Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa
File:                     ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa (raw, json)
Hash identifier:          pmB9XoebRCQFutjt4G3eSiis99C/J+cYh6h/L/5C5Mc=
Subject key identifier:   E3:8A:DD:6C:B6:73:DA:A7:FB:CA:3C:28:A2:26:5B:17:60:85:0C:15
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D9325463281F748D1766DB680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        130.137.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:46:32:81:f7:48:d1:76:6d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=8419b24c-34d2-4800-a496-31bb13fb3b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:b2:f8:ee:12:0a:0b:66:15:cc:a2:bb:34:
                    24:40:1d:1f:39:0d:d1:f1:1d:c7:98:b6:68:78:05:
                    92:69:2e:82:af:28:1f:31:77:54:f3:6a:ec:cd:98:
                    83:92:05:58:bb:83:45:eb:d5:6c:0f:75:a5:c0:46:
                    47:22:97:ac:f1:80:bb:dd:5b:1a:8f:a2:3c:99:90:
                    ec:ef:48:fa:69:0b:8f:1e:93:39:bb:5a:bc:c4:15:
                    39:17:09:d0:05:7c:7a:71:72:86:4f:5a:21:27:db:
                    06:34:84:85:bb:0c:9d:c5:b7:bf:4f:5d:60:10:15:
                    11:0f:f8:4f:c1:c2:66:a6:f1:9b:97:36:57:54:00:
                    21:12:fa:3a:60:c7:86:9e:18:9a:f9:1a:c3:ca:47:
                    bf:37:71:19:d9:89:e0:d9:e8:60:e1:09:e7:9f:74:
                    71:9d:03:7a:ac:35:f4:17:e5:89:15:15:7c:ea:7e:
                    d5:2b:11:b3:e8:85:52:83:5a:58:f8:2f:35:5f:e8:
                    e9:95:27:66:1d:df:3c:26:f4:c5:ba:2b:b2:97:72:
                    b8:8d:57:a9:f9:a3:11:46:15:37:00:52:d5:3e:bf:
                    f6:84:10:83:d7:8c:f0:55:59:db:9e:b1:ce:79:90:
                    c1:0f:54:9b:02:a5:70:8f:b0:ae:f4:a1:14:33:77:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:DD:6C:B6:73:DA:A7:FB:CA:3C:28:A2:26:5B:17:60:85:0C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:48:00:6d:fd:6a:0a:14:cf:89:6f:83:0c:ac:c5:9a:31:37:
         f0:b4:8e:d2:f2:55:f0:40:6f:81:8e:29:1f:d9:05:ef:ce:f4:
         09:b3:b0:65:8b:31:28:c1:70:3d:5d:58:a6:01:01:71:ed:47:
         8d:41:f5:da:93:8e:b5:25:6b:1f:6f:45:e9:b6:69:81:f4:6d:
         79:c2:5b:31:6c:ff:c9:7d:ad:b5:5e:7d:4f:7c:29:8a:5e:43:
         81:f0:9c:f4:ea:0b:09:dd:3f:0d:1b:9e:47:2b:11:86:12:f1:
         f6:22:fa:ac:ab:5e:a8:07:ed:4a:3d:f5:4a:32:09:34:7c:9a:
         9e:73:ab:62:ee:10:cb:5b:e4:07:d7:c0:9f:db:26:47:84:b0:
         24:e1:46:b9:f3:8a:40:25:83:b7:e4:44:9b:53:57:08:2b:e0:
         a8:3a:54:b7:cf:6c:6f:71:80:c3:a7:48:ab:c1:6f:23:08:d3:
         a5:61:22:db:8f:6c:65:63:42:35:44:53:13:c4:75:54:48:73:
         33:93:f2:eb:37:ab:d6:44:a8:f7:8c:b1:50:aa:69:8d:a1:34:
         d5:9b:f6:9a:02:21:42:53:3d:bd:09:09:c7:d6:40:69:0b:89:
         62:6b:3f:03:90:93:0a:43:76:ec:dc:73:85:9d:df:31:a4:2f:
         7f:30:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:04 2026 by rpki-client