Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa
File:                     2b802f54-be87-3e85-b569-cf6fbafa55b0.roa (raw, json)
Hash identifier:          /BAwWFU+J1ELeu13kOz4fvdmKk/u7Yx6txFvu23vkTo=
Subject key identifier:   A4:3D:9E:27:2B:F5:E4:FB:C4:BA:1C:D5:82:3F:58:2F:91:49:91:5E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D343A1517C5CFB363EF112D20
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     16509
IP address blocks:        130.137.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:15:17:c5:cf:b3:63:ef:11:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=f9564ea9-0e73-4511-93c2-781017a810fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:23:b3:ce:5b:1d:7b:67:33:00:8b:4e:d5:
                    97:86:73:ff:f5:91:86:68:05:0e:a8:ad:7b:3c:7a:
                    43:c7:0b:90:73:ee:84:90:0d:1b:fd:62:a2:c2:e0:
                    a7:fb:c3:6a:c3:ec:c6:07:61:20:9f:8c:2e:04:a8:
                    85:aa:92:be:c0:c9:a5:52:62:0e:49:a1:09:fd:bc:
                    ae:89:17:15:34:4f:49:e8:05:e5:42:be:b6:bd:68:
                    fc:69:42:5f:72:19:4c:35:dd:ed:58:4c:e8:e2:3e:
                    d9:8b:11:f6:3c:9d:dc:98:92:17:6d:af:c6:32:4a:
                    d9:82:74:62:12:8b:30:3d:e1:3f:0e:f8:fa:85:6d:
                    76:45:15:5e:67:2e:59:09:a9:49:a9:e5:20:fb:06:
                    6f:63:36:a9:bf:45:84:ff:90:ee:df:b3:60:35:d7:
                    ae:85:98:7f:5b:26:cb:7b:31:12:ee:69:6f:df:01:
                    31:bf:06:29:b0:37:f1:f5:7c:b4:df:cc:ba:6b:3d:
                    e1:df:3e:c4:56:71:4a:b2:90:04:f4:0a:a2:19:f0:
                    88:67:35:8a:9f:bc:61:1f:f3:6b:a2:8c:30:18:43:
                    0f:8e:a1:3f:90:e3:35:d5:99:9f:e0:77:28:ee:cd:
                    e6:66:b6:11:64:8e:38:b1:a0:87:4f:74:ea:9e:b4:
                    36:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3D:9E:27:2B:F5:E4:FB:C4:BA:1C:D5:82:3F:58:2F:91:49:91:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:ed:14:74:74:be:37:53:da:48:9d:45:88:12:f8:a6:05:
         04:57:6e:50:5c:4c:91:77:9d:e3:28:c7:12:51:0f:d6:ef:ce:
         ef:af:28:93:4e:ed:51:e5:2b:96:fe:17:62:d2:13:c5:23:41:
         f0:33:b8:e2:a5:2e:91:1b:34:ea:44:ed:11:00:ba:eb:08:c6:
         17:ea:77:f9:2a:ca:80:3d:85:1c:a9:0a:08:8d:d5:43:91:4a:
         5c:22:9e:ee:fb:40:b6:57:97:13:c5:58:36:19:7d:55:e2:3d:
         e5:14:9e:33:db:92:ec:46:ba:9f:50:e9:34:52:f5:06:8d:ed:
         3c:f5:89:3e:cc:16:b3:be:c7:72:7d:aa:40:20:e3:6d:0e:9a:
         8a:be:a5:e5:f0:78:70:b2:54:09:9a:6b:ee:ef:77:6e:2c:5e:
         e9:3e:22:46:d5:b2:09:13:82:ee:23:28:c8:cc:c0:7a:ec:bf:
         9b:fe:f7:2a:70:1d:c5:6d:21:7e:1f:49:6b:64:51:1e:51:30:
         80:27:80:bc:19:0b:b8:41:8f:7a:18:1d:17:5e:79:e4:fa:c3:
         ac:55:a5:79:b8:55:51:98:7d:72:6e:ac:9f:99:df:83:c3:dc:
         fd:6f:c8:dc:ef:41:81:b8:2e:78:02:56:3a:25:9a:1d:cc:f5:
         26:06:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:18 2026 by rpki-client