Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7ba317bc-6974-31f7-ab65-f410bbdb4f75.roa
File:                     7ba317bc-6974-31f7-ab65-f410bbdb4f75.roa (raw, json)
Hash identifier:          m9SNNH232fAP7IErSq3i+vuRtf4a6PaZt/FuodDYbGM=
Subject key identifier:   4F:9B:79:99:65:53:B1:72:69:BC:AE:71:F8:A2:70:AB:F4:B3:A9:65
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E6F3A1EF5C3FBA1515F0A6E60
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7ba317bc-6974-31f7-ab65-f410bbdb4f75.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     8987
IP address blocks:        130.137.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1e:f5:c3:fb:a1:51:5f:0a:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=73601fcc-b137-4456-b234-cd2162f7cfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:cf:59:e5:fe:0d:d4:f7:43:62:79:f7:ac:
                    c7:01:a1:ac:98:9f:d4:1c:fb:0c:27:46:20:3c:f9:
                    d0:b2:15:28:d3:3d:75:e6:cb:24:a3:71:eb:1e:70:
                    d7:52:ef:b7:8a:e5:1c:22:98:db:8a:97:96:cd:1b:
                    ac:e0:35:27:30:44:8a:47:94:8b:90:59:cf:4e:f5:
                    08:af:09:b1:1b:d8:9d:7a:3f:fc:22:a5:34:90:2b:
                    9b:4f:5f:41:4e:38:b1:a5:4f:85:fb:df:80:72:c3:
                    c0:72:23:f2:cb:ac:37:fa:da:f4:43:ff:c8:b6:32:
                    49:8f:90:d4:70:b3:0c:9b:60:15:11:4a:6d:48:57:
                    6e:94:49:38:4a:d3:f6:f8:88:bf:1c:bf:8d:cf:68:
                    bb:64:26:d9:2e:5d:f0:8d:89:58:ff:52:a8:07:d7:
                    cf:a3:05:b6:92:f8:4e:e9:ba:ca:12:83:2a:35:68:
                    07:c5:7f:5c:85:24:30:d3:e3:00:e0:e8:9b:ea:66:
                    a7:15:c5:33:2b:c8:d2:f3:1e:72:c0:f4:49:fe:f6:
                    ce:40:68:35:aa:d6:c5:b2:16:ec:0c:de:f1:60:39:
                    20:52:d4:ba:0e:81:08:6b:c7:96:6c:63:f6:60:2c:
                    9c:95:f3:1c:79:71:45:bd:6c:e6:46:bc:51:03:cf:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9B:79:99:65:53:B1:72:69:BC:AE:71:F8:A2:70:AB:F4:B3:A9:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7ba317bc-6974-31f7-ab65-f410bbdb4f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:00:2c:e0:6b:cf:2b:87:98:1c:34:3a:3e:f4:9f:9d:92:81:
         5f:39:d0:d0:18:7c:81:6a:0d:e8:2c:aa:d9:3a:d9:fb:e0:00:
         7c:4d:26:cb:b3:cb:ef:e5:13:c0:9a:87:35:e4:b1:b4:7e:28:
         8a:12:4f:3e:42:1e:83:bf:24:be:1b:87:c4:25:ff:32:fd:ce:
         db:63:b8:31:1b:9e:af:be:21:ca:f5:9c:9e:24:e1:eb:ff:4a:
         1c:68:a4:d7:24:a1:80:1d:36:a3:76:c4:28:29:e9:28:db:9d:
         56:be:e8:3d:de:95:b8:3c:32:b8:98:23:38:2e:06:86:b6:6c:
         eb:40:73:98:77:82:af:e6:56:2e:4b:0f:50:05:e0:0f:ed:d9:
         25:09:0c:ca:d0:23:3e:da:f3:81:c9:fc:c7:cb:33:d7:63:86:
         81:19:05:03:60:f3:df:4e:61:90:20:60:5f:55:91:d4:8f:23:
         c4:68:83:6e:84:23:7a:00:4c:16:f8:c7:19:32:a7:cd:7b:ad:
         d3:2f:d4:f9:10:8a:bd:5d:1b:05:22:f2:31:70:97:e8:9c:7f:
         21:4b:ef:55:f7:f3:db:de:d7:f6:94:1e:63:8b:4c:f1:6f:b6:
         bb:e2:8d:fd:29:5e:a5:c6:c7:70:b0:6b:8b:af:ce:16:51:fb:
         81:25:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:28:44 2026 by rpki-client