Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa
File:                     dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa (raw, json)
Hash identifier:          E9s+guyhVHep95Mvemt6EyHN4AknAdPPYNoFw3tVyvk=
Subject key identifier:   3A:4B:E1:20:55:20:F7:D6:62:A9:E2:11:DB:36:4C:68:0B:80:DE:D8
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5FDF55692EB6D2C6F9252FC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:55:69:2e:b6:d2:c6:f9:25:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=b6026fdc-51c5-4d03-beb3-c6bd7630d0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:18:14:5a:76:57:c4:38:9b:c9:16:19:7b:
                    48:b6:12:3e:3e:d4:3f:8b:d9:12:99:8d:7d:88:e1:
                    42:b2:a9:bc:5f:6c:6d:a2:20:c5:32:f5:a0:53:fe:
                    75:eb:34:a1:4d:b5:6b:16:95:11:da:c9:99:10:33:
                    8e:8f:ea:22:61:fc:df:ae:b8:47:94:93:2b:b7:18:
                    4a:79:a4:44:29:77:59:18:e0:8b:3d:d0:83:84:76:
                    72:5c:26:33:8b:78:16:0b:0a:17:3d:c4:94:65:5b:
                    b5:d2:2b:70:72:ef:fe:73:4e:fb:13:74:ef:57:ef:
                    0e:48:8e:f5:cc:9a:55:e0:fa:ad:bf:b8:40:af:68:
                    17:7e:65:25:f5:a6:d2:b7:ce:dd:3f:41:44:53:6f:
                    ce:a1:d2:60:b7:4b:55:7e:04:16:12:93:7d:99:6c:
                    42:92:2f:4d:a0:be:97:8d:45:af:06:ea:8f:54:ac:
                    81:b9:0a:3d:77:ef:fd:54:3d:b9:84:c0:38:b1:d2:
                    33:39:e5:65:ee:2d:02:0a:00:87:09:08:f8:42:be:
                    40:c3:d6:f8:ad:b0:51:43:e5:07:1b:40:10:9f:20:
                    25:92:11:d2:b2:35:24:9a:1a:0d:03:43:19:00:97:
                    d2:3d:15:a1:18:81:a2:03:a4:8e:17:f9:2f:77:48:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:E1:20:55:20:F7:D6:62:A9:E2:11:DB:36:4C:68:0B:80:DE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbd1f442-8f02-3b03-aca1-fd8404c2cb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:e9:a8:74:34:f2:a8:53:b9:79:bd:0e:73:f3:7c:2a:51:
         93:56:9b:38:6e:0e:36:13:93:ae:8c:3b:55:14:4a:25:f3:04:
         21:02:97:d4:07:e8:af:d4:2a:c6:c2:a0:6d:49:4c:ac:61:a2:
         d2:58:de:bd:78:35:de:e1:95:c1:b2:a2:71:b2:64:4a:ea:86:
         83:f6:4c:cb:8e:76:f8:c9:40:30:b4:e3:11:45:f3:b7:c7:db:
         45:99:b8:bc:52:7f:a6:e6:88:2e:24:56:4a:5b:69:2e:d0:b9:
         28:c9:cf:f2:06:79:9e:64:8a:e4:ed:e8:8d:0a:d8:26:b4:e3:
         69:9a:f7:9e:51:50:c9:f4:60:64:c0:13:14:77:7e:a9:da:51:
         98:40:a0:8d:32:88:88:eb:a6:0a:29:a1:15:8d:59:07:f9:6c:
         e9:a4:5a:a1:cb:81:c1:84:9c:0d:bc:ed:96:e9:61:a7:67:83:
         b1:78:cd:42:dc:c7:61:17:b1:6f:a7:e5:39:1e:6c:0a:dc:30:
         7d:db:bd:e9:b4:6c:cf:6f:e9:24:e9:f6:c0:d3:b0:73:5a:63:
         9a:ef:20:9f:a4:75:b3:88:82:ec:1d:d4:c8:74:bb:65:d4:1e:
         bb:96:8b:7d:6d:87:56:df:5b:ef:38:32:67:66:15:02:98:1e:
         7b:a5:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 22:14:57 2026 by rpki-client