Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0cd6377a-8319-31d9-9bee-551c276c8ae9.roa
File:                     0cd6377a-8319-31d9-9bee-551c276c8ae9.roa (raw, json)
Hash identifier:          p1egSkx5KfrZIhGDsoLxKXXSOq3n48ObWHyC9H7qsrg=
Subject key identifier:   A3:76:4A:B8:4E:34:C3:53:3F:11:48:A1:F2:43:D9:DA:79:35:2D:0C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E2AD4647A7D98B184F097FD40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0cd6377a-8319-31d9-9bee-551c276c8ae9.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        130.137.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:64:7a:7d:98:b1:84:f0:97:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=03817564-e2ee-4ec5-8a02-42d0fa3d44a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:4b:9c:29:d8:b5:0f:c6:99:78:b3:c0:4e:
                    f3:db:e5:8c:09:3a:63:fc:b7:c9:e6:10:aa:f4:db:
                    4a:65:8c:84:a3:e0:99:5f:9a:4b:2f:cf:7c:51:05:
                    64:eb:95:2e:68:61:20:9c:7e:d5:be:84:b8:b6:33:
                    7a:75:7c:be:e1:8c:0c:6c:f8:41:a5:a2:21:a5:a7:
                    dd:50:2d:64:ad:2a:2e:aa:12:eb:d2:6b:a2:e9:50:
                    12:37:26:7e:52:b5:a7:71:5f:b1:7b:16:a5:ad:25:
                    58:c9:b2:63:c6:59:cc:d9:5d:20:1e:fe:51:bc:0c:
                    cd:7e:3f:cc:1e:76:f8:24:fe:6b:dd:a2:59:be:6e:
                    a7:6d:e8:a7:d8:fb:54:d4:0b:8c:6d:ae:39:ca:38:
                    31:73:0b:9a:50:67:97:7d:ca:57:d9:55:c8:df:e5:
                    7f:74:9a:d8:98:d4:ce:23:18:74:cf:0f:38:a4:93:
                    c9:4a:4c:2c:1f:e8:15:eb:9d:b3:ea:db:a4:a7:58:
                    1f:47:1d:9e:19:b4:59:92:80:d8:f3:bb:48:4f:d1:
                    a4:7f:29:95:03:15:67:ee:2c:f8:7b:e4:78:7c:13:
                    f3:e2:b5:dd:47:f5:98:c5:9a:d2:15:80:50:8e:cc:
                    19:5a:af:ad:a6:74:94:25:1e:ad:8f:5b:14:f9:fc:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:76:4A:B8:4E:34:C3:53:3F:11:48:A1:F2:43:D9:DA:79:35:2D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0cd6377a-8319-31d9-9bee-551c276c8ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:95:22:28:24:4b:12:45:98:11:3c:d1:34:7d:0d:bd:ac:a4:
         76:92:74:21:35:75:14:7d:6e:d7:ce:5c:6b:32:f2:78:08:38:
         a0:b3:7e:24:83:7b:49:e5:8e:ea:2a:65:04:de:6a:4a:45:92:
         db:5e:ae:a8:c2:8a:b0:b9:4b:e5:f4:b6:64:d7:fe:35:ba:ae:
         74:90:1c:40:99:97:a1:91:81:a8:82:95:12:45:c3:c5:8b:d9:
         52:4f:da:47:5d:37:72:2b:e3:33:32:70:13:bb:d8:f7:83:0d:
         c3:6d:de:0b:c3:61:0a:a5:23:ad:ea:4c:1e:f3:14:1a:4c:08:
         cd:2e:95:55:3f:49:2d:49:be:e1:b3:66:2a:d1:33:53:4c:da:
         6c:f1:31:c6:e8:87:5c:8c:19:16:1b:34:f8:e3:06:c8:fb:91:
         c2:ab:b3:3a:80:c1:62:7f:1c:13:e6:60:d5:ba:35:d4:17:09:
         a7:c8:d6:0f:48:d1:23:2f:9c:db:b8:e7:98:50:d8:c2:ec:b4:
         b8:14:91:31:13:71:c4:50:4c:c9:83:a9:c6:ae:46:42:99:fb:
         2a:14:70:6d:70:ac:61:dd:35:ba:cc:d9:43:52:8d:81:91:39:
         61:a5:8b:47:1a:9f:6f:a8:5b:b1:51:25:f6:c4:15:ae:bd:18:
         60:67:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:45 2026 by rpki-client