Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f71f39f-9ce0-3698-a102-9575bb6307c5.roa
File:                     5f71f39f-9ce0-3698-a102-9575bb6307c5.roa (raw, json)
Hash identifier:          2YsvK9ApLB+uF1L/MQzM7BkUWuA7IigpsN1dVW/0Z/I=
Subject key identifier:   E9:77:15:4D:53:ED:B2:BA:68:3E:6B:E4:E4:36:E6:48:1A:F6:C9:D3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5A49F426493CC39525715240
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f71f39f-9ce0-3698-a102-9575bb6307c5.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        130.137.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f4:26:49:3c:c3:95:25:71:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=3fd7dc1b-914a-40ad-84e0-c22f25136177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:58:ff:f0:25:89:56:98:9e:01:48:4d:d8:
                    54:11:4d:51:dc:ff:4a:80:27:e5:12:c9:dd:aa:17:
                    1d:03:73:ec:f7:0a:9c:b1:fa:84:b5:0a:6d:6e:29:
                    62:b1:fa:2c:15:a2:0e:3c:35:9c:08:b0:3f:61:e3:
                    3b:78:29:f6:c5:13:b3:33:fa:86:91:c3:46:9e:5b:
                    83:d3:e2:23:08:6a:80:55:e2:90:01:ef:aa:70:74:
                    1f:31:e2:11:76:ea:f1:89:41:2d:b9:cb:79:a5:33:
                    3d:1c:a0:52:fb:b7:fa:ae:6d:c0:72:d7:dc:e1:ed:
                    00:01:a4:3b:3d:1c:64:d1:0b:df:94:ea:9e:00:08:
                    a2:50:18:88:00:8d:a5:0c:0b:c9:03:9c:50:27:af:
                    f3:81:f5:47:77:24:83:ae:d0:74:d0:6b:77:93:91:
                    f8:be:91:20:03:8a:e7:57:70:cd:0b:ec:0a:4b:25:
                    fd:4f:16:7b:70:e0:af:1e:74:78:1f:16:7e:75:dd:
                    07:93:95:c9:7d:c7:c7:e5:60:1b:e4:15:cf:a1:51:
                    0c:92:a5:e4:51:5b:a5:8f:4b:4e:d3:d0:bd:14:eb:
                    c2:f8:9a:b2:4c:5d:ee:61:c2:fa:bd:ed:5d:5a:e9:
                    e2:96:d0:50:a4:43:ef:54:df:fb:4f:63:4c:82:cd:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:77:15:4D:53:ED:B2:BA:68:3E:6B:E4:E4:36:E6:48:1A:F6:C9:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f71f39f-9ce0-3698-a102-9575bb6307c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:2f:52:2e:6b:fe:df:0e:3b:c9:a2:e7:73:5a:6c:9f:3a:b4:
         5d:77:f6:cc:d7:eb:25:41:12:f2:5e:e2:98:2a:21:d2:3e:24:
         da:15:86:84:f6:77:4d:fa:10:d0:7d:7c:44:b6:54:97:46:c4:
         66:ef:00:91:8e:f1:2e:3d:84:96:45:a3:b7:fe:a3:74:7c:19:
         12:9c:68:fc:71:9a:55:6b:84:46:96:9c:fa:e8:67:ec:f5:a9:
         e6:72:f6:84:04:a7:af:ce:67:dd:03:12:ef:53:76:b7:e4:3c:
         ea:f4:9f:e0:57:55:03:19:e1:86:cb:06:bc:b3:20:83:33:33:
         06:14:60:14:14:34:d7:50:74:77:f4:7c:bf:9b:9b:99:18:b2:
         52:01:f0:55:02:31:1c:81:fc:fc:58:38:5a:dc:2c:6d:c1:9f:
         fb:24:27:e4:d1:66:c4:d2:ca:4b:92:f8:9f:be:77:46:44:77:
         e3:df:9a:6a:2b:99:1e:cf:95:a6:3e:64:9b:dc:d0:b4:73:2c:
         42:9c:e1:2f:96:45:b7:18:81:ba:41:e1:cc:02:57:6d:fc:fd:
         cb:35:c2:98:24:0a:94:28:9a:6b:ac:dc:6d:11:87:05:54:a4:
         f2:29:7e:a3:11:21:4d:62:c3:2f:37:f2:de:88:c1:c0:11:6f:
         3b:a5:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:42 2026 by rpki-client