Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab9d8265-8346-349a-818a-4fbeed382122.roa
File:                     ab9d8265-8346-349a-818a-4fbeed382122.roa (raw, json)
Hash identifier:          nnMBK8j5IdXy/BdGKZJtTlS8F270I4/z9gYPu4zCyWU=
Subject key identifier:   51:BA:50:01:21:EA:1E:38:65:D7:F3:48:98:F9:15:7A:61:E9:21:00
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F6F22DF871F262F8784895580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab9d8265-8346-349a-818a-4fbeed382122.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:df:87:1f:26:2f:87:84:89:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=f870f3c3-6291-4615-a1a2-0c3786c4b62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:95:c7:af:aa:5c:29:bd:33:80:86:01:fb:
                    2a:84:d4:25:78:cf:e7:96:04:ab:c0:3d:cf:ef:16:
                    f4:a6:76:c2:c1:08:f8:a6:b9:70:df:5d:be:53:68:
                    d9:3e:5d:16:f5:69:57:46:e4:6b:94:b8:05:bb:b4:
                    1d:c7:c1:15:f3:96:47:e0:28:4a:23:d1:d3:9c:40:
                    f9:96:66:ce:e6:f3:4e:5e:e6:56:0a:9e:b8:40:09:
                    53:cc:97:35:0f:0b:d5:d9:2f:54:3c:c1:03:5d:5a:
                    92:29:7c:ea:0d:76:77:33:c9:f6:7c:41:dc:26:7f:
                    2f:e8:df:fd:01:08:a4:43:8c:a9:2c:27:ad:fc:a3:
                    ac:19:e9:16:f5:9b:e8:93:f1:31:8f:ff:e2:41:6e:
                    73:26:d2:25:bc:ae:53:b2:0b:90:0e:b7:fc:46:71:
                    51:35:c2:76:e3:54:66:ec:2b:78:f7:07:af:8b:2c:
                    1f:15:ff:5e:8d:52:17:f2:8a:94:77:1c:de:f9:c4:
                    6e:79:04:55:5a:b3:df:e4:fe:30:46:83:19:f9:4c:
                    82:1e:71:b1:15:a6:02:bd:60:26:3c:30:98:cf:1e:
                    d9:74:f4:7a:80:a1:1a:40:ba:3b:b6:f9:9d:39:35:
                    f3:a7:ff:58:70:f1:eb:60:17:ef:3a:ec:5a:38:10:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:50:01:21:EA:1E:38:65:D7:F3:48:98:F9:15:7A:61:E9:21:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ab9d8265-8346-349a-818a-4fbeed382122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:33:ef:a1:a8:b2:4e:6f:b7:3d:7e:f4:b6:b8:8e:4d:d7:57:
         4d:74:e9:14:57:4a:e0:d5:16:bb:d2:3a:3e:f4:13:32:4b:cc:
         de:2e:18:20:c2:d9:ee:ff:c1:17:19:80:1a:67:18:07:a4:1c:
         4e:e7:24:b0:66:02:6d:1f:16:86:88:e2:7d:c4:4a:26:76:18:
         30:cd:93:68:ff:8d:f6:db:d7:bf:36:08:75:48:b5:98:41:b2:
         f8:dd:07:ac:4c:6d:29:14:9f:ad:24:52:5f:41:7e:23:79:46:
         13:bd:75:2f:d8:c2:30:7c:97:1d:9e:4c:33:fa:2d:c3:94:72:
         4a:db:30:19:94:a7:0d:9c:6d:46:4c:55:c1:f5:e5:be:2e:fe:
         48:fb:fd:f2:4c:3c:c5:3b:b9:cd:90:c8:9b:00:b6:4a:02:66:
         3d:c4:cf:df:14:52:bb:34:c7:87:f2:50:a9:47:a1:db:b5:c4:
         1c:de:e0:33:7e:41:50:a6:61:8d:4c:a9:42:85:40:c0:36:35:
         63:a7:f5:a4:ca:7e:26:8d:23:86:1a:ce:1f:b7:62:11:78:50:
         e3:d4:10:c1:20:21:80:5b:47:57:5a:83:9a:00:6d:58:3a:c3:
         f6:95:83:b8:3c:0f:44:a7:ab:40:f6:e8:df:2d:23:5d:52:c8:
         68:70:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:29:35 2026 by rpki-client