Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c5b1779-cf42-3f4e-a26a-c8cfb52f4f27.roa
File:                     1c5b1779-cf42-3f4e-a26a-c8cfb52f4f27.roa (raw, json)
Hash identifier:          K3o1E3RtzJzvk+dsqE9QoC8o+Odvvrf+XE53L7WzdIM=
Subject key identifier:   57:64:BD:8B:BF:5B:B6:D4:1C:F5:D7:92:D5:F3:61:39:E8:F4:92:C9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F189795F6B17C9E9D59BBF988
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c5b1779-cf42-3f4e-a26a-c8cfb52f4f27.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        130.137.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:95:f6:b1:7c:9e:9d:59:bb:f9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=173e79f6-498e-4d46-b9d8-1b1242a7ef9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:df:97:95:7f:d2:ab:14:e9:5b:b7:3b:81:
                    13:76:56:e6:82:da:90:b0:8f:04:d1:d5:09:4b:8a:
                    8b:26:b0:0d:c4:10:20:53:ea:f3:98:20:7e:ee:a6:
                    ac:b8:c7:e8:3f:b0:3b:cf:42:90:51:d6:6c:21:18:
                    82:e8:ed:6b:c9:4c:ef:fb:c6:de:4e:3a:1f:5b:a5:
                    77:0e:e6:8d:ef:55:d9:1f:30:fe:e2:f0:49:3d:f6:
                    57:7f:aa:ed:cf:ad:e1:24:0a:e1:dd:db:dc:00:c1:
                    c0:43:77:66:a6:c6:5a:bc:e6:0a:38:ca:70:96:35:
                    d3:24:da:e9:ac:57:12:3c:10:f0:87:d2:f6:f2:c6:
                    8b:13:72:75:24:31:2d:8a:4e:0e:81:29:18:72:c4:
                    e3:06:08:2e:48:7b:34:28:ec:e3:fb:ea:5b:a3:67:
                    62:b5:89:81:37:5d:60:d9:3c:1f:66:5f:55:73:e6:
                    7a:1d:26:b6:77:c1:fe:3c:a1:ab:89:1f:a5:7a:4d:
                    77:a2:57:75:ee:b3:a6:39:dd:ef:c2:c2:fd:23:f0:
                    61:f1:d1:5e:a3:a9:82:35:02:e8:e5:cc:13:45:59:
                    fe:f0:87:21:c4:3b:25:cb:49:0b:b9:05:b4:31:fe:
                    fb:cb:55:b0:51:33:a4:18:15:db:78:46:3f:fe:d9:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:64:BD:8B:BF:5B:B6:D4:1C:F5:D7:92:D5:F3:61:39:E8:F4:92:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c5b1779-cf42-3f4e-a26a-c8cfb52f4f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:49:d6:2e:c5:f8:06:a9:72:30:35:bc:d4:1c:bb:3b:42:
         89:47:e9:38:4e:c0:34:b0:3f:7b:c4:a6:db:28:fd:87:97:3c:
         fb:b6:b8:78:6d:33:32:07:65:ff:9c:63:69:7e:d7:95:40:33:
         bd:32:9c:4d:0f:b0:ce:e2:c8:cc:7d:40:e6:24:76:80:af:1f:
         11:3a:fe:43:02:1b:34:2b:87:64:80:a0:4c:b0:b3:84:8c:90:
         20:ed:9e:65:e2:3e:13:75:70:14:07:32:31:b3:3a:e5:c1:8d:
         3f:05:93:d9:af:20:b8:ec:fb:27:1d:b6:38:a4:fa:6c:20:59:
         46:d8:8d:1d:3f:8f:4c:1b:b1:e2:9c:eb:b6:9b:46:ba:8c:eb:
         0e:a9:59:48:f0:46:d6:df:e5:73:45:99:29:eb:67:0d:fe:e5:
         b7:07:65:4d:8d:e4:82:99:5a:01:e3:dc:3c:74:cf:41:fc:ce:
         57:47:53:5e:2c:6f:21:e9:14:5e:76:14:ba:60:57:89:7b:af:
         2a:13:c5:76:95:90:bb:42:9b:d5:07:3b:2b:2d:87:87:c1:40:
         8e:de:1e:2f:3a:76:f9:73:7b:a6:01:41:f7:7a:78:38:11:30:
         e5:f1:64:b3:65:70:cf:d6:80:57:da:fe:de:30:a8:d7:e8:da:
         ad:05:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:24:08 2026 by rpki-client