Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa
File:                     8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa (raw, json)
Hash identifier:          xZJO0AnpWQky6YOj5vMCAWniv991OSiCxlABRcujdag=
Subject key identifier:   F6:90:D5:3B:9A:44:D5:31:F8:E1:D3:04:84:EA:6A:0B:B3:EB:FE:F5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F6F22DFBB28FB66CE37DB87C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:df:bb:28:fb:66:ce:37:db:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=654cabfc-28f4-4c28-af56-c0a0be77907c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:de:dc:08:11:21:c8:c0:a2:2e:92:d9:a2:
                    ad:a7:56:c9:ba:08:31:7e:cf:99:6c:46:2f:4e:53:
                    13:19:32:67:da:7e:58:47:23:f8:ec:06:cb:97:ef:
                    bb:60:f7:02:ce:13:9b:0c:59:e0:8e:13:4e:5f:a9:
                    f7:04:69:31:90:3b:cf:8e:bf:2a:a5:a4:e6:a2:30:
                    a7:3b:21:d2:45:f1:77:1d:8a:c7:b4:85:c0:c8:90:
                    76:2f:5d:f6:e7:62:c4:25:58:d7:91:f9:45:a3:ac:
                    e9:76:6a:2e:66:06:6d:ec:68:6a:74:1a:ad:df:ca:
                    ff:48:a8:6e:68:3e:93:31:01:8a:84:f4:e3:07:29:
                    81:f0:8d:2e:cd:38:00:24:cb:c6:6c:90:c3:17:80:
                    57:94:06:73:24:b8:a3:46:62:e3:6c:37:30:a2:b4:
                    aa:7d:f5:21:6f:5c:01:70:ca:0c:5d:1f:81:2c:15:
                    ba:78:74:1f:09:d7:74:8a:4d:c2:0a:dd:12:31:59:
                    08:4b:3b:fa:58:b9:34:37:80:b2:78:da:61:bd:d2:
                    40:1f:91:c8:a2:3a:6e:ca:19:9e:7a:50:2e:3a:af:
                    64:fb:a2:b6:ed:56:fc:8d:2f:e0:33:ea:b1:0e:5b:
                    6b:d4:a5:02:64:4c:27:c7:8c:1b:aa:e7:16:59:57:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:90:D5:3B:9A:44:D5:31:F8:E1:D3:04:84:EA:6A:0B:B3:EB:FE:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:af:c7:45:a2:92:2f:6f:f5:75:10:1b:78:94:eb:61:be:
         51:8b:49:ea:d8:c3:c9:fd:6c:a0:65:f8:d6:67:35:a6:b1:5d:
         3b:83:df:37:4f:e2:89:06:89:28:a9:1d:ad:d5:6c:2a:cf:f2:
         23:c7:d5:93:a3:06:fa:36:41:11:43:8c:4e:2b:19:9c:0e:e3:
         93:f6:f5:b0:4d:35:90:23:44:f7:4a:ae:59:5b:e1:5e:b3:8d:
         24:ab:b9:b4:39:7d:d2:23:31:e6:ac:06:c4:53:3e:de:f6:0b:
         a0:0d:fa:76:b6:55:b1:fa:e8:24:50:97:82:28:a8:39:f1:e7:
         89:20:e2:7d:91:03:b3:87:c4:df:91:17:4c:0c:21:d3:3a:25:
         37:a2:bf:83:24:91:67:60:f4:a0:ee:00:20:24:de:4c:e2:52:
         b0:f1:a4:b9:f2:17:3f:04:cd:40:51:a2:15:02:96:89:df:2c:
         a4:5e:18:57:54:9a:ad:50:7d:82:b7:65:5d:08:72:a8:5e:7d:
         1d:d5:1b:95:cf:90:7e:1e:e7:6d:48:06:1f:65:2d:69:2b:5b:
         8e:2f:71:ab:39:64:b5:40:a3:6d:9c:07:cc:d7:b4:55:1e:e9:
         d7:6f:63:75:51:90:5e:d4:b6:bf:65:62:8a:72:d0:3f:98:99:
         f7:70:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:42:36 2026 by rpki-client