Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
File:                     6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa (raw, json)
Hash identifier:          iunaw2vu35PWmaziOAtOwLN5MBCe0YZopRgiOw3idS0=
Subject key identifier:   39:E1:7F:73:B9:1E:A4:7D:4E:00:20:B4:C9:6B:E7:EC:95:4E:22:47
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5FDF510E18A5D8BEE85A8E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        130.137.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:51:0e:18:a5:d8:be:e8:5a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=2382a94b-e43f-4bfa-a086-b3674a822c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:f6:79:dd:9f:94:a4:c0:ad:58:d6:11:de:
                    43:f6:51:7c:0a:1f:25:4a:3e:89:8d:11:01:20:47:
                    43:95:53:20:69:c5:17:74:18:24:3e:a5:8c:71:76:
                    ae:9d:2d:cc:0f:82:4b:df:b6:e4:c9:ea:95:c1:ad:
                    de:ab:16:49:cb:7a:f4:3c:8d:6f:f6:50:7b:a7:6e:
                    42:48:8c:aa:1c:b1:3b:56:65:49:64:77:e9:cf:d4:
                    ad:12:43:cb:9a:8e:43:7c:b9:93:b6:01:1e:bb:e7:
                    40:bf:a4:de:c9:15:31:a3:49:c2:9e:61:10:84:ae:
                    93:e5:c8:89:2a:12:2c:08:7c:e9:fa:7f:c5:57:3e:
                    21:f2:1c:57:e8:28:15:8f:2a:f8:7e:6b:52:9e:ec:
                    6a:78:1c:33:2b:79:64:c9:ca:53:43:f9:28:c7:be:
                    9d:05:99:26:b0:5b:b5:75:60:f7:76:8a:9f:b4:7a:
                    ae:14:4a:c3:a0:91:28:01:db:d9:46:fe:59:48:1c:
                    94:76:5b:8c:14:f8:4d:54:cf:ab:10:4f:68:b5:9c:
                    a7:e8:e7:5f:00:41:b4:da:37:dc:cf:83:ee:b5:eb:
                    dc:6c:a2:af:78:8c:ca:1e:c1:af:ed:bc:9e:81:28:
                    47:60:39:b6:50:92:dd:e8:f5:ba:34:e7:7d:5a:04:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:7F:73:B9:1E:A4:7D:4E:00:20:B4:C9:6B:E7:EC:95:4E:22:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:83:b6:15:8b:11:0b:d0:7b:77:32:7a:5f:9b:89:73:22:
         38:48:e0:9d:6a:70:ed:44:82:de:bc:c0:78:e7:59:2e:81:c4:
         80:71:89:56:50:b7:71:c0:de:b4:da:55:31:c0:ef:48:03:fa:
         fc:8b:3b:12:48:17:bb:95:3b:ee:48:c0:30:3c:4d:5c:d3:1a:
         b2:00:76:18:6f:a5:43:4d:57:54:f2:e2:d3:f9:b1:7a:07:e8:
         b1:b3:de:6a:e8:e9:87:1a:63:ae:d6:94:f1:64:1c:5f:9c:91:
         5c:20:62:9f:65:0d:eb:0b:10:3c:eb:31:5e:83:1a:b6:90:c4:
         f1:df:e3:ed:88:d7:e4:ab:d1:c8:86:88:c0:73:1e:0d:2b:97:
         6a:a7:65:99:1e:d6:a3:78:f5:ee:01:cb:2d:69:92:c3:38:8b:
         a6:6c:d9:ef:f5:ee:d3:d9:d3:f5:7b:14:0c:55:f6:db:ba:b9:
         d9:07:78:5a:c2:ab:83:c7:b5:c4:e1:ff:62:19:5d:ae:b3:86:
         64:7c:81:3c:71:9b:74:79:12:35:ac:2a:e8:07:15:d8:a7:a7:
         3d:de:89:d7:6e:a6:16:8c:aa:58:9b:01:9a:f8:94:d1:90:10:
         bb:4b:ad:27:af:ed:c9:9a:1c:c3:29:5a:a1:ef:30:d2:ca:ce:
         9e:59:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:22 2026 by rpki-client