Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa
File:                     4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa (raw, json)
Hash identifier:          p/ZJ63GzA4d7HoVxn3V/YrDFPU6E50J4ZlPZn0o0Op4=
Subject key identifier:   6B:29:33:C2:CE:EC:A9:94:6B:75:FB:8A:21:05:12:5A:21:43:0F:F7
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E94EA5084B787CCF077DBA380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        130.137.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:50:84:b7:87:cc:f0:77:db:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=d8dee484-c774-4125-98b0-95e9ba1ac8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:1a:85:6d:f4:c0:f8:30:12:ea:e5:c5:e6:
                    7f:eb:a9:d3:fb:9b:8e:b0:30:51:4e:c4:19:02:fc:
                    be:6b:75:3b:96:72:1a:a0:ca:0b:fe:cd:1b:b0:6d:
                    23:fd:8d:e4:e4:84:38:ca:cd:90:e5:74:85:65:45:
                    63:8d:ee:5a:cf:88:57:e2:ba:22:47:dc:a9:11:b1:
                    fb:42:f3:7e:a0:1b:9c:0d:f9:68:32:aa:d4:cd:9d:
                    37:6d:84:24:e8:04:64:a5:12:60:7f:df:56:04:41:
                    6e:2d:18:2d:dd:e4:a2:27:cf:9c:b9:11:73:06:db:
                    e4:cf:97:66:b4:c3:53:8a:e9:de:b4:a6:9d:c4:4f:
                    5f:44:38:5d:31:bf:fe:ba:15:c7:5c:8c:5f:5d:9e:
                    6d:22:88:98:a8:0f:57:00:8b:8e:22:d3:46:d9:d3:
                    59:a6:8a:69:ac:5b:c1:39:2a:ab:49:23:ef:66:08:
                    7f:94:33:dd:a5:0d:d8:40:1e:b9:37:6e:43:8a:96:
                    f5:f6:4b:f6:f8:5a:90:17:0b:1f:62:62:c8:a7:55:
                    8d:43:25:cd:e4:fc:3d:5f:92:82:05:c4:07:ad:29:
                    15:bb:4d:3b:75:f0:ce:f6:da:aa:1b:a4:ae:c6:c0:
                    94:9b:e1:6a:ff:12:b1:ae:a8:ff:71:77:91:28:24:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:29:33:C2:CE:EC:A9:94:6B:75:FB:8A:21:05:12:5A:21:43:0F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:da:21:ec:46:4b:43:9a:f4:d6:94:94:64:4e:d6:ab:c9:
         ca:da:f7:c1:0b:54:11:40:44:f6:bd:c6:1f:13:c5:a2:25:52:
         fd:84:09:6b:2d:23:57:53:87:34:b1:0b:bb:82:64:3a:8d:c5:
         a3:cd:ed:d9:76:11:3e:bb:69:3b:09:85:e4:2c:43:6a:e5:71:
         13:2a:9b:32:29:ac:95:98:d6:48:1b:36:6f:5b:e4:c2:8d:33:
         b5:ce:52:62:24:84:de:8a:b5:7d:26:c0:45:75:3f:ac:74:e6:
         94:af:f9:a2:40:4c:54:16:0a:6d:d7:ca:48:2c:ee:09:d0:90:
         6b:67:7c:f2:fb:95:4a:be:1b:db:2d:b9:c9:e1:b7:17:e9:a8:
         c8:14:66:df:02:57:a7:75:1d:c9:5a:46:1b:1a:69:83:7f:b9:
         9d:d2:ed:86:eb:e2:9d:8a:56:ca:e6:69:64:06:f2:39:f1:fa:
         85:3d:46:0d:7e:52:15:f4:fc:66:37:db:35:8f:df:10:fd:62:
         80:ca:24:95:2a:58:b1:f8:40:c8:3e:2b:50:c4:df:5d:64:41:
         83:7a:b1:c9:2e:ff:63:8b:32:48:99:b0:16:78:21:a6:4f:a9:
         81:f0:43:0b:c6:72:e5:4f:cc:d1:58:a7:aa:17:4d:f3:8c:7c:
         72:f9:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:58 2026 by rpki-client