Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa
File:                     2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa (raw, json)
Hash identifier:          NekUydJIeDNKRD49A9TBx8vhaknaUntXrrsR0xGTZ2g=
Subject key identifier:   23:C1:04:0D:0C:DB:DB:56:07:B0:08:80:45:00:34:F8:D5:10:67:A9
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584CE4C7864EFB19D57090F43F80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        130.137.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:86:4e:fb:19:d5:70:90:f4:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=9bf39d7b-b9fb-436b-b0e3-260de4abb54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:8b:67:3b:21:52:6d:e3:03:ba:13:e4:41:
                    07:1a:63:1c:25:a8:d6:c1:88:9e:c8:d1:7d:6d:e3:
                    e4:d7:6a:c5:b1:83:e7:97:0b:8b:4c:64:8a:a1:76:
                    20:7b:90:e8:fa:37:e7:31:1f:c0:e3:48:f9:4b:65:
                    d9:85:17:23:70:91:7f:60:c7:1b:08:c4:e0:48:47:
                    46:b0:c3:99:0c:21:70:4d:a1:3c:11:78:23:a6:60:
                    ef:43:66:36:7c:c7:ec:49:56:d9:7c:96:d4:20:74:
                    31:04:5e:2e:df:5b:c5:95:b6:d9:35:49:e0:9c:43:
                    d9:e2:e0:76:97:89:49:28:3c:66:16:36:5a:08:0d:
                    e9:d6:17:43:4f:db:3a:b4:f0:83:b9:ea:63:72:86:
                    e0:5c:9f:98:9e:04:3d:76:64:d0:fb:4a:9b:2b:22:
                    df:86:d0:9d:eb:88:4c:c2:91:87:cc:88:16:22:f8:
                    a0:bc:21:38:02:df:2e:76:42:2c:d4:cd:5a:96:1b:
                    dc:39:c2:34:50:3d:86:57:63:eb:6c:7c:40:43:1f:
                    46:df:a9:82:dd:c4:d3:67:3a:6e:05:88:63:11:d7:
                    02:6c:62:46:1b:ff:08:28:c0:a3:02:29:eb:46:be:
                    a8:ff:a4:63:b6:08:f6:83:26:c9:4b:51:e7:95:ee:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:04:0D:0C:DB:DB:56:07:B0:08:80:45:00:34:F8:D5:10:67:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:f9:7e:78:32:0c:3c:23:9f:bd:10:39:d2:d4:e4:2f:e8:
         be:17:bc:b9:ad:a4:a0:e7:5c:37:02:85:b4:89:f8:38:74:52:
         77:d7:2b:13:c0:73:af:b9:56:34:36:d3:27:14:9d:ec:47:a6:
         4f:0e:86:e9:c6:f0:af:0d:05:6f:37:5a:94:99:73:0a:c2:db:
         b3:e7:b1:2a:38:e4:6e:1c:9b:dd:43:18:bc:b9:e0:bb:97:67:
         56:80:b4:1a:ba:7f:49:2c:fd:04:c6:60:6f:40:27:8c:63:2b:
         c1:b2:ab:4b:83:d1:b2:4a:76:53:5e:57:c2:d4:ba:fa:96:1a:
         64:36:44:21:0d:15:d8:fa:62:d0:8f:7e:03:81:7a:5e:b0:8f:
         43:49:78:23:3b:68:21:29:06:30:3d:00:7a:1f:08:6e:d6:7d:
         18:b9:37:8c:fb:44:92:4c:b2:97:f2:73:01:cf:b8:0d:d8:a7:
         c9:57:21:e7:b7:d5:15:21:22:3c:83:a1:8e:d5:37:15:ba:47:
         98:09:9f:2a:d9:8d:5a:09:e5:2e:e5:c5:e9:87:2e:a9:df:e3:
         ab:7d:c2:c9:f4:64:43:7d:71:0a:8e:7c:db:d3:0d:fe:77:9e:
         ac:5f:69:4b:4b:55:61:af:06:dd:ef:91:27:a4:26:85:40:fc:
         83:2f:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:09 2026 by rpki-client