Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
File:                     237ed539-e7c4-3afc-8222-c0b4292ef524.roa (raw, json)
Hash identifier:          HOnZGuh+m2/cvkGgp1c+cG+NlSl7EZkhVOEQgQ64NDE=
Subject key identifier:   D7:DE:CC:6D:21:0F:F3:B6:64:DA:69:2C:C4:6C:92:06:DB:81:44:99
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EFCACBEDA530885DF125F3500
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        130.137.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:be:da:53:08:85:df:12:5f:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=338d84f9-427a-4f56-9957-8b3f9e21810f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:90:dc:ee:ed:b5:8b:ae:5e:63:2d:ff:1a:
                    cb:28:00:ff:7d:ca:dc:e9:48:5d:98:ef:6e:6d:79:
                    2b:60:05:53:46:a1:3c:2f:e6:69:a1:5c:69:e8:dd:
                    c3:f9:65:65:25:b1:2e:3c:19:fe:15:a0:21:c8:86:
                    57:eb:e3:a8:bb:d8:d9:bf:da:58:7a:db:45:3b:4a:
                    0c:94:a4:95:cd:4c:7e:bd:d8:fd:e5:75:4b:81:34:
                    ff:93:34:1a:a3:64:29:01:9b:e4:c8:d6:08:43:f8:
                    28:44:77:0a:fb:49:57:25:7e:3a:b9:fe:f6:5d:ea:
                    e3:21:77:50:71:ea:0e:4e:92:d6:7b:da:61:71:33:
                    53:2a:58:82:e9:df:b1:f0:38:86:38:24:7d:65:97:
                    79:8a:b0:80:e0:bb:7e:be:40:b5:eb:3f:55:a5:e3:
                    b5:72:38:d6:1c:29:bd:1b:b9:5e:f9:d0:45:15:37:
                    6d:ad:28:7b:65:d4:57:c6:c6:a5:49:91:13:de:2e:
                    f9:f2:c0:47:f8:e2:ed:3c:43:24:35:26:d1:f2:88:
                    e2:f5:2b:a9:fe:05:95:1f:8d:d4:2c:30:fa:72:77:
                    cb:58:d4:e6:62:c6:a2:c1:ea:56:ec:b0:25:93:64:
                    90:22:58:9f:13:dd:da:51:6b:7c:8f:11:90:c8:9f:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DE:CC:6D:21:0F:F3:B6:64:DA:69:2C:C4:6C:92:06:DB:81:44:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:94:52:7a:38:90:8b:bf:e5:cf:6b:35:b8:c1:e8:27:17:d8:
         4c:46:6c:71:40:f2:4d:2d:0b:2d:a5:86:14:43:5c:24:6d:4c:
         0e:1e:b8:6e:54:1b:5f:8e:d3:d7:f9:5d:39:a7:a7:50:37:aa:
         8f:28:02:fd:6b:53:78:10:16:f7:57:8b:37:99:65:5f:b9:4d:
         f1:7d:52:cf:6c:93:00:53:53:c7:bb:fb:28:98:cd:60:5d:c2:
         4e:fc:5a:5d:03:04:75:d0:b7:b0:76:3a:5e:72:b7:81:ed:f9:
         3c:bc:51:6c:bc:6b:07:ad:74:54:bb:5a:f8:78:a3:7f:13:ec:
         d7:71:c1:e5:07:f3:c6:39:f3:c0:08:23:d2:00:16:2c:32:79:
         6a:17:f3:93:94:45:a8:38:34:cc:64:5d:70:9c:7a:e5:f1:b7:
         4f:af:cb:b7:d8:6c:af:d0:5a:35:c4:3e:17:83:6d:e6:d4:3d:
         03:a6:f8:38:4e:09:dc:e1:bd:62:a1:18:39:3f:3f:a1:70:96:
         a8:d7:f0:7f:4a:cd:fb:70:5d:50:b1:37:ca:d4:af:2b:fd:0f:
         ac:d3:45:07:74:22:13:c5:47:91:f7:ec:09:7e:23:47:3f:21:
         ab:44:d5:5d:2c:74:f5:a1:9c:b1:12:f2:dc:a9:07:5e:52:07:
         ea:5f:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:04:21 2026 by rpki-client