Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0df892c7-2a2e-3a0b-b045-efebdf77e787.roa
File:                     0df892c7-2a2e-3a0b-b045-efebdf77e787.roa (raw, json)
Hash identifier:          215SkpRoqwzfP7nK/sjWTLwbTtz1NBpW0nPFZTerK24=
Subject key identifier:   4A:CB:00:F1:41:46:93:8D:AE:54:B3:4F:BD:1D:9B:99:FF:CB:4F:DC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D7F9A799B691A5270F8655BC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0df892c7-2a2e-3a0b-b045-efebdf77e787.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        130.137.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:79:9b:69:1a:52:70:f8:65:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=59b97a60-75a5-4e1c-91bc-a4d9e846ff42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:79:5b:70:13:f9:a8:37:8b:e5:84:0a:a5:
                    51:00:16:2c:b3:bb:66:4e:25:63:3c:88:84:42:f9:
                    75:90:72:5b:cc:16:79:93:15:0f:9d:dc:d3:d0:9b:
                    70:df:2b:f8:6a:9b:6b:ed:b0:ed:4a:b1:92:3a:12:
                    da:d9:1e:89:72:6a:32:dc:e0:26:2b:40:d4:b7:0e:
                    16:c3:27:70:a6:d1:3f:b0:fb:bf:0c:cc:1c:e0:69:
                    03:ce:86:77:f7:85:c5:8b:6c:4f:46:4b:73:a2:e4:
                    04:c8:5d:4b:46:5a:a8:82:6c:a0:60:6e:e2:d0:eb:
                    9e:dd:2d:e3:4b:78:ef:44:ce:a4:67:09:87:7d:86:
                    3d:49:a0:34:9d:5b:9e:a8:e6:0f:ef:d2:24:29:16:
                    10:41:31:db:5e:11:ff:5b:c5:b1:1c:4b:a8:f5:40:
                    26:21:84:92:fc:b4:0b:cd:73:de:d4:87:d7:27:c2:
                    74:0b:4a:e7:5e:b0:22:f7:60:31:a6:ea:41:ea:fa:
                    79:db:0a:ec:cb:f1:73:94:d3:b5:81:1e:ea:3b:41:
                    03:77:a6:ff:3a:d2:82:c8:c0:56:75:2a:1f:17:bf:
                    05:8d:c9:4c:2e:7d:15:f5:0a:68:52:37:6d:d0:2b:
                    e4:dc:b1:72:b5:b7:83:0d:5d:74:39:29:2a:7a:90:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:00:F1:41:46:93:8D:AE:54:B3:4F:BD:1D:9B:99:FF:CB:4F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0df892c7-2a2e-3a0b-b045-efebdf77e787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:43:9a:9a:a1:80:20:a1:22:0a:07:56:d3:e1:84:ee:b3:
         4f:37:08:6b:8e:70:2f:b0:cf:95:a6:23:1b:7d:d2:0d:f6:e8:
         cd:1f:71:97:71:b4:51:87:26:90:cc:a5:72:8f:0e:c9:d3:ac:
         94:f0:4c:20:23:de:b1:57:79:89:d1:30:1e:99:d3:e3:86:0b:
         10:f4:26:b3:90:13:0e:35:97:4c:c9:46:53:4d:82:1c:35:5c:
         87:41:a5:9f:3b:0d:eb:8d:c7:2a:ba:a7:c9:19:c4:e0:49:5c:
         1a:0a:0c:be:ea:e3:57:f5:a3:16:39:80:b6:cb:d7:0a:ba:66:
         22:ef:9e:05:2e:2f:d6:e7:87:63:e7:39:b9:27:b4:ac:ff:1d:
         b5:23:b6:68:4f:85:4c:ba:75:d7:74:f1:7e:fc:12:bd:c1:be:
         7b:4c:d0:1d:74:4e:84:4b:f7:3d:51:85:c6:4b:24:14:a7:6f:
         e8:18:07:e3:01:cf:7e:a7:b5:6d:bc:72:7e:f2:6f:7c:f4:37:
         c5:9e:b5:91:48:d0:90:44:d2:98:44:c2:47:49:7a:3c:c4:21:
         f7:85:bb:a9:7d:fd:89:28:c3:a5:4c:d9:12:3e:e2:fe:05:36:
         70:e9:13:83:d7:c0:f6:f7:71:b4:84:35:b4:cf:cb:1f:95:a9:
         a5:85:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:32 2026 by rpki-client