Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa
File:                     bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa (raw, json)
Hash identifier:          mKAA/xNEAiPyS+9U/aEAcArKPmxNpHGIWvrxYU7ETuM=
Subject key identifier:   F8:B6:8E:21:4B:B0:95:60:6E:C7:35:21:79:8B:3F:3A:BE:2E:B4:0F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5A49F902F4B737CDBC8A76C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f9:02:f4:b7:37:cd:bc:8a:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=cd18be6d-1457-49b8-81df-e079524cd748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:5a:9f:d6:70:51:55:50:65:50:c4:70:89:
                    97:0d:89:4d:37:77:c7:22:75:52:b3:72:ee:5c:65:
                    8e:57:04:74:b5:86:24:87:28:a6:5f:b1:ce:83:45:
                    b7:cb:ec:f3:15:6e:f6:1c:06:80:f2:2e:f8:9b:a6:
                    1b:d9:de:8b:99:54:71:71:4b:34:39:8a:b3:31:ed:
                    84:44:a6:d1:bb:e1:5d:ab:c1:96:bf:3b:d1:31:fb:
                    cb:18:9b:04:43:4e:06:f4:a5:68:cb:d3:dd:b9:5b:
                    d4:16:4a:6b:53:20:9f:7f:3c:99:2e:ec:7b:72:3a:
                    1a:4b:b2:08:e1:4b:1a:57:74:d8:d7:03:ba:a1:75:
                    a7:1d:32:8e:64:f6:55:04:35:06:19:e3:8e:37:90:
                    6d:bb:dc:51:5a:54:1e:d5:36:ac:66:6b:cf:60:59:
                    1a:cd:66:1a:7d:a5:ad:6e:a2:11:64:15:d2:ac:76:
                    f1:58:a6:d5:76:1e:64:5a:f9:83:6a:8d:86:bf:45:
                    6c:5c:a0:f8:82:47:68:94:10:f4:d4:50:e6:a3:d2:
                    d0:1b:46:fa:4d:32:9c:6d:64:e5:5d:9e:1c:92:3d:
                    63:54:dd:3f:70:c9:49:78:e2:74:0e:bd:4c:d6:5a:
                    77:b3:89:7f:33:fa:a6:ea:88:d6:09:d7:20:3f:4c:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:8E:21:4B:B0:95:60:6E:C7:35:21:79:8B:3F:3A:BE:2E:B4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bb272f37-9bd7-39be-befc-2ed7fa3ac9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:23:c2:2f:c9:d2:bb:59:ea:1f:3c:bd:3f:b1:06:28:a1:ea:
         b7:96:de:ed:2c:59:2b:37:c7:fa:8c:62:a2:f0:ad:13:c1:ce:
         2a:89:14:00:b1:9c:41:44:73:1f:22:b4:ee:33:9d:47:9b:d2:
         20:84:7c:a1:d0:97:9e:40:b3:2d:9c:82:a1:ee:9e:38:01:0f:
         f6:c5:5a:58:fc:8d:26:46:a0:03:6a:a3:0d:08:6b:c5:20:be:
         3b:48:5f:98:b3:16:47:30:2f:9d:6b:2c:87:c3:d2:4a:7b:20:
         b4:c3:4f:e9:b9:41:76:11:07:47:ad:0d:40:35:ab:f5:cc:4c:
         4d:05:5a:e7:80:c5:c3:42:d3:f3:ac:85:4a:28:cc:cc:67:58:
         46:31:27:b1:e9:ad:ea:1f:13:b3:63:0b:b6:fd:15:a6:e2:54:
         73:4c:33:92:68:b9:c9:76:af:33:c3:df:ac:0c:ce:54:29:34:
         ee:dd:4f:8a:fa:d7:d1:3c:1c:1c:cd:49:25:53:b9:fd:9e:a3:
         d0:b5:35:8b:0a:2b:30:ba:8f:4a:19:4f:56:02:04:e7:15:fc:
         c6:21:21:27:5d:26:40:56:c2:e4:f0:0e:98:f4:3a:24:85:a3:
         c4:e5:26:86:bb:d0:4a:89:a3:89:2a:da:cf:0a:7a:37:53:b4:
         ae:0f:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:14:21 2026 by rpki-client