Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa
File:                     9e4ca616-100c-338d-90e9-4bee6142ba1f.roa (raw, json)
Hash identifier:          8UId/Z/QhByyl2bh0hDlk1+t8dCialB+SdNyUjRzU6U=
Subject key identifier:   72:C7:60:D1:67:19:C0:C2:30:34:17:08:D2:8F:83:D0:F9:EB:37:3B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5D14A381F2BD0976F481E280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a3:81:f2:bd:09:76:f4:81:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=45875b1e-6d69-4d31-80ef-1ce98746bca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:2d:42:72:e6:da:8d:b3:38:be:fa:e1:e6:
                    fa:c4:dd:5a:a8:fa:e2:e8:69:5b:33:25:66:be:56:
                    cd:ba:7e:9d:91:21:c7:22:29:bd:58:6d:34:1d:d4:
                    5f:b0:16:0e:10:33:42:77:e8:e3:7b:85:23:8b:1d:
                    03:98:47:b6:5d:e1:e1:f3:78:24:59:78:b6:60:17:
                    a7:61:c6:d6:fa:28:25:8d:0e:3c:97:b7:fe:64:f5:
                    bc:14:6c:4a:8b:dc:a7:cb:d2:27:8a:43:99:ee:74:
                    ff:e4:67:a7:7d:5c:74:4a:c8:d4:1c:f9:9c:c4:30:
                    23:b6:d8:b9:7a:8c:79:ea:47:66:b0:66:ee:89:7c:
                    7e:42:13:e1:6c:2c:eb:b1:14:f4:81:a2:c6:b2:68:
                    ad:0a:f6:c8:35:94:ca:73:fd:64:18:9b:57:d0:37:
                    9a:e1:63:b0:80:83:66:96:80:d4:13:c0:8b:45:1a:
                    3c:05:d4:4e:4a:bd:62:1f:9f:ac:b3:7b:f8:89:70:
                    16:d0:32:10:17:4f:e9:37:9f:ec:ac:5e:aa:13:05:
                    b2:18:c9:6c:9b:a8:c5:5e:a5:a1:ef:6f:23:2b:46:
                    70:2a:2c:35:32:3a:3d:ba:54:78:80:df:73:fe:36:
                    c9:a7:89:b7:bb:f1:9d:50:02:b3:ca:c4:63:7a:27:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:60:D1:67:19:C0:C2:30:34:17:08:D2:8F:83:D0:F9:EB:37:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:14:d2:49:30:34:16:33:c4:bb:bb:40:d1:20:f5:b6:6e:
         fc:5d:dd:07:55:a7:cd:0b:6c:11:38:2c:d8:34:8b:b0:22:ea:
         bf:22:2c:1f:f3:03:25:48:29:14:72:b3:b2:69:50:76:9a:3f:
         0f:ed:56:05:a1:a7:f4:0f:11:ef:37:fa:28:38:ac:33:00:01:
         5e:22:b6:f2:63:9b:18:1e:99:c5:2b:bf:da:c2:3f:7f:b8:aa:
         88:af:a3:ec:58:c1:64:83:ed:45:54:89:35:49:3e:84:5b:5e:
         25:45:06:f4:11:e2:7f:e2:c1:0c:c5:5c:13:97:30:bd:da:55:
         51:45:d7:e8:14:95:1a:c0:55:b1:04:cb:74:c4:82:b4:38:1a:
         fe:b5:c8:29:2c:ab:0b:4a:d1:2e:31:a3:4f:4c:d3:80:64:64:
         e7:ed:5b:b6:79:52:8d:0b:76:15:70:20:15:84:0e:c3:34:eb:
         4c:58:10:82:48:bd:1e:df:0d:86:b8:fb:90:d2:84:83:07:a5:
         67:96:de:fe:36:ee:35:5e:65:6e:f1:59:ad:20:c7:3c:84:42:
         10:4c:a6:cd:4f:c5:1a:16:b8:1b:eb:5c:cc:80:54:d6:70:d8:
         f0:07:be:73:30:32:6b:e4:02:3a:b4:f4:6d:9b:4a:dc:d4:08:
         ca:01:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:24 2026 by rpki-client