Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa
File:                     7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa (raw, json)
Hash identifier:          sqQFAlymVDk1nyIvRZLvDTIAzaB0GpnhaqzvwQJ+sNk=
Subject key identifier:   CA:F7:8E:04:65:A4:32:9E:C3:E2:5B:4E:C1:7A:50:81:D5:DE:F6:1B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B8BE230564218D41E8B6B8B40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        130.137.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:30:56:42:18:d4:1e:8b:6b:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=359c58cb-4a66-455b-a5dd-e38986072eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:56:ba:66:b9:a2:a8:34:f0:52:85:5e:6c:
                    ec:a9:1b:93:3f:9e:2f:10:47:c6:41:da:4a:86:88:
                    b8:f7:28:b8:ce:4d:4b:51:39:ee:a7:6c:f0:16:d7:
                    76:45:34:91:73:b6:6c:ef:6a:53:1b:20:16:d9:51:
                    25:95:71:ec:cb:e7:7d:0e:65:13:9f:eb:de:0a:cd:
                    ac:eb:65:c7:68:c2:9d:18:04:93:6a:c0:67:dd:c8:
                    a1:31:cc:48:e1:91:45:86:d7:7d:f2:7c:0b:47:c5:
                    81:a1:99:44:8c:5f:67:80:b3:e7:d3:e6:25:ad:2e:
                    0c:16:ba:a6:ef:3b:d7:28:21:7c:5a:ac:b9:95:19:
                    66:f7:aa:04:46:ad:38:ea:10:75:4a:09:69:6c:b6:
                    ff:04:00:19:71:4f:fd:de:46:59:64:07:86:a1:3d:
                    d3:52:57:2e:22:bf:61:48:e8:b1:92:f7:bb:b1:72:
                    74:16:bb:2a:20:d6:ca:74:17:ec:ce:6a:42:8a:24:
                    26:68:b6:e8:cf:32:df:70:5a:27:60:25:39:34:92:
                    99:ac:8d:57:8f:7b:56:30:05:78:2a:8d:75:b5:3e:
                    73:6d:98:6e:74:53:51:51:29:59:2a:0f:2b:a2:20:
                    77:d0:43:8d:fa:08:07:33:06:1d:24:06:1a:d3:d6:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:8E:04:65:A4:32:9E:C3:E2:5B:4E:C1:7A:50:81:D5:DE:F6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7a87476f-8d29-3813-b7e9-fbceb3ef9fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:dd:55:be:3e:eb:95:42:20:fa:57:4a:38:2f:89:99:5b:cf:
         7a:fa:04:62:3e:44:fe:6a:75:42:79:83:4e:54:ad:33:fc:74:
         96:c1:c5:fc:21:f8:89:5e:c6:64:71:77:2f:79:46:16:1e:3e:
         fa:cf:92:a6:77:63:0f:b8:d5:0a:e9:b7:00:31:01:52:2b:93:
         8d:1f:c2:14:1c:42:4e:70:2d:c0:5d:fc:76:de:bd:a5:93:57:
         2f:ff:cd:08:a1:05:4e:47:e3:82:31:f0:7d:67:9f:c1:f5:4f:
         33:8d:da:5a:47:cb:34:2c:9f:a7:5b:39:d3:49:76:38:20:6a:
         0a:5b:1f:0c:e0:b2:1b:c3:97:70:5f:03:2b:80:a5:0b:23:70:
         47:ed:40:d6:92:a4:2a:69:92:b8:2b:03:8d:5d:99:08:6c:3c:
         13:5e:e2:01:c8:2d:97:86:41:09:cd:a7:0d:d7:3e:7f:de:44:
         e8:df:84:9f:d7:b9:15:99:2b:22:53:0b:42:92:8b:20:23:89:
         9b:e8:71:ad:a5:bf:29:c9:f6:1d:d2:7e:9f:8b:5f:09:be:35:
         50:df:a3:44:82:6e:13:7d:b8:6e:bf:90:84:8b:95:6e:b4:aa:
         7e:d5:f8:c6:6a:6b:cf:c5:6a:b3:02:7b:56:7e:e0:be:08:9d:
         48:c0:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:40:12 2025 by rpki-client