Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
File:                     237ed539-e7c4-3afc-8222-c0b4292ef524.roa (raw, json)
Hash identifier:          96xJE+1shepAEowLOGOxdMYN0Stn0z2Q3OyrmpbJQfY=
Subject key identifier:   73:80:39:0A:2A:49:7A:8D:94:FF:0B:A0:D6:98:46:55:09:38:59:BC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D7A051E39E90D2AB214010300
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        130.137.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:1e:39:e9:0d:2a:b2:14:01:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=f4564d89-8f06-4e5c-85a5-5bf2f848a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:8e:56:73:c8:73:b8:38:62:25:e7:6a:b0:
                    8f:72:50:dc:ac:6c:58:dc:2c:ec:a3:0d:d1:37:3c:
                    71:25:a7:2a:92:d9:ab:40:91:c9:12:2d:42:dc:e1:
                    cc:51:c8:66:52:32:80:d8:a5:90:d8:aa:9d:61:26:
                    47:8c:00:9d:6a:88:47:0e:f7:a5:9c:8b:95:ba:1e:
                    ed:94:70:f0:39:f4:bd:fd:c5:39:ec:51:77:ff:67:
                    33:17:4c:02:f3:9c:d8:e9:7b:6a:13:ae:ef:16:23:
                    c2:fc:85:c8:21:6a:92:96:4a:cc:b8:5f:bf:08:06:
                    3b:fa:3c:e2:a7:bb:96:92:f3:9f:34:40:1c:29:b3:
                    03:17:55:91:54:77:25:37:45:e9:01:30:2a:dc:19:
                    fc:e4:fd:12:bb:b1:25:a1:9a:52:13:04:de:74:33:
                    ba:9b:8e:f6:60:56:f4:08:73:fe:11:e6:1c:8f:b8:
                    99:79:8f:2a:07:a9:83:be:9b:9d:5c:ca:b5:24:5d:
                    da:e4:ce:ad:c6:23:fb:59:9f:66:66:59:58:0b:bd:
                    73:ed:fe:a7:7c:7a:e0:28:24:13:41:84:06:f5:78:
                    b8:9b:ac:2a:6b:25:78:65:ea:c3:47:c4:94:89:3a:
                    3d:38:a9:2b:9f:cc:35:09:4d:b0:1f:31:bc:5d:64:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:39:0A:2A:49:7A:8D:94:FF:0B:A0:D6:98:46:55:09:38:59:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:f5:52:7f:87:e7:82:da:1b:10:78:7d:a8:88:8d:d4:f7:
         bc:6a:b0:81:fe:9a:3a:a5:41:3d:f7:b9:c2:f9:a2:ad:7d:19:
         42:3d:5c:93:83:e1:ca:c5:88:e8:bb:f2:83:76:24:2d:36:1f:
         2d:ee:fd:9d:e9:1c:6d:dc:e1:ca:33:3d:68:84:45:47:c8:f2:
         e4:5c:9f:1c:c5:35:c8:d7:14:dc:8f:ac:b3:8e:1e:3a:60:2c:
         7d:a3:40:59:5d:94:5e:87:ba:9a:3b:a2:1b:d7:a6:d5:f3:f7:
         55:ce:ff:25:c2:cc:39:85:06:60:91:65:17:17:4f:33:8c:9a:
         92:c1:c3:8b:18:c6:eb:73:da:8e:7c:10:ed:f3:d2:98:88:eb:
         06:5a:05:1f:07:3c:e4:5a:a2:b3:e0:b9:ea:2d:f3:6d:38:29:
         ae:2c:0e:ac:a7:91:4f:e3:d4:df:3d:96:3e:46:ee:1e:22:e4:
         9d:3c:93:dc:1e:f3:b7:77:14:1c:ed:95:5f:52:72:27:01:56:
         53:2a:28:1b:64:15:0e:d9:d8:84:a5:25:d0:56:f3:c7:7c:a8:
         b0:11:55:44:b7:bb:0b:fe:88:e7:c0:46:bb:9c:2f:1d:5d:8e:
         7f:72:56:89:ce:b2:d0:75:c0:29:e9:28:33:9c:50:13:45:21:
         fe:39:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:03 2026 by rpki-client