Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a000bca6-a948-35de-b080-fd4c47226ab6.roa
File:                     a000bca6-a948-35de-b080-fd4c47226ab6.roa (raw, json)
Hash identifier:          ccI7onpetOWaR2yu5fmXMbpwaY0OdJgphctWhItKDFg=
Subject key identifier:   EB:AF:C0:08:F5:6D:E6:C6:48:93:F9:7D:65:7F:BC:34:1F:D9:AC:3D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EFCACBF1CF74C5E22FBA4B280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a000bca6-a948-35de-b080-fd4c47226ab6.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:bf:1c:f7:4c:5e:22:fb:a4:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=797ee489-c72b-4423-bcdd-0989cfa2844b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:f2:48:ad:c4:e5:c6:40:85:e7:8f:bd:ce:
                    3b:72:83:a7:54:c6:5f:5e:3a:2d:e5:ba:bc:43:c3:
                    7b:d4:a5:06:eb:19:07:2e:bc:92:9e:9c:3a:82:3d:
                    ca:be:74:92:b3:7c:89:a5:e2:cc:4d:de:40:45:88:
                    5d:d8:2b:99:92:99:fe:0b:20:ad:51:d9:b1:e5:e2:
                    4b:37:58:01:58:e0:84:00:f8:c0:42:ae:1a:e7:4c:
                    e2:5d:23:2c:97:8e:1e:b9:0b:31:fc:33:8e:99:9d:
                    65:94:e5:63:c5:8f:be:5f:45:0c:b6:6a:9e:6b:18:
                    ec:e5:5a:d7:85:2f:41:40:d8:0c:94:73:90:64:7f:
                    be:50:00:c8:6b:53:d3:f3:b6:e1:64:c2:d8:f9:9e:
                    f3:43:ab:a4:0a:58:a7:5c:c3:d7:af:78:1c:2a:92:
                    9d:eb:37:04:21:5b:55:a4:07:48:0d:60:c0:44:31:
                    ec:9d:22:63:74:dc:2c:86:bc:5e:96:28:ee:a3:e7:
                    a8:a9:87:af:61:da:2c:f7:8d:9f:16:fa:d4:98:c0:
                    39:fc:e5:de:c5:3c:2a:0b:20:8e:bf:82:90:74:1c:
                    30:d0:9a:bd:94:0a:28:1b:d5:00:bc:6d:90:3a:c4:
                    6e:cd:97:7d:e7:88:3a:b4:45:f9:6d:e1:a5:e3:60:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:C0:08:F5:6D:E6:C6:48:93:F9:7D:65:7F:BC:34:1F:D9:AC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a000bca6-a948-35de-b080-fd4c47226ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1b:83:73:4a:87:56:3e:b2:83:1a:06:26:8a:26:96:6c:7e:
         fa:fe:5a:d9:28:e1:6d:53:56:94:57:8d:e7:4d:84:35:dc:b6:
         89:0d:e3:0c:b2:9b:4e:1a:ed:36:2f:7b:59:52:00:9e:4e:3c:
         0b:1e:b2:c9:a9:19:8e:3e:57:c8:43:3d:cf:97:d8:b8:5d:79:
         d9:5b:4d:bb:5c:d5:ab:de:6e:37:40:7c:83:5e:5b:59:ad:8d:
         30:0c:a3:41:db:4a:b4:20:19:d1:d2:25:12:96:c6:d2:21:9b:
         e6:0a:04:f3:0e:e7:ac:d5:1f:d1:1a:46:e2:2b:76:bf:bb:16:
         bf:1e:16:0d:e7:24:48:2d:a9:c5:4f:27:0e:36:6a:99:b3:0e:
         fc:3f:6c:2a:e2:1f:5b:83:34:98:38:38:a0:b9:26:4d:ef:02:
         d2:43:f2:1f:4d:c1:0a:c6:99:b0:eb:a8:26:db:ea:22:1e:c8:
         56:7e:02:3b:ff:ee:b2:cf:b5:d0:5e:d4:ad:dc:ea:90:ed:56:
         a9:e4:d4:f4:5d:92:2e:f4:d0:8d:04:65:c5:a8:c8:11:af:fa:
         e8:8c:1f:77:7d:58:83:b7:6c:f9:1a:ab:ff:1e:c5:57:ff:7d:
         0b:59:ed:f2:d9:9d:17:29:5a:03:3a:f8:51:8f:10:7e:bb:4e:
         e1:17:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:02:37 2026 by rpki-client