         30:e9:ce:fb:de:93:7e:ee:ce:97:95:70:54:1b:b9:33:b6:03:
         43:ee:ac:b1:ac:58:1e:25:ec:6a:6f:12:bd:f6:f7:b8:1a:fb:
         f0:21:65:8c:61:84:5f:5c:34:b6:4d:64:3a:21:7c:0a:cd:be:
         85:69:4f:a7:1c:0a:ad:f8:90:79:4b:15:b8:4e:eb:2d:63:b8:
         50:84:74:43:f0:7e:81:ef:eb:66:13:32:f2:07:7e:46:3f:22:
         ec:c7:28:d9:f2:cc:df:6d:85:e0:a8:b5:7f:32:b6:5f:04:df:
         a0:cf:97:27:7b:dc:99:f5:76:06:53:66:31:92:59:d7:27:e1:
         6f:39:c8:2e:9f:82:1a:16:b7:95:1e:68:70:c5:70:10:9d:96:
         aa:76:a9:0f:49:0a:e8:fe:9a:0a:ec:e0:0c:c1:d5:69:9c:fe:
         76:13:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:40:12 2025 by rpki-client