Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
File:                     3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa (raw, json)
Hash identifier:          QxDGHL5o8DheE7jRBqf51+tyBheGJeFM600OnyPlItY=
Subject key identifier:   68:61:3B:8E:83:72:3E:7F:1A:8C:72:ED:C3:FB:42:18:03:90:3C:1E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F6F22DEBE868E7A2730851280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:de:be:86:8e:7a:27:30:85:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=1246ad38-ddf3-45f5-9dcb-3f42e4eca2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fb:48:90:55:90:f4:89:da:4b:d1:21:10:80:
                    6c:ea:84:45:87:ad:be:84:cd:3e:5a:b7:36:09:16:
                    40:f8:4a:57:f0:7f:64:e6:7a:9d:83:27:e7:43:81:
                    af:de:2e:bb:8f:24:e2:07:51:0c:8a:96:33:d2:2e:
                    1d:52:0e:6d:95:11:fc:7e:41:aa:13:fc:92:cd:61:
                    0e:07:09:97:13:a0:d0:e7:08:4a:a3:33:5c:72:09:
                    de:8f:22:4a:0d:3d:31:5c:10:2e:fc:ec:17:b4:0a:
                    65:04:d0:b7:8c:e7:de:4e:36:9b:d6:1f:80:06:33:
                    5f:6f:33:4e:d9:7f:63:48:1d:14:44:a9:eb:60:ff:
                    b6:8f:d3:bb:6d:f9:d5:a0:74:09:ee:89:59:3c:66:
                    c1:65:ad:5d:96:83:0f:6f:c3:d4:e3:87:68:5f:79:
                    4e:48:b4:17:c1:37:80:8f:e1:da:5b:c5:ad:02:23:
                    8d:0a:eb:49:22:22:bb:97:94:e1:85:9f:42:d6:2a:
                    30:e8:3f:7e:5e:59:e9:15:46:65:09:d2:48:5e:9b:
                    56:e7:97:14:16:5d:c1:90:7a:18:70:8c:47:92:dd:
                    36:13:00:af:78:10:00:39:13:45:18:3a:25:f3:1d:
                    d5:c8:6b:5d:36:ee:8a:33:04:7e:1d:fc:50:56:43:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:3B:8E:83:72:3E:7F:1A:8C:72:ED:C3:FB:42:18:03:90:3C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:db:13:a9:67:9d:7e:85:15:42:85:21:33:3b:94:ae:26:26:
         df:f8:a8:eb:4a:38:05:c2:41:55:35:00:01:35:83:2b:71:59:
         85:e4:75:a5:f3:d3:56:e6:3d:ca:85:04:69:5b:8c:09:63:14:
         88:99:17:71:da:95:91:1f:cb:63:42:e1:eb:99:05:db:db:2e:
         4a:5c:f1:74:1f:34:ee:d1:ec:ce:f1:e3:ef:a5:5e:4a:b2:7e:
         a2:3b:64:da:e3:58:41:0d:21:f6:39:c4:f6:8c:d7:4d:f0:0d:
         e4:02:63:b7:1d:d7:e3:3a:d8:56:0b:49:33:a5:83:ad:36:6a:
         4c:e2:e5:0a:d2:4a:43:b2:0e:c3:38:90:2c:a2:e5:0f:ad:57:
         6d:93:c5:e6:59:ad:56:01:ab:02:3f:d0:f1:21:dd:30:17:3d:
         ab:4c:55:34:3a:5e:d1:76:02:6a:2e:eb:e0:fe:af:c2:28:9b:
         d2:63:5f:5d:54:25:7f:74:a8:b1:fc:7d:b4:5a:14:45:5c:c4:
         73:aa:0f:0a:35:6d:50:e9:5b:7c:49:bd:44:dd:3a:d1:74:b2:
         1d:6a:d6:2d:4c:ac:ac:83:d3:73:e6:2c:fe:bd:5d:6d:4d:7b:
         d1:01:fc:57:df:e2:59:60:a7:50:f9:c6:9f:1f:db:7e:6b:ff:
         98:b3:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:59:30 2026 by rpki-client