Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa
File:                     a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa (raw, json)
Hash identifier:          NMlxHsKJ6JG8ewtctX4QLsaTBWF+9cloibndT1XoAPE=
Subject key identifier:   A8:27:3D:35:E1:CA:D3:68:6C:34:6E:D1:4E:77:6F:0A:25:1A:3A:0C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F02421B6704B629E03DEDADA0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     8987
IP address blocks:        130.137.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1b:67:04:b6:29:e0:3d:ed:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=ce054699-4a5b-4bff-ae25-be6db71125bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:b0:4b:44:86:e1:63:5c:39:73:2e:a9:dd:
                    d0:b6:3c:7a:96:1d:83:62:4f:a7:2a:e5:7c:5f:24:
                    82:6e:f0:b5:97:e2:63:22:50:a4:a9:41:15:a7:51:
                    2d:27:de:1f:5b:03:0b:26:df:37:3a:41:38:81:42:
                    0f:7b:ea:7f:74:32:db:57:8b:4b:e4:39:00:e1:12:
                    26:dc:24:b5:1e:62:dd:6d:51:4b:5b:4d:4d:be:9a:
                    b8:4e:5c:75:39:e2:f8:14:a5:a4:57:be:8e:dd:fb:
                    3c:73:67:33:61:8e:e9:23:7a:e0:c0:7f:6b:d3:3c:
                    0c:bb:90:ed:bb:bd:3c:b4:e5:5c:a2:7b:1f:1a:a9:
                    52:23:b3:5b:0f:c9:1a:a4:ad:dd:0f:a3:fb:2b:22:
                    47:e9:6b:98:0a:fc:30:e7:72:08:26:d8:14:24:bf:
                    55:e7:02:42:82:03:3d:51:2b:b3:ea:f7:30:59:e3:
                    61:ea:36:b9:db:eb:67:f1:c5:c7:79:8a:d0:6e:62:
                    41:81:c6:6b:f4:3e:d6:3a:30:8a:d2:75:a0:bf:db:
                    92:51:76:3d:86:f8:63:83:6c:88:3d:52:4c:16:8e:
                    f4:65:e9:c3:71:78:ae:9b:3f:90:3c:85:d0:ca:8a:
                    09:28:7c:48:fd:ff:5b:da:08:42:b4:fc:f9:a8:8f:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:3D:35:E1:CA:D3:68:6C:34:6E:D1:4E:77:6F:0A:25:1A:3A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a20c9daa-f2a6-3de9-8918-9a88d9c7ef76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:d2:24:61:b8:2a:53:26:ab:3b:99:00:35:c0:f9:cc:fc:
         35:59:5b:7b:33:85:62:f9:1c:49:17:c6:8c:55:1f:2c:16:95:
         1f:87:50:dd:eb:ee:1a:64:07:8e:b8:fd:90:9b:3e:ee:14:82:
         29:a8:a4:87:97:57:23:c7:45:e9:3c:d3:63:f3:e0:1d:10:db:
         5f:5e:ff:5d:8e:9d:14:a6:dd:1a:c8:e0:8c:90:77:9c:4d:0b:
         c9:2b:06:40:27:60:47:09:87:ec:62:a4:d6:0f:32:9c:0e:51:
         91:90:78:cb:e6:c4:e6:95:94:1b:2e:e4:d3:a5:49:be:d1:32:
         be:ef:bc:17:bb:8a:ef:6d:34:ce:36:ec:c9:c3:e9:7e:76:62:
         7d:db:6e:e3:0e:3d:2e:21:76:07:c4:34:f7:7e:1f:01:76:fa:
         41:f2:f5:a5:08:ec:c9:a2:bd:32:46:e2:f7:68:41:f6:68:b6:
         ed:c9:88:eb:d9:d8:10:69:df:d5:af:aa:ef:df:b7:0b:99:a0:
         1b:41:c2:b4:a9:e8:c3:66:6c:b6:dc:96:ab:c5:a0:0c:fe:e4:
         dd:bb:4f:4a:a6:94:1b:01:7b:84:cd:4b:f9:15:5f:7c:5f:86:
         59:f9:3b:3b:08:05:18:22:c8:88:7d:08:9b:ab:ab:b8:dc:e9:
         22:1f:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 04:57:38 2026 by rpki-client