Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa
File:                     a93c0d05-33a8-334f-8413-c6ac78b587f0.roa (raw, json)
Hash identifier:          9tnuqmUf9JqX+tVXqUqNXkpNfNHkSKePxwvIBessRFQ=
Subject key identifier:   15:4D:55:62:00:C7:55:C6:62:07:0A:F1:23:38:95:A5:85:B4:A4:94
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D9325419C4FFA77664274A120
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        130.137.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:41:9c:4f:fa:77:66:42:74:a1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=0fc31392-2848-4ff7-bc0a-0cc4d8f6107a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:95:ce:64:b6:08:56:b1:ec:ef:b2:a8:ed:
                    37:a9:e6:9e:86:be:92:db:eb:40:81:5d:68:00:f6:
                    72:f3:3b:af:1b:c3:d5:6e:7f:30:49:05:35:a9:16:
                    af:11:8a:75:79:94:f3:aa:89:5e:bc:f8:89:c8:30:
                    63:69:f6:ce:b5:e7:d3:fd:39:86:90:3b:c7:32:cd:
                    84:2b:bb:02:a3:df:12:ad:b0:08:17:1f:8c:7c:20:
                    a0:ce:77:af:e1:9c:8c:11:4e:00:94:1a:52:64:9c:
                    21:83:5b:a6:0c:c4:86:d0:3a:53:e3:b7:eb:1a:a9:
                    b8:84:79:ae:42:3e:f4:01:fe:31:56:ec:e9:da:bb:
                    30:b7:11:a5:c8:db:d4:da:a5:4c:de:64:8e:04:8e:
                    bc:c9:73:04:5a:27:90:ae:14:97:f2:57:93:d0:4d:
                    19:87:73:01:d4:ad:4c:69:18:66:a7:2c:a4:23:c3:
                    16:36:59:b3:b0:f4:ed:df:2e:d3:54:64:8f:88:b3:
                    4e:a9:33:72:8b:58:5c:bd:1e:98:1d:3d:f4:60:38:
                    37:31:18:9f:af:6b:30:f9:3e:74:30:d7:93:33:a7:
                    18:43:81:ba:9c:58:30:38:03:89:ec:e8:e4:ba:bc:
                    df:fe:6f:d4:f8:d2:80:ea:7e:a1:d4:2a:83:80:b3:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4D:55:62:00:C7:55:C6:62:07:0A:F1:23:38:95:A5:85:B4:A4:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a93c0d05-33a8-334f-8413-c6ac78b587f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:ed:33:39:95:b1:e3:03:5b:ac:75:87:4d:73:8f:b0:1a:
         de:19:6f:f8:f8:34:d5:fb:a0:9e:f7:d3:ec:ee:70:de:0e:6d:
         15:39:e7:2d:54:9f:31:98:0e:8b:d2:68:b3:86:0c:5b:b4:1d:
         4a:38:97:56:be:98:01:bd:6c:a4:6d:13:7a:8f:ca:21:b3:58:
         1c:0d:c6:b0:7d:05:cc:8b:00:2d:51:fa:49:db:37:f2:7e:48:
         2e:cd:6c:5d:40:e0:fc:fb:4c:57:80:d9:9b:2e:5e:8d:b2:a7:
         5f:ae:c2:52:98:98:f7:36:a0:64:7f:4f:34:52:5a:67:f1:d9:
         e3:6d:4b:3f:a8:72:81:8b:3b:34:62:fd:e1:aa:7a:8b:b9:d1:
         a9:43:69:7c:57:8a:6a:66:c3:9f:53:84:62:b7:a7:ba:76:98:
         82:76:db:df:fc:15:49:41:26:43:68:6c:9f:10:ba:6a:80:61:
         f4:17:fe:fb:1a:f8:2f:9b:64:cd:a9:3c:ac:b3:64:dd:16:b9:
         4e:a6:80:21:24:65:51:6c:2f:09:7f:36:af:a0:ea:8a:46:eb:
         8d:94:70:7f:08:43:29:70:f0:47:02:ab:2c:74:8f:52:00:e3:
         fb:ba:82:49:fa:e3:aa:6c:c8:79:5e:51:e0:c7:3b:97:59:4a:
         f5:77:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:12:46 2026 by rpki-client