Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a2f2c38-fd28-32c0-9628-818017a357cc.roa
File:                     2a2f2c38-fd28-32c0-9628-818017a357cc.roa (raw, json)
Hash identifier:          7HE5cB1n2qV3Lytj6nV9Z1UYbudveUn3ajEjKpdJzQE=
Subject key identifier:   9A:A7:C5:5D:EC:D8:F4:05:ED:18:EC:3C:E9:21:CF:FD:A9:C0:4E:E4
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EED5201D1851994BF4B583BC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a2f2c38-fd28-32c0-9628-818017a357cc.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        130.137.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:01:d1:85:19:94:bf:4b:58:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=ca3470d3-17da-40f0-812f-c8a8af775b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:14:08:e7:f5:4f:fd:c1:87:d1:45:d9:ea:fe:
                    58:dc:fe:ce:5b:1f:d7:3a:64:80:4d:93:3c:f3:b9:
                    50:4b:99:68:b6:55:9b:00:65:a8:51:90:16:76:49:
                    6b:5f:73:75:39:8f:25:b3:2a:ce:c6:7b:31:86:a8:
                    9b:6c:50:5b:9c:4d:c0:3e:58:08:81:d4:24:8d:ed:
                    d1:76:92:34:46:ba:ae:fa:f6:8f:cb:fd:a7:a4:32:
                    92:3a:49:61:42:ec:41:4e:36:20:f2:d4:5e:d9:d1:
                    8d:33:6f:0d:11:f5:ce:26:73:05:cb:32:33:67:e7:
                    ae:91:ca:f7:36:1e:48:9c:e1:66:00:6d:8d:46:99:
                    7e:9f:a8:38:e6:a8:f5:3d:ab:7c:05:ea:af:c5:14:
                    31:2e:f0:d0:0b:1e:8e:04:c7:00:69:45:48:9b:e2:
                    a6:41:9b:1f:5c:fe:ad:d4:54:bd:d2:27:c9:71:09:
                    4e:fc:58:48:07:89:ef:b8:5d:7b:52:27:d1:72:1f:
                    f6:91:24:a1:ac:d5:b8:78:b8:48:6e:61:31:ea:37:
                    22:f1:1b:46:e0:ed:cb:77:61:0b:f3:f6:21:4f:20:
                    cb:b4:76:96:03:2e:88:55:b4:0d:57:df:37:af:8b:
                    c3:a5:e7:be:5a:a0:70:b5:58:a0:6d:3c:38:57:2f:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A7:C5:5D:EC:D8:F4:05:ED:18:EC:3C:E9:21:CF:FD:A9:C0:4E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2a2f2c38-fd28-32c0-9628-818017a357cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:29:31:58:53:8e:de:c5:ec:e0:02:8e:ee:ba:8a:59:5b:40:
         44:0e:23:4d:08:0d:dc:13:be:4e:10:ea:aa:3f:8c:be:26:bb:
         db:55:4a:66:a2:72:cd:50:12:d9:ac:41:e6:06:3c:b9:bd:fc:
         14:3d:43:8d:5f:0e:b7:bd:95:cf:45:1e:19:4a:b3:2e:d6:76:
         f4:7a:79:53:d4:da:ed:b8:e2:ec:e4:19:b8:e6:01:03:5c:28:
         63:26:be:f1:58:eb:91:59:95:a3:13:5e:8a:ab:3b:89:dd:27:
         bd:e2:d8:48:fb:24:6a:43:6d:8d:7a:bd:d4:a6:cb:60:4d:55:
         2c:a8:b8:fc:70:77:78:58:84:57:b1:e1:05:f3:35:a3:d5:ed:
         29:32:de:e9:a5:f1:14:72:fc:71:6f:7b:b2:11:03:07:53:a3:
         da:c6:fa:8a:8f:9d:20:96:f2:78:0e:bc:39:34:08:a4:4e:17:
         a0:3b:08:71:91:83:66:35:bb:23:d3:83:3a:87:ab:0d:07:67:
         f7:ce:3c:6e:70:60:97:e7:b6:b5:4c:88:90:b1:a0:67:7a:25:
         8c:25:89:fd:af:39:ba:d0:e6:9c:17:ed:9a:ab:f8:55:bd:e5:
         3a:bb:02:fa:cd:a8:79:ef:49:c5:f7:62:4d:d8:18:e7:ca:b7:
         89:59:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:39:32 2026 by rpki-client