Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa
File:                     182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa (raw, json)
Hash identifier:          /KYWQVTTcgsce2YVzjexS4L2zmcZFrU73cOUzdEQgWI=
Subject key identifier:   D9:90:C8:77:55:59:3F:D2:07:76:C8:6C:51:B7:E2:B1:F4:F5:9F:E4
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584CA0619A7CB6C49886649EC0C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        130.137.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:9a:7c:b6:c4:98:86:64:9e:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=a9f84253-2067-4e72-a635-b0fe05345d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:64:88:a2:5d:7e:d8:f9:ae:ae:4a:df:bd:
                    15:23:a1:82:f4:dc:fc:57:7b:0d:64:6f:5d:71:cb:
                    39:75:ab:9b:72:42:ab:09:a8:e6:a8:16:44:86:f6:
                    2f:22:9f:b5:c5:50:25:5d:28:29:6b:21:f4:77:16:
                    07:ff:0e:a1:ab:c5:ae:94:21:25:96:26:5e:fd:f2:
                    83:22:70:e6:f7:5c:b8:ad:91:0e:78:76:14:97:b0:
                    92:6d:6b:e6:69:ee:12:08:e3:5a:be:16:57:8a:61:
                    87:5c:28:95:a5:63:c9:e3:e7:68:da:33:fa:fa:95:
                    ec:a4:f0:88:cd:33:cd:31:6a:14:8b:d7:fb:06:f0:
                    79:ae:3f:04:97:6e:92:ad:26:c9:54:b8:5c:b9:93:
                    0c:56:94:aa:e4:3a:f6:84:05:36:17:ce:fc:69:85:
                    a1:17:df:9f:30:76:bc:91:fb:db:07:31:8b:9b:7b:
                    88:3f:59:77:6b:0a:12:20:8a:4a:e4:68:e3:19:53:
                    16:ae:1a:f8:5e:80:9d:f3:fe:5f:d7:ba:ef:d6:5b:
                    bc:2d:45:80:a9:65:88:60:a6:ca:23:7f:25:37:84:
                    6f:8e:a8:ba:17:1d:31:88:7a:5a:d5:8c:af:3e:e5:
                    20:c4:18:37:ee:a9:46:60:d1:76:e1:4c:cd:fb:a3:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:90:C8:77:55:59:3F:D2:07:76:C8:6C:51:B7:E2:B1:F4:F5:9F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/182fd7dd-cedc-3efe-ac76-bc600e52cff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:39:8d:38:41:a1:26:95:59:8e:28:75:cf:20:ea:e3:07:
         22:24:66:5d:15:b3:c5:ea:6b:ef:5f:d2:b4:2e:4a:f5:e7:be:
         9e:72:f1:eb:a9:f4:d9:f6:0e:2c:95:44:50:d0:c4:be:aa:cd:
         29:1c:5e:98:97:e1:23:70:97:9c:e5:fb:6d:ed:14:97:b9:e6:
         2b:11:56:df:ab:24:ca:78:db:63:ef:71:33:86:05:e2:a1:4f:
         0a:d0:99:04:30:ce:73:37:79:c9:23:27:f0:83:28:9f:4d:2a:
         23:ae:ee:bb:31:ee:b8:47:b2:3c:c8:54:a4:58:4f:d6:20:c6:
         80:22:38:e7:34:9f:61:cc:36:49:12:79:02:5c:d8:25:d4:22:
         93:02:4e:13:47:fe:19:0d:0e:fa:50:ce:60:90:37:b5:07:0d:
         40:9b:88:ee:c0:d5:2d:65:ac:62:58:da:7e:fa:08:dc:ca:fd:
         81:de:13:81:8a:84:4b:c4:8d:c4:d4:37:6d:f6:c2:db:d3:b2:
         af:f3:35:08:91:ce:1f:61:a6:5c:23:5f:d9:af:0d:f6:4c:12:
         89:3c:32:e2:7b:da:fb:6c:f0:33:2b:53:f5:c5:00:70:f6:93:
         69:56:1e:1e:5d:84:1d:d7:8d:92:3c:2c:81:6a:74:6b:fb:4e:
         cc:45:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:44 2026 by rpki-client