Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a16f382f-1f3d-3929-b88f-5e6775a74a96.roa
File:                     a16f382f-1f3d-3929-b88f-5e6775a74a96.roa (raw, json)
Hash identifier:          LB5/E91K+AM60lsSDt/I8/agXmc6bRUjF4x0rWuJmBo=
Subject key identifier:   8D:F1:0D:93:CE:E8:2C:20:2D:BF:A6:A6:DC:1A:18:2D:F8:FE:1F:95
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AF5212BBECAB1EFE29D972800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a16f382f-1f3d-3929-b88f-5e6775a74a96.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        130.137.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2b:be:ca:b1:ef:e2:9d:97:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=ad75cb6d-c97b-45a4-ae65-28030fee4d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:c0:48:bb:cf:94:de:a0:57:0f:90:40:53:
                    7d:5c:65:38:84:7b:01:37:65:49:fb:ef:30:63:79:
                    06:b9:34:f6:7f:1a:43:ee:b1:db:16:60:93:5e:cc:
                    ad:f8:43:51:ec:9a:a8:02:eb:46:68:92:8a:8d:fc:
                    86:df:18:82:8d:d7:c9:a2:85:8b:2c:23:09:56:55:
                    d9:24:92:0d:80:92:cf:8a:ba:e8:90:91:d4:54:90:
                    27:f2:63:24:05:5c:20:d7:d6:76:28:51:6c:9f:8e:
                    37:d0:4c:a5:dc:8a:c5:df:10:85:f0:35:5f:bc:86:
                    dd:03:0a:a7:d2:21:e8:d3:62:07:61:fe:77:56:2f:
                    f3:24:e7:db:1a:fa:51:db:44:a4:00:8f:88:db:c2:
                    f1:1a:20:e9:fe:74:c3:e5:69:0f:6a:14:da:b5:04:
                    75:49:03:a1:c8:f7:74:15:a6:22:6a:3d:e7:22:11:
                    27:8c:1e:68:cc:0c:01:98:a4:ea:90:08:85:9d:13:
                    1d:b9:b1:fb:a5:93:b3:d1:d9:58:18:59:67:05:ac:
                    5b:2d:3d:f5:8c:3c:06:eb:93:b0:b1:9c:fb:d9:96:
                    db:99:4b:ba:45:63:b0:f6:c2:e6:f9:e7:d7:5e:e7:
                    b7:66:4c:f2:0a:fe:98:b6:00:a4:d8:00:7c:42:51:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F1:0D:93:CE:E8:2C:20:2D:BF:A6:A6:DC:1A:18:2D:F8:FE:1F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a16f382f-1f3d-3929-b88f-5e6775a74a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:4a:ed:5b:28:2d:96:48:ab:69:79:57:d4:02:43:21:3e:02:
         e9:af:2d:ee:e1:25:73:d6:2f:58:92:37:e1:e7:ca:01:12:d4:
         68:dd:e6:06:67:cb:a4:22:74:9b:37:9b:4b:2e:41:d0:3a:60:
         1d:af:d2:38:61:e3:76:71:62:cc:5a:c7:58:1d:a9:8c:a7:a6:
         79:37:b7:78:27:75:e2:7c:51:9d:ee:5a:ca:65:60:db:00:ce:
         9a:96:54:8c:1e:af:8b:82:6b:bc:72:ee:d4:5d:1b:b9:88:88:
         f7:10:aa:19:0f:6b:73:11:0f:c7:97:3f:78:dc:63:97:ec:c5:
         8e:b8:66:2a:9b:36:b4:29:d3:45:9b:46:38:f6:3b:cf:45:62:
         00:bd:d7:43:f3:33:cb:e3:7a:b5:1e:38:92:18:86:7e:3d:e3:
         9a:15:3b:fc:fa:05:1d:c5:25:7e:e1:52:f7:6f:da:65:fe:86:
         49:3f:5c:c9:24:cb:c4:f8:16:ef:02:26:a1:e7:08:ac:ba:9f:
         34:94:e7:b4:42:bf:ab:3a:38:7b:f6:28:35:e6:77:21:39:86:
         74:c4:79:16:08:87:1e:b6:ec:7d:72:a5:43:3d:f5:f0:08:89:
         5a:ff:c6:85:f7:5b:a1:d6:55:07:40:56:35:2a:3e:93:93:11:
         02:37:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 19:12:50 2025 by rpki-client