Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa
File:                     b25229d3-4780-395b-a983-7680c9a0ca5d.roa (raw, json)
Hash identifier:          Ro/bNl3BTH/B0r8ZZ2zj4UsOvGtNeNbRSyX5BErnoyQ=
Subject key identifier:   0A:AF:2F:7F:ED:1A:0E:30:70:90:11:3C:95:8C:0C:21:9D:08:D7:71
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5FDF51AA388B0C35ABDF9B00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        130.137.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:51:aa:38:8b:0c:35:ab:df:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=5c1389db-3334-4c14-a0b1-926ea66beef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ba:c8:30:4e:83:50:b7:c7:c5:8d:49:8c:b9:
                    2f:8b:76:84:2b:f0:d4:0e:df:6e:a9:95:70:cc:39:
                    7c:7f:cf:e6:53:df:14:95:de:1b:c3:cf:c6:e7:8a:
                    ec:fe:87:a2:dc:a5:de:7f:9f:af:9a:08:df:01:9d:
                    b7:af:b1:75:91:95:e1:c7:61:c5:0a:ee:da:4d:e2:
                    78:2a:e9:73:b3:94:c6:59:2e:00:f1:d0:d0:91:e4:
                    9c:f9:26:90:27:92:6a:09:10:a0:9f:d2:97:1f:80:
                    05:cf:b6:c0:cd:c5:3f:d7:43:6b:4e:52:35:3b:df:
                    76:d1:33:c6:6b:d3:e8:cd:08:40:4c:c1:4c:fa:f5:
                    1a:ae:70:99:11:cb:40:a5:5a:d2:ed:1b:03:6d:65:
                    b6:72:93:da:2b:a7:2c:5a:95:9b:04:76:e1:44:10:
                    52:55:6a:b0:1b:5b:36:d0:00:6c:36:86:2d:2c:da:
                    4c:e5:4f:63:42:2f:69:b8:d9:aa:a9:f3:99:91:50:
                    0d:d0:fb:b3:29:2f:83:fc:9c:e9:f7:43:b2:a5:e3:
                    49:ae:8d:98:53:55:c6:50:8c:c2:0f:6f:94:96:7c:
                    62:d5:de:98:1a:ce:29:b7:a6:da:9d:bd:70:03:3f:
                    2b:05:46:60:f2:e1:6a:73:c8:32:9b:b2:80:33:be:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AF:2F:7F:ED:1A:0E:30:70:90:11:3C:95:8C:0C:21:9D:08:D7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:ec:b8:84:b0:26:5b:db:e3:1e:24:74:65:2b:b5:f1:96:
         93:0c:72:ee:48:14:ab:fa:9c:e7:6b:24:6b:53:89:37:d2:d0:
         9c:06:df:54:da:a4:a3:7d:73:50:95:d3:4f:1c:b5:dd:44:42:
         82:d4:24:12:ac:5d:25:7c:fc:8c:f9:cf:cc:80:fa:36:e2:e4:
         da:14:48:5d:77:29:35:59:2c:94:18:cc:ff:12:dc:a8:a1:b4:
         1e:09:77:42:58:41:97:45:be:a8:f4:42:95:26:22:e5:58:bc:
         24:de:ca:79:4b:9c:00:41:ed:fb:f2:ba:6a:e2:bf:0d:1f:60:
         24:45:46:19:9b:01:f9:07:35:14:08:7e:a3:59:00:fe:3c:91:
         af:b1:2a:d2:f1:c2:3c:3f:cb:c7:ae:3d:9c:7f:2e:69:a9:35:
         c6:db:79:cf:9c:d1:09:7a:51:ec:b4:41:4d:12:58:99:e6:a2:
         85:f5:4f:b3:3f:23:31:db:39:fa:d5:0d:2e:76:fd:2e:fc:0c:
         60:63:26:80:5f:b4:a8:07:5f:7b:78:0f:34:c7:9e:af:33:6e:
         b2:11:28:22:3a:77:d5:73:f1:49:e8:19:c1:25:bb:a2:9f:7d:
         5e:e9:01:4a:97:20:16:fb:07:3f:ec:a8:9b:50:20:b6:35:16:
         2e:f9:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:51 2026 by rpki-client