Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
File:                     0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json)
Hash identifier:          bZ8aGtOXodntNKDRHvDxT3lnCXH/HG+X8VQ0lHcSg7U=
Subject key identifier:   11:D1:87:2E:88:F5:F1:EC:47:50:20:33:21:09:08:60:20:86:B8:BC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5A49F8C5B707C9132DF8B500
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        130.137.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f8:c5:b7:07:c9:13:2d:f8:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=f7eda1d4-9553-47f8-a879-705bb2a5374b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:5f:d2:ab:6e:b3:37:19:bd:14:68:5e:b9:
                    a7:7c:a6:fd:ff:60:d4:d7:bd:aa:2b:eb:81:d2:e5:
                    f7:02:b1:3a:ff:12:d0:09:8c:ea:94:b7:d4:c0:07:
                    31:82:14:8b:f3:b0:36:f3:dd:ae:1c:70:0a:f7:13:
                    ee:30:8b:32:52:62:13:86:ae:af:94:f1:7c:33:5b:
                    43:21:c6:41:ca:eb:d8:78:fd:87:9f:d4:37:8d:6a:
                    45:b1:c5:03:71:9e:ec:c4:ab:c1:23:8a:90:7d:79:
                    45:84:62:c5:6e:ea:86:b3:81:69:28:e7:89:ae:19:
                    cf:3e:ef:62:f0:ff:15:cf:ab:c9:f5:cc:df:6e:e3:
                    86:d4:94:b0:5d:f9:b8:dc:68:9b:3f:46:41:2a:01:
                    31:72:c7:e8:1c:86:80:5c:b9:45:3f:fb:7e:df:15:
                    ec:88:2c:b3:21:38:04:5f:99:2c:b4:1d:92:ce:a1:
                    5e:b1:48:11:76:4d:a5:78:aa:c0:26:3a:cf:3f:c0:
                    5a:5c:50:41:ea:ed:d0:0b:64:5c:ad:45:98:58:65:
                    44:63:8d:50:02:ec:ec:94:16:ce:a9:46:88:04:59:
                    5f:10:32:e3:26:7c:49:05:ab:8f:35:0d:0c:de:d7:
                    34:8f:aa:1b:1d:76:6f:ea:f6:a8:d4:ee:98:94:3d:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:87:2E:88:F5:F1:EC:47:50:20:33:21:09:08:60:20:86:B8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:83:58:c7:ff:58:84:bf:a2:d2:98:1b:d9:3a:60:42:9d:84:
         6b:d3:63:4d:dd:e4:0a:b2:ba:07:4f:01:28:d7:b1:8f:ae:27:
         9f:41:f7:7b:b7:71:59:1b:f9:4b:0a:4f:86:a8:19:4a:37:a1:
         eb:fe:a8:0c:09:a5:08:0a:39:f2:ed:d7:fc:cb:52:3d:bf:c4:
         74:60:a0:e6:c7:b6:7d:48:ed:16:f8:bd:75:95:5c:6d:b9:5f:
         70:86:de:fb:8d:36:e0:dd:77:ca:60:a1:b0:cb:c9:7e:d6:8f:
         7f:5b:ad:9f:15:0d:63:73:c7:ee:bc:71:6e:33:c8:b5:80:d7:
         34:ec:47:eb:f1:1c:24:b2:a7:20:f4:68:e1:a6:84:00:de:27:
         5d:e3:2e:b5:91:9c:62:4e:87:f0:e8:34:6f:ea:39:84:2f:08:
         bd:21:49:d0:ff:7a:76:03:7b:0d:bd:23:0e:59:ba:de:ad:76:
         8e:cc:dc:bc:f4:77:4f:bb:48:29:0d:19:3a:eb:99:c6:a6:cf:
         b8:c1:6a:45:3b:78:fb:37:75:72:ed:ad:20:dc:6e:5e:67:10:
         0b:96:27:16:6a:04:1b:40:ec:aa:7e:dd:73:ac:f8:61:c8:9e:
         95:01:22:ca:e0:d8:f7:52:48:49:fe:3d:f2:09:1b:1d:78:d2:
         dc:e9:02:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:21 2026 by rpki-client