Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa
File:                     a3d77e1c-257b-3469-b300-a7bde94c1679.roa (raw, json)
Hash identifier:          bOkE2TzUo7N4f4AKRvTvYh3HLepQFKU5bKnRd7p0zVg=
Subject key identifier:   76:54:88:97:93:E6:0A:CF:BC:84:66:0A:2A:C1:85:AB:37:61:79:9D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584ADA9BBC541E6C517CE5B56900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        130.137.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:bc:54:1e:6c:51:7c:e5:b5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=c7c77085-a595-4c42-ab93-2ac52afde339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:f7:34:8d:b8:c3:2e:9c:89:91:3f:41:3c:
                    01:4b:d3:20:e8:84:ef:b3:54:f4:43:c4:60:4c:64:
                    82:92:47:3d:8d:f1:84:dc:1b:5b:e5:8d:87:76:da:
                    63:62:08:2a:91:eb:6e:46:32:b4:db:f1:10:3d:bc:
                    90:40:70:0c:3d:64:58:20:2d:5d:2a:06:41:a6:7c:
                    6e:17:bc:2a:09:c9:fc:00:89:fe:9f:85:f8:ae:e8:
                    98:a8:23:08:ba:df:a2:29:36:fb:b2:f7:36:0e:d2:
                    e1:b1:46:71:78:aa:13:c0:e6:0c:7e:5e:7d:9b:28:
                    21:1c:86:29:af:cc:97:9f:d1:1d:dd:d3:aa:75:49:
                    58:a4:ce:15:08:c6:1c:13:bd:4b:6d:39:48:2b:0e:
                    21:01:08:72:f5:03:e5:15:70:40:b0:ef:68:16:ef:
                    83:50:21:08:2a:33:30:45:44:47:63:df:d3:fe:8d:
                    c6:86:bf:75:c5:62:b4:1f:70:bd:9d:4e:71:a5:4f:
                    ed:f5:23:57:06:d2:89:a3:d2:61:58:74:76:64:63:
                    67:56:72:19:de:3d:54:4e:47:b0:a1:3f:52:e0:9b:
                    6d:68:e3:27:ce:ce:c7:94:31:76:d0:ad:b6:f1:cd:
                    26:10:5d:f3:63:ad:f4:e8:d0:43:fd:f2:a7:f9:77:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:54:88:97:93:E6:0A:CF:BC:84:66:0A:2A:C1:85:AB:37:61:79:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:5a:1e:13:c9:f3:d7:1a:c0:f8:1b:f4:ee:22:12:e6:de:
         48:5b:c7:c0:d7:e6:8c:ed:33:10:9b:2c:67:17:84:67:94:7e:
         67:d1:39:62:ab:30:62:54:e6:c1:18:87:73:50:a5:e4:7a:39:
         61:17:0b:d3:3b:db:ab:02:29:f2:e5:29:c2:a6:24:b6:d4:88:
         5e:08:1a:ab:35:97:93:06:f4:1e:5b:49:e8:8e:ae:8f:48:ba:
         1e:f6:2a:24:48:77:f5:1d:ec:06:37:4f:79:be:0e:d1:85:98:
         73:5e:6b:0b:d8:2c:b6:06:10:de:45:ad:31:b8:fc:e4:f1:dc:
         e5:c2:7b:9b:04:61:6d:35:de:c7:da:21:83:c6:02:ef:c2:68:
         a5:0b:7d:73:8b:de:b8:4d:e2:ce:2a:b0:af:29:60:b7:41:16:
         af:08:83:5f:1f:b1:21:73:1f:dd:93:6c:e3:b8:23:6f:6e:f8:
         e0:3a:75:06:a1:fe:77:eb:66:0d:9c:f6:0b:af:41:b1:99:3c:
         4f:eb:b9:9e:d3:1f:9b:a1:6d:d5:2f:57:68:c7:06:c3:49:b6:
         0d:97:5b:93:98:ff:08:5d:7a:45:e4:87:23:86:c6:93:62:fd:
         e4:d7:61:7e:17:b4:03:6c:e3:f5:75:8a:5e:33:f7:64:8f:89:
         01:27:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:52:00 2025 by rpki-client