Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa
File:                     7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa (raw, json)
Hash identifier:          rAOAjkSmObbxqfcvLYJ+UyCLnkj3pw57hMnfnlc8lVc=
Subject key identifier:   2D:C9:AD:29:64:6B:99:DC:88:70:FE:52:E9:9E:BF:29:E0:98:74:A1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5D14A50D23AF6256DB34E380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a5:0d:23:af:62:56:db:34:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=c7d1f7b8-decd-49e9-b6dc-338d9e81439f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:97:66:92:eb:23:84:e9:dc:fd:3a:eb:fd:
                    8b:52:8d:aa:63:20:36:ba:ac:45:6e:75:aa:12:62:
                    62:3e:c5:8d:13:84:f3:33:44:2e:61:d5:d2:18:f5:
                    29:55:59:e5:6a:b6:71:9e:2b:ce:21:f8:d5:a4:b2:
                    7c:f2:cc:f1:a7:07:37:3d:06:00:7e:9d:c3:17:b3:
                    81:ee:37:6b:a0:d4:14:2f:e3:72:e2:1a:59:f8:02:
                    e4:49:3b:02:68:1d:9a:a4:40:d3:80:cd:c9:5f:b4:
                    28:44:61:b7:06:94:e4:35:97:73:d1:c4:57:7d:aa:
                    df:0e:69:b0:23:2c:e1:62:a5:3b:cd:9a:ae:16:5c:
                    37:f1:13:e8:02:e6:58:cd:c4:0f:5b:8c:d2:79:73:
                    09:08:af:fa:e4:c2:c6:b1:44:82:6f:bf:75:2f:42:
                    df:c9:c9:3e:7b:bf:fc:0a:a2:ac:e7:f6:20:f8:81:
                    45:e5:1a:a9:4d:5e:0a:d2:5a:4c:20:4a:9d:89:7f:
                    cb:1c:2e:a0:1e:33:39:26:ce:90:a1:7f:0e:e1:24:
                    84:0c:ed:10:ec:9b:e2:c5:38:6a:8b:88:a6:97:74:
                    bb:30:86:b4:c1:01:fb:a2:d2:40:98:07:03:56:29:
                    8a:43:b6:c3:06:59:20:ab:9c:60:a0:00:80:36:a7:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:AD:29:64:6B:99:DC:88:70:FE:52:E9:9E:BF:29:E0:98:74:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:6d:f4:90:cd:2a:8a:90:4a:14:25:00:84:06:f2:e7:21:
         f2:2e:86:21:73:35:73:e8:94:e5:c6:91:0b:d0:c3:a4:33:9e:
         6e:89:b5:10:bf:26:a0:37:10:34:a4:f3:71:33:2c:c8:ff:dd:
         fd:c6:9e:8a:da:75:97:55:10:a2:ad:4d:81:bb:4a:64:a7:c5:
         e8:8b:b3:2f:38:48:97:e2:40:a2:e3:39:10:c4:d3:e8:10:49:
         28:7b:a1:f1:2d:0e:a3:99:d1:0d:fd:d3:b0:f9:13:fa:18:e3:
         c6:6a:7b:49:69:9a:c8:23:52:d7:ff:10:2c:db:a4:ff:2d:ed:
         ff:d0:93:84:48:12:49:a4:64:06:4b:0c:05:ff:b1:77:f1:46:
         95:bf:b0:24:9c:6c:64:ff:3b:03:be:fe:35:fd:50:de:2d:47:
         8f:75:79:99:05:85:a0:6a:23:f6:a4:cf:1e:14:cc:33:9f:f9:
         38:2a:00:b5:c9:a9:da:6d:0e:6f:53:a7:52:ac:68:19:39:1e:
         3e:e7:6c:53:a2:ed:d6:19:3e:9b:b8:78:75:3d:fb:bf:b9:5e:
         f6:b2:70:87:61:23:98:f4:dd:3f:b7:b2:b5:62:f6:8d:87:ba:
         38:a2:5d:2a:1e:d7:ed:f1:29:ab:9c:bf:bc:cb:f5:9f:8f:5b:
         77:f4:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:16:08 2026 by rpki-client