Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/49eae27a-1574-3138-a921-3325cafc2f8b.roa
File:                     49eae27a-1574-3138-a921-3325cafc2f8b.roa (raw, json)
Hash identifier:          eYKs/IgIEwu6qCUQVjpmn4qWQuj0wqC9NENuPW8S630=
Subject key identifier:   A6:DC:AF:0F:63:B5:F5:A9:0E:BB:31:F4:E4:BE:16:2E:DE:16:7B:47
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5619EB8EE86A61289FEC2100
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/49eae27a-1574-3138-a921-3325cafc2f8b.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        130.137.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:eb:8e:e8:6a:61:28:9f:ec:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=b130b8b8-6b9d-4a68-8aa8-5b4b871c4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:e9:5a:c0:d9:66:cb:f3:e2:02:61:ac:86:
                    e0:31:42:b2:f9:3c:c0:5d:dd:02:3c:62:76:9d:b6:
                    00:08:a0:f5:56:78:86:af:52:a9:e6:8a:0d:bf:b6:
                    73:3f:99:ce:53:4e:14:24:3f:56:6d:20:1a:3d:44:
                    15:e5:59:78:a9:1f:10:4b:42:30:33:b0:0f:7b:b4:
                    66:05:97:99:1e:cf:88:2f:0a:2e:28:c8:a5:d5:8b:
                    bf:31:b2:27:9c:a8:9a:ab:04:54:69:14:6e:e8:61:
                    ba:bc:21:04:6f:a3:59:a5:c3:a4:35:00:3e:8d:7c:
                    d8:25:05:cf:c6:10:f2:7f:4e:4a:72:cc:51:f5:d4:
                    9c:2f:ac:75:19:b6:ab:19:27:b1:be:cd:de:39:29:
                    2c:d6:65:1b:92:60:90:d1:16:a9:f9:e9:c8:45:c3:
                    6c:87:b5:4e:72:3c:e9:90:d2:52:4b:e1:a9:c5:42:
                    27:a2:54:4a:71:45:5e:da:3d:a9:3f:81:df:11:c4:
                    20:ef:89:16:b2:d6:57:c7:36:75:26:45:f0:18:47:
                    06:26:2f:5e:a5:a9:a3:64:d0:3e:ef:3b:b1:a3:c3:
                    02:9a:f3:2f:3f:1d:ba:b1:73:a3:c2:e4:af:76:8b:
                    21:e4:6e:3a:49:77:e2:24:eb:d1:45:f5:ea:b9:31:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DC:AF:0F:63:B5:F5:A9:0E:BB:31:F4:E4:BE:16:2E:DE:16:7B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/49eae27a-1574-3138-a921-3325cafc2f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:06:12:ee:8d:1b:64:30:11:d3:39:e5:0e:77:b0:fe:27:62:
         8a:17:ea:42:36:e6:6a:3e:35:fc:63:4e:67:2c:2b:e6:1a:3c:
         a5:8c:d1:d2:f4:ed:c5:a8:6d:e8:31:f3:70:6c:d8:fd:b0:97:
         a7:1e:a0:63:03:c9:3a:69:40:dd:65:87:14:e8:ce:5d:ff:15:
         22:40:3a:a3:f1:3e:d1:bd:95:b8:4e:0e:f0:6a:52:19:55:93:
         0c:bb:c9:7d:53:55:01:2f:23:8c:43:27:af:ef:e6:85:54:be:
         34:98:b6:37:cb:a5:84:20:0f:4f:83:c1:96:34:4e:88:20:70:
         71:9d:a2:49:ed:3c:98:6c:10:6b:bd:ea:d8:5d:49:de:43:21:
         59:a0:2a:15:3f:84:44:3f:3e:ee:5a:54:10:e8:3e:ec:46:06:
         8d:bc:94:50:83:89:e3:2a:73:36:ff:9c:12:b1:02:f3:b9:ac:
         6c:a9:b5:cb:ea:a9:0f:c8:0a:44:a5:de:f6:fc:94:77:b7:59:
         4b:b8:39:bc:b3:3c:63:7d:7b:99:10:3f:34:40:3f:88:1f:ed:
         d6:3d:7b:47:a6:fb:0a:3b:68:e4:dd:79:5f:c0:48:4d:76:f8:
         02:9b:26:86:70:2f:fd:bc:e9:42:9c:c7:89:f3:43:dd:94:08:
         b3:e5:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:57 2026 by rpki-client