Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/82506834-a198-3770-ac08-5f92376ea85c.roa
File:                     82506834-a198-3770-ac08-5f92376ea85c.roa (raw, json)
Hash identifier:          EXfCBSCVxOhH6l9Mk/52h9JlBXnqIE8FPdWBSk0jwvA=
Subject key identifier:   61:41:D6:5C:69:AC:19:57:6B:7A:B0:77:00:FF:1B:C5:BA:C6:4B:B8
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F06723FDD010BBE087E2415C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/82506834-a198-3770-ac08-5f92376ea85c.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        130.137.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3f:dd:01:0b:be:08:7e:24:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=352ccf9b-a812-47c6-92d8-cac5789d0421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:e3:31:4a:c0:8a:b7:54:98:39:a6:94:fc:
                    0e:dc:5e:dc:fe:ed:49:cb:3a:e8:52:c1:12:2c:5b:
                    43:cf:de:44:67:49:63:fb:01:82:d5:f5:86:d6:f7:
                    40:b0:cf:eb:39:be:cf:de:c6:c1:75:57:13:99:e1:
                    e8:e9:7f:a8:19:79:a2:09:4c:b8:df:9e:df:17:a3:
                    81:8a:22:ee:81:e9:7b:b5:87:fc:af:2e:f2:48:d2:
                    be:ca:66:6c:9b:35:4d:79:07:1e:7b:0c:8b:8f:fc:
                    a8:0d:b6:ec:bd:b1:a4:80:ae:8b:dc:1c:fb:bb:18:
                    0d:dd:2e:b2:9b:95:5a:cb:72:4e:4f:35:64:2e:9b:
                    ba:fe:9e:4b:15:7a:ac:1c:6c:46:26:19:22:c2:2d:
                    c1:85:5f:6e:4d:d0:f2:c2:a2:11:c3:54:e4:85:d0:
                    38:f6:64:f3:c2:04:fb:bb:58:4e:ec:97:fc:44:c9:
                    58:2e:cc:c3:23:b7:79:47:bb:50:15:fd:ec:c3:06:
                    2f:9f:70:e1:95:24:e5:60:cd:77:51:0a:a0:d8:36:
                    53:ca:d5:e4:09:6d:df:d8:11:48:e5:c7:7a:0d:4e:
                    87:f2:a3:32:c4:59:8d:8d:a9:35:eb:0e:5d:ee:57:
                    0f:b4:59:8d:02:5e:36:3b:54:95:db:fe:12:86:67:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:D6:5C:69:AC:19:57:6B:7A:B0:77:00:FF:1B:C5:BA:C6:4B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/82506834-a198-3770-ac08-5f92376ea85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:c0:a0:23:92:58:74:78:11:8e:06:40:9b:fd:20:5e:79:
         24:eb:4a:6c:75:10:61:22:ee:9e:38:da:cd:31:89:07:ac:3e:
         d1:64:93:21:1c:cc:6c:c5:c3:0e:ce:d1:66:3b:4c:09:6e:51:
         26:11:38:cb:7f:06:b7:d5:a0:13:06:28:ec:43:42:4c:1c:ec:
         36:16:25:a3:45:6c:80:6b:c7:6a:c5:62:be:09:fa:0a:6a:f3:
         d0:81:cd:dc:78:73:96:2b:b7:f0:a1:a5:dc:15:25:e8:f2:0a:
         6e:f7:ad:cd:8a:7f:1c:ab:04:8c:12:7f:ad:12:5b:0d:ef:da:
         80:d7:96:ec:4a:a9:7d:9b:4f:89:e3:40:8b:25:ab:c4:cc:43:
         66:46:0f:28:83:c0:6d:4d:51:c1:e7:55:4a:10:50:7f:5c:40:
         a9:e3:cd:ad:4d:55:d8:53:eb:d3:7a:4c:0f:d4:c0:fe:43:67:
         16:9c:7d:7e:ce:0c:d6:66:20:5e:da:d0:8e:6f:98:84:af:da:
         c5:d2:a0:91:c2:27:78:2f:c2:39:e9:a8:83:5e:1f:b0:d8:01:
         1c:af:0d:3b:79:65:70:2f:73:28:71:41:18:d9:cd:76:64:57:
         8b:51:5d:69:c0:cd:0d:8e:8d:92:89:2d:03:a6:3e:2c:d1:8b:
         b8:e4:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:33:52 2026 by rpki-client