Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
File:                     237ed539-e7c4-3afc-8222-c0b4292ef524.roa (raw, json)
Hash identifier:          KK7guAzxzQOmjL9F8KQsNCeILl2M7C2biMPCmCqc6Pg=
Subject key identifier:   AD:BE:00:67:D6:B1:99:2F:1C:AE:39:99:67:18:96:F1:5F:AD:07:94
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F9E98704A1AC8A5E23842B100
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        130.137.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:70:4a:1a:c8:a5:e2:38:42:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=ed507f6c-869d-41c7-92a3-9c0f9a3677b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e4:58:7a:c5:07:36:6e:9c:57:f6:a5:20:f8:
                    2b:ed:d6:e6:a3:85:0f:ec:6f:eb:5b:55:20:a1:8a:
                    bf:a0:e6:84:bc:04:37:a1:8d:eb:2a:c6:70:13:2e:
                    8a:f2:0a:a7:a3:71:49:51:93:d2:e2:0d:1b:1b:42:
                    66:95:a7:7f:88:3c:ef:fe:7c:b9:98:01:dd:e2:c0:
                    e7:ce:01:8a:68:06:82:ac:32:13:a1:de:35:11:0c:
                    2b:12:ff:98:a2:74:75:ac:ea:47:77:31:67:be:b5:
                    e6:c9:0a:66:7c:48:6e:5d:00:79:83:1c:c8:f0:17:
                    46:55:a1:97:2b:f1:54:bf:70:8f:15:d0:3c:9e:70:
                    23:67:b2:94:4e:c1:1b:12:ee:5d:9e:84:71:b5:0f:
                    a1:25:8e:bd:84:c6:96:dc:01:78:00:3c:c4:48:37:
                    a7:88:5a:c1:63:1a:3a:7a:e4:04:be:df:b9:25:ee:
                    13:bf:bf:ca:82:3a:80:8a:29:b2:a7:14:17:37:2f:
                    ad:fd:e5:e4:1d:23:09:de:51:4d:b5:a3:f1:40:e8:
                    c6:07:3b:8d:52:d2:37:73:eb:9f:7a:5a:74:32:f0:
                    8e:c9:9b:64:ac:01:92:86:20:26:67:a7:45:a7:d7:
                    51:82:16:1a:75:67:c9:b3:86:45:f5:80:ef:d9:15:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BE:00:67:D6:B1:99:2F:1C:AE:39:99:67:18:96:F1:5F:AD:07:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:f5:ac:6f:29:f7:1c:8d:ba:34:76:64:69:09:0e:47:42:
         16:3c:4f:c3:4a:09:26:12:74:a3:71:42:1c:8e:40:5c:a9:20:
         98:9c:7e:db:98:f0:7f:c2:48:16:88:ff:73:70:05:36:05:0f:
         30:b8:25:01:92:ac:1e:99:27:9e:23:e2:b5:70:af:86:37:34:
         dd:b1:48:de:3c:46:10:e0:50:a0:a3:8c:24:33:11:9f:ea:39:
         6f:2e:03:a7:3b:aa:0d:6f:6b:73:e4:b0:92:f4:4d:6d:46:9c:
         8e:08:b5:c5:73:a5:22:92:ce:58:66:8d:0b:b7:06:b5:f9:24:
         fd:6d:41:83:85:bf:7f:f6:b2:67:2d:e2:b2:71:8c:18:eb:89:
         d7:b4:65:54:a2:1f:91:ca:80:1d:b7:6b:2a:86:9c:dc:83:9c:
         b0:33:50:cd:5e:93:0b:57:5a:51:cc:2a:c9:9f:3f:e6:9c:cc:
         6c:ee:c8:6e:74:62:38:59:cd:81:ae:68:58:1c:d8:48:4a:b7:
         66:32:5e:d1:da:a9:be:a8:be:1a:c6:91:be:3f:66:58:02:c3:
         eb:24:6f:db:3c:44:77:0b:54:02:81:03:8c:55:3a:f2:d4:51:
         f6:a4:c2:5e:b4:fc:46:c4:52:94:2f:44:3f:45:2a:9f:83:91:
         85:95:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:26:44 2026 by rpki-client