Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48a0a851-c2ce-374d-a8da-a7527edca149.roa
File:                     48a0a851-c2ce-374d-a8da-a7527edca149.roa (raw, json)
Hash identifier:          jOd8sIMz5EueoSe1wwmtopt+N5sBCaTsICnxRm5Zoy8=
Subject key identifier:   B3:E8:8A:B1:DC:15:D3:E9:08:0C:C2:70:F2:C8:DE:2F:FC:45:17:A2
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E296F025855ED0BDC73893B80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48a0a851-c2ce-374d-a8da-a7527edca149.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        130.137.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:02:58:55:ed:0b:dc:73:89:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=bfab9f6f-3a40-4958-8946-d69b263e311b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:d1:ab:19:88:ca:37:88:cc:b0:5d:2e:83:
                    84:43:4e:b5:71:78:8c:04:b9:93:9a:01:a4:24:a4:
                    bc:00:35:1a:ad:5a:9c:8e:ce:28:d3:ad:e3:43:55:
                    50:48:59:b0:33:34:0b:59:8c:84:b6:d7:ae:0b:d8:
                    b8:24:3b:2a:af:8d:c8:ec:dc:05:aa:5c:54:f5:b3:
                    e6:a8:51:4d:8d:0a:b3:ee:2e:23:3b:ff:ca:de:b9:
                    99:98:91:5e:7c:24:30:50:30:76:a9:01:5a:12:37:
                    9f:12:f4:db:e8:44:b5:61:2b:6b:d7:52:bb:43:5d:
                    16:a1:00:e0:f4:08:57:33:19:8d:59:61:e3:ad:82:
                    39:6d:31:b2:84:55:39:36:37:f5:4b:89:2d:2c:a9:
                    3f:5a:eb:51:f4:2a:83:6e:cf:e5:e4:d7:3c:d8:68:
                    b7:24:ee:aa:25:ae:1d:c5:3a:3d:a4:73:e9:52:24:
                    f5:59:56:93:e0:9a:e5:ea:b5:cc:91:1c:30:b1:fa:
                    94:36:13:3a:0a:12:89:14:d0:c5:1c:0a:cb:24:ee:
                    62:5e:4d:39:33:de:68:b0:8c:e2:4c:ff:6d:5b:68:
                    8b:ed:67:2c:cb:d5:25:c0:e1:49:ea:56:52:4f:33:
                    f8:c1:0d:b2:3a:54:f9:40:b9:d3:60:3a:ba:9b:b1:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:8A:B1:DC:15:D3:E9:08:0C:C2:70:F2:C8:DE:2F:FC:45:17:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48a0a851-c2ce-374d-a8da-a7527edca149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:b1:3d:93:84:c2:b6:16:13:42:04:71:88:86:b9:93:9c:
         5c:c3:fa:95:b8:c0:f7:80:eb:f0:2e:df:19:6b:37:e6:0b:ce:
         8d:1a:29:0a:27:be:c9:ac:22:37:3c:b8:7a:6d:28:41:d1:55:
         71:44:e6:22:e2:54:ab:81:23:2e:d7:eb:5d:ed:61:4a:8a:1d:
         e3:32:79:24:21:36:e3:77:dc:6a:7d:a2:af:da:d6:bd:ba:7f:
         de:32:15:82:8c:9f:94:0f:7a:ba:06:2e:b6:0a:79:60:69:29:
         4b:4b:4f:8a:f5:4d:83:b8:e7:77:dd:f2:c6:fc:c0:34:6b:31:
         74:57:b2:63:3d:14:03:37:0a:8b:31:8a:4a:41:f3:d2:c7:ed:
         1e:88:03:74:c8:ce:f3:dd:1f:9f:b4:31:3f:38:11:1d:05:9c:
         29:03:42:cc:71:37:75:3f:5a:83:f3:8a:e6:70:db:65:3d:ac:
         b5:bb:14:de:ea:a3:6b:01:96:46:6b:62:a6:03:7b:bf:ed:e5:
         a5:8f:4e:64:fd:7f:cc:bc:56:93:ce:0d:1c:39:ca:b6:28:03:
         2c:be:fa:3b:9c:7a:11:28:7e:3e:0c:4d:69:bd:43:05:5a:5e:
         a2:57:1a:6e:8e:dc:36:2c:29:77:63:8b:5e:33:8e:58:f7:22:
         3c:0d:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:14:47 2026 by rpki-client