Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c49a0dd9-5984-3939-bb45-6ce8335da97a.roa
File:                     c49a0dd9-5984-3939-bb45-6ce8335da97a.roa (raw, json)
Hash identifier:          cUXcMI8qYMQDFSQAshOE71dDecmgCjDz9X09XH3X9jI=
Subject key identifier:   68:AB:C1:0A:9D:D8:63:E0:CF:C9:F4:43:61:D9:3E:B3:C9:8D:EF:EA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E6F3A1EEA6A805A18E72D0A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c49a0dd9-5984-3939-bb45-6ce8335da97a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     8987
IP address blocks:        130.137.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1e:ea:6a:80:5a:18:e7:2d:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8bab8ec2-7968-459c-b6ba-ed100307c442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:79:57:9f:1b:46:95:2e:71:f9:3f:fc:2e:
                    c1:a5:0f:1c:31:85:27:74:15:7b:5a:56:2f:b9:5f:
                    f9:7b:f4:9c:64:57:65:20:e3:53:02:18:c0:51:25:
                    f4:69:27:02:f2:1b:76:6e:bf:9f:33:5d:f8:d6:6f:
                    6b:17:db:08:8d:f9:e9:6b:9c:7c:eb:b1:29:a2:f3:
                    04:00:2e:11:a1:b4:63:c1:4f:0c:1e:80:27:58:7d:
                    5f:c1:52:a2:45:35:93:ff:83:35:37:47:fc:95:70:
                    ba:4e:b6:6c:d1:dc:a3:ca:47:a5:cb:af:fb:2c:de:
                    04:bc:4e:12:65:39:6b:7b:2d:e6:3e:25:9d:0a:e7:
                    d0:37:fd:b4:5b:7f:93:7c:6f:15:b0:4d:3b:dc:df:
                    1c:71:d6:2f:e8:41:77:b4:65:4e:25:99:04:d5:9a:
                    5a:1b:d1:40:f7:84:ce:8e:a6:b7:c9:d2:e5:47:c0:
                    2c:be:9b:37:71:9d:b7:03:68:3d:e4:d0:a6:d1:88:
                    0c:ed:0c:05:77:9d:e5:f7:a8:9a:6f:72:57:62:ad:
                    64:34:15:82:58:b0:9b:ce:f0:04:a0:56:83:1c:3e:
                    8d:ed:e1:51:c6:10:f9:ca:d4:b9:5c:af:d4:ba:31:
                    43:73:cf:d1:d2:eb:22:be:6b:77:ea:ed:8e:87:42:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AB:C1:0A:9D:D8:63:E0:CF:C9:F4:43:61:D9:3E:B3:C9:8D:EF:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c49a0dd9-5984-3939-bb45-6ce8335da97a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:94:16:6c:0f:92:2d:2d:0e:4c:cc:ab:a7:8b:b4:8a:75:1f:
         0b:a8:6c:7d:c3:8d:5a:03:29:b8:22:d7:8c:5f:b3:7c:c9:56:
         6e:ad:de:ab:86:a4:81:c5:16:90:16:78:83:92:3f:b3:e1:8f:
         24:6a:11:dc:ef:cd:49:35:e4:da:52:d5:aa:20:4c:9f:b3:36:
         89:62:06:6e:06:3b:35:65:15:ae:c1:74:d5:b5:c4:02:91:4e:
         27:20:14:61:c1:2c:70:d0:2a:24:89:1b:64:22:43:03:c4:c5:
         61:0d:35:f2:27:f8:53:83:0e:da:b9:de:db:d5:f2:5d:0d:e5:
         cb:e1:c6:80:75:1b:95:ef:0d:27:60:21:b4:3b:6e:f2:e1:46:
         5b:79:a8:b2:91:c3:b3:86:a3:5b:76:b2:2b:88:2b:82:e5:64:
         77:e8:5d:b7:da:72:cf:4c:e5:39:dd:86:76:8e:02:f2:85:2c:
         20:ba:cd:85:3f:7c:07:22:fd:80:58:32:4b:9b:44:77:e7:94:
         31:48:a1:4f:94:18:17:6b:25:03:4d:8f:b2:84:f7:f8:2d:f6:
         6d:8e:6a:89:3e:36:f5:f5:21:6d:6c:28:8a:74:97:95:6b:ed:
         f0:41:b7:b1:51:55:85:88:7f:91:24:7d:98:a6:d1:0f:47:8d:
         bb:07:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:27:50 2026 by rpki-client