Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
File:                     e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa (raw, json)
Hash identifier:          ATxB0wuj6xhBLw1v2A7KgKfU8uji5tnfqhz84yrzU9I=
Subject key identifier:   B8:35:F8:72:12:57:83:8A:BC:E1:3C:FF:B1:9B:99:C6:2B:02:35:4B
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F15CCE84DD636914BC7C74200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     8987
IP address blocks:        130.137.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e8:4d:d6:36:91:4b:c7:c7:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=e31bbc47-790b-48d6-874e-3d32ab9e3e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:da:4b:e6:b0:7f:d0:58:2d:da:3d:8d:00:
                    b8:c4:a4:46:17:69:d6:8b:76:66:83:54:4f:0a:3c:
                    80:d9:34:3e:16:8e:3e:12:6f:b4:c2:3c:8c:cd:54:
                    3f:51:e8:4c:e3:6f:c6:40:60:59:be:6a:23:e3:04:
                    ca:be:99:aa:cf:07:a7:41:a2:9f:26:ef:1c:8e:04:
                    a6:52:65:c5:a7:fc:0f:1b:27:ba:58:4a:5b:f9:ee:
                    38:1c:27:97:77:60:fd:60:3a:a5:77:56:db:e7:37:
                    46:12:fe:5f:2a:e8:16:88:2a:7a:17:41:14:65:dc:
                    03:81:a6:f2:b5:34:d3:46:d5:33:4c:64:80:5c:2f:
                    af:32:68:1d:16:95:20:03:0d:f1:0a:0f:c1:9d:86:
                    c8:6e:8f:92:68:c2:96:77:ff:ee:0a:f3:87:7b:6b:
                    b4:c9:b2:ad:54:7c:7c:9a:c5:af:80:12:af:39:f3:
                    91:c7:60:9e:6e:88:c1:23:06:62:ed:6f:0b:c0:30:
                    c5:7b:12:f7:ba:e8:c9:89:18:31:5a:63:5b:f6:10:
                    81:bd:55:ac:6c:25:b1:ea:f4:4e:2d:f2:c6:bd:18:
                    c7:1d:39:0e:fb:ae:83:95:e9:e2:bd:a2:b7:3a:4e:
                    1d:d2:cc:d7:f3:19:60:c2:c5:de:ed:dc:3f:cb:40:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:35:F8:72:12:57:83:8A:BC:E1:3C:FF:B1:9B:99:C6:2B:02:35:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e623b313-86a5-380c-bbf0-9a2c7434dc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:71:f2:26:ef:6a:1e:39:c8:2f:a7:d0:1f:9c:c9:3c:52:
         94:02:c4:90:8a:26:d1:b1:0e:e4:88:6e:3a:a3:4c:c7:d2:32:
         25:aa:51:29:81:6c:a4:47:66:8a:c5:5e:f3:e5:79:05:36:ce:
         dc:91:d2:5c:39:f4:73:ac:ad:1c:74:9a:d5:44:1f:e3:4e:6f:
         a8:07:e3:d7:38:31:19:5a:97:20:37:32:bc:48:1a:f0:4b:69:
         4e:a7:31:2c:65:49:e5:f8:ad:1c:8d:b4:63:58:67:eb:c9:1e:
         88:e4:77:28:34:b6:62:a9:28:4c:53:d0:c8:cf:83:ef:88:65:
         27:5d:c7:f9:05:54:08:d4:23:0a:40:f1:9c:10:a8:a6:aa:ac:
         41:5e:29:96:58:b2:1c:00:67:ed:2a:cb:d6:5d:ab:0e:8d:46:
         1e:75:ce:12:57:7b:81:b8:f9:7a:3a:0a:71:db:fb:8e:1c:3f:
         a0:b8:70:7f:4b:8c:50:25:45:00:2f:cc:02:99:c1:7c:e4:ee:
         ef:a9:8e:6b:ba:a2:b4:8c:5f:23:59:a4:92:71:35:8d:76:4c:
         31:48:e1:00:05:cf:45:e7:1c:44:6e:ba:2f:80:a9:50:79:3d:
         dc:64:9d:c8:6f:8a:0d:d8:af:d2:68:f2:ae:90:8f:e1:8c:fc:
         92:4e:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 21:35:11 2026 by rpki-client