Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa
File:                     97c9e838-6675-3d04-ac69-51572cb4e303.roa (raw, json)
Hash identifier:          /sZ2nCo/O2Bxb+27Zh0ixGg534oa0S0WV2qP3QKnn8I=
Subject key identifier:   0D:B8:70:9A:EF:3F:27:60:8E:63:1E:A0:F7:10:C8:BA:92:51:EE:D3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EFF77701D4A45C466D5AE3380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     8987
IP address blocks:        130.137.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:70:1d:4a:45:c4:66:d5:ae:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=73005236-a887-46fb-8c91-e13f8f9bf10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:dd:fd:7f:ed:16:b4:c6:ba:c9:b1:16:db:
                    f9:b3:cd:01:42:fc:81:85:df:1a:03:58:89:33:c6:
                    07:f3:59:72:3c:33:26:f3:79:35:91:9e:d8:6a:13:
                    36:ea:1f:76:c7:54:c2:a4:78:4f:4c:66:80:19:80:
                    e7:1b:16:20:47:3a:5f:1e:7b:92:b2:15:ab:f7:4f:
                    76:43:5c:2d:ce:71:ec:8a:f9:a7:64:a4:be:f7:12:
                    9b:10:07:50:03:e4:a8:37:d8:b9:21:69:92:2e:9c:
                    5b:23:de:c0:eb:de:c9:33:47:80:35:5e:35:9a:ae:
                    7f:e1:a3:f2:72:b2:5f:f0:47:48:0e:17:ec:ce:1e:
                    93:b2:2f:db:26:7c:64:ff:38:7e:64:82:bb:fc:0b:
                    c9:65:1b:90:7d:d6:7d:61:ac:47:8a:e8:15:a0:98:
                    ea:4f:f9:42:bf:20:6f:48:de:46:5d:8c:a2:9a:1b:
                    39:47:f5:0b:e4:16:c9:05:3e:72:d3:cb:a0:07:15:
                    89:f1:fc:15:11:10:07:2b:14:c6:65:a0:ed:36:ba:
                    91:6c:26:21:95:65:ef:dd:32:9d:75:49:2d:3f:d6:
                    68:3c:c2:ad:d7:1c:d9:87:bd:ca:d7:31:ad:09:c0:
                    77:21:ca:aa:48:b7:33:cd:1b:3b:23:e5:75:67:4c:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:70:9A:EF:3F:27:60:8E:63:1E:A0:F7:10:C8:BA:92:51:EE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:99:35:c5:4a:86:70:26:11:8f:06:ee:9b:5a:23:c8:97:
         3f:21:89:b4:18:fc:56:a1:27:93:20:34:3e:5d:06:b8:45:64:
         c5:39:2c:44:43:03:2d:05:fc:bf:e4:80:22:35:57:2d:9c:31:
         b4:b4:86:59:b2:00:eb:40:ed:f1:8e:49:dd:a4:9b:96:d4:b0:
         c9:14:82:44:fd:5f:fe:c6:a6:ca:7d:ba:f0:6e:84:12:db:2c:
         f9:4a:c3:ff:bd:f2:f2:d7:fc:36:04:e4:69:b5:67:5b:5c:36:
         68:63:78:7c:35:da:da:89:f2:7d:53:7e:37:f2:ee:83:a9:19:
         6d:e6:47:50:8a:e5:41:cf:72:1d:f7:c4:4f:20:96:82:71:a0:
         d2:91:1b:c2:97:b0:89:88:43:a1:d6:69:15:81:ca:41:2b:d5:
         22:9e:8c:55:88:48:c0:be:00:3e:61:5b:d9:8d:1c:f5:74:b3:
         54:11:49:43:9d:48:f4:ab:6a:68:59:f0:b6:9b:34:e0:4c:a6:
         4b:5b:9a:df:67:14:9b:4a:8d:d5:9e:77:12:63:61:65:c9:35:
         1b:b6:1a:41:d6:3b:02:93:dd:42:77:0d:d6:bf:1c:59:69:18:
         7c:c1:86:32:c1:50:3a:f6:3f:15:00:88:fd:89:5d:fd:e3:09:
         71:96:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 15:21:41 2026 by rpki-client