Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab175d29-b44d-3d14-80a8-6c3bb32f1655.roa
File:                     ab175d29-b44d-3d14-80a8-6c3bb32f1655.roa (raw, json)
Hash identifier:          FBiGHVgzevuTcWYqeiDXYwo/mt4qAsxK8mHGWVLWNNI=
Subject key identifier:   C8:E5:AE:AF:A7:FD:75:D7:C3:A1:A3:82:2A:B8:7B:A5:33:49:BC:39
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E4AEF39F9EC146610F1ABA700
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab175d29-b44d-3d14-80a8-6c3bb32f1655.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        130.137.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:39:f9:ec:14:66:10:f1:ab:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=10f28ca4-58f7-4622-b6a9-123caf280cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:32:3e:b9:85:58:06:44:74:c5:eb:fb:89:
                    f5:b0:0c:99:fa:66:91:0d:21:7c:f8:95:15:ef:75:
                    9b:14:16:bb:cf:a7:77:75:70:97:f6:85:e1:c4:f8:
                    9c:15:4d:11:07:03:71:6b:1c:14:65:29:d2:6c:0a:
                    c7:6d:56:61:3e:a1:c4:3f:68:9d:3c:10:ea:ae:85:
                    17:4d:42:18:48:a7:bc:00:1d:61:e8:a3:bb:9e:75:
                    1a:41:0a:80:6b:2c:0b:95:64:ea:e2:85:b6:67:81:
                    b4:13:91:b0:3a:15:ea:02:9e:91:26:54:f3:16:da:
                    de:d0:89:d5:74:3a:8d:a2:9b:09:99:32:b3:5a:68:
                    59:4d:4e:10:1a:55:76:34:d8:f5:8b:01:fb:3e:a6:
                    61:a7:eb:f1:1a:93:1c:4e:61:b7:a2:a5:b1:95:26:
                    af:c9:9b:f3:43:33:90:66:49:98:15:b6:2d:79:79:
                    32:f5:ba:d7:ae:10:31:0c:e2:65:bd:96:3f:ba:bf:
                    d2:50:f8:16:72:5b:66:63:9e:7d:ea:7d:e5:8a:aa:
                    c6:f4:ca:c8:2c:ff:e7:b4:3d:a7:ca:22:17:2c:2f:
                    09:5f:9b:c7:fb:6d:88:4f:90:69:d2:cf:31:fd:88:
                    51:43:7a:11:56:08:01:0c:28:a2:b3:aa:79:b4:c0:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:AE:AF:A7:FD:75:D7:C3:A1:A3:82:2A:B8:7B:A5:33:49:BC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab175d29-b44d-3d14-80a8-6c3bb32f1655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:52:cb:69:ed:ff:aa:30:79:ef:0e:06:98:3b:b5:ab:f6:
         a0:92:af:d1:e7:dc:6c:d5:31:e4:03:d7:4f:a5:5c:d0:73:a3:
         91:8d:52:ab:cc:9e:38:0c:45:25:00:5f:e8:1d:ab:74:a0:99:
         da:e1:16:88:30:9b:41:1f:f5:ad:64:ec:1c:5f:f5:15:3a:64:
         a2:eb:20:5c:b9:28:e5:72:60:36:8e:79:76:ae:1a:77:46:ca:
         9f:15:ca:7a:6b:eb:80:48:e4:67:cf:9a:bd:dc:8c:82:e6:eb:
         67:b4:3e:94:56:71:36:79:8e:f6:7f:05:0c:42:75:20:60:30:
         58:7b:d6:76:0a:2f:5c:c9:4e:f8:c3:b6:e2:24:da:d0:c9:e7:
         bd:05:82:f5:eb:60:54:72:76:9f:84:2b:7a:79:ff:ea:2d:84:
         59:c2:49:db:1d:2b:3d:42:c6:0e:0b:3b:e0:1f:41:de:cc:14:
         15:9f:85:b5:be:37:f2:73:42:c8:7a:7b:56:65:05:87:49:e1:
         72:3a:49:c1:73:09:cd:51:7e:63:c1:35:70:fb:58:93:56:99:
         d4:fb:2f:a8:ce:51:11:aa:a9:8f:42:be:07:3e:5a:8b:89:03:
         74:ab:25:f8:51:10:ed:56:b4:73:0d:13:30:97:d0:63:01:70:
         b4:62:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:25 2026 by rpki-client