Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6515976-250b-3c68-9dc0-421a34035f7d.roa
File:                     d6515976-250b-3c68-9dc0-421a34035f7d.roa (raw, json)
Hash identifier:          crqxv2nXiQzRY6gULOkOF84jM6sDyFYj0vs93zGDx8M=
Subject key identifier:   EC:B8:14:49:54:4C:63:68:B7:F3:71:46:ED:2E:55:2A:FE:2A:FF:22
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5FDF5150418E2DACD2507680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6515976-250b-3c68-9dc0-421a34035f7d.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:51:50:41:8e:2d:ac:d2:50:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=b37ea3f3-45b8-43dd-add6-eaf5e3416a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:a9:af:70:e6:44:0c:a1:6a:a9:52:d9:e5:
                    65:8c:3c:f9:c5:2b:d8:01:21:1d:dc:f0:42:ae:bb:
                    9c:88:fa:dc:33:75:19:27:bb:36:f9:dd:5f:e7:cb:
                    9a:af:ba:ad:29:f7:6c:00:f5:ae:e9:df:ba:42:06:
                    b5:47:e4:28:53:43:b0:af:af:07:f1:c9:b8:3e:c0:
                    ac:fd:40:f5:b2:b8:99:2d:cd:6c:54:38:88:03:23:
                    eb:e4:7b:e5:12:0f:e3:37:2b:a2:f4:0c:3c:45:0a:
                    05:f2:41:9a:1f:0e:39:06:15:3d:65:78:50:62:b6:
                    77:79:85:26:f2:e1:4f:15:64:13:9a:67:6e:49:49:
                    10:b4:af:d0:08:f5:e3:3f:16:52:ea:05:62:fb:2c:
                    c0:22:57:99:b3:a5:e4:fa:36:27:c9:ca:67:1d:3e:
                    bf:65:5d:88:3c:60:04:2e:13:1d:56:5f:a0:96:52:
                    e5:1a:1a:3f:2d:28:05:e8:7b:a8:f1:16:f1:5b:59:
                    ae:78:d3:50:f4:1c:74:06:a7:9b:b6:eb:18:40:a2:
                    be:83:8f:f2:c3:59:71:3b:b6:6f:fc:37:dc:96:b0:
                    fc:61:4e:42:b0:e0:b5:98:e4:6c:d9:d9:4b:27:c6:
                    97:a3:90:a2:6f:2e:9c:5e:b2:74:b0:6d:9d:8b:68:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B8:14:49:54:4C:63:68:B7:F3:71:46:ED:2E:55:2A:FE:2A:FF:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6515976-250b-3c68-9dc0-421a34035f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:84:5d:35:20:df:bc:b7:ef:f2:0e:2e:b1:a9:cd:8a:25:7c:
         d5:95:d7:5b:d0:b2:a1:9f:22:37:07:e0:b8:21:87:71:87:d6:
         cd:94:65:eb:04:ca:57:08:45:4e:c3:34:cd:f1:de:b8:73:92:
         a3:06:f4:31:0f:02:dc:58:65:5f:90:8d:1e:b3:45:ee:f3:4a:
         bb:90:f9:5e:61:ca:ef:3d:72:b6:2f:f3:30:5d:6e:9d:fd:70:
         14:ae:09:28:1d:97:e9:8a:1c:99:b8:83:91:26:93:d7:c1:e5:
         2c:2d:43:07:31:5f:cd:39:82:4b:af:da:77:61:22:a1:82:71:
         54:14:5f:1e:20:31:da:c5:54:bb:67:28:85:c9:5e:35:1e:46:
         a5:fd:b3:a5:5d:7f:9c:e5:89:8e:3a:88:f0:d8:82:b0:ad:12:
         3f:3a:9e:db:ff:a7:75:63:e2:9f:66:32:35:91:9c:67:6f:2e:
         f0:b5:45:1b:0f:be:64:c2:f0:cf:68:c1:f7:0a:a5:50:8f:b1:
         30:c2:10:11:b3:9e:fa:6e:d6:9b:d3:80:d0:2b:db:87:ff:be:
         51:57:5a:18:da:67:85:49:6f:28:2b:5f:ed:e0:fe:9e:57:b8:
         71:46:7d:24:3f:28:d9:8a:60:5c:06:be:0e:be:05:51:33:20:
         06:22:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:50 2026 by rpki-client