Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/365716ff-e766-3c41-a7e7-04934618eebb.roa
File:                     365716ff-e766-3c41-a7e7-04934618eebb.roa (raw, json)
Hash identifier:          aizPj9UR6dKsq+lrnVEXcvAMtNAiEt5J1zi51j+O294=
Subject key identifier:   3C:F6:01:DA:19:20:6B:5A:01:25:41:DE:72:58:4D:82:16:D2:73:AE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EA8EC3B6AC63EE65C5597ED80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/365716ff-e766-3c41-a7e7-04934618eebb.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     16509
IP address blocks:        130.137.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3b:6a:c6:3e:e6:5c:55:97:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=3580532d-03e1-4129-9f89-c579ac60c9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:b8:a8:74:49:6c:32:01:88:d9:b6:b6:e5:
                    f4:fd:af:34:4d:79:47:87:f4:d4:c9:ba:5c:82:be:
                    82:a0:d4:19:d7:c5:c5:8a:b9:0c:f5:25:64:36:21:
                    59:07:ce:80:ca:18:eb:88:08:8e:c4:b3:8d:ec:d5:
                    df:17:f6:90:16:ad:38:bc:f3:53:0c:45:f5:22:c8:
                    86:b4:b2:07:a7:1f:3c:79:30:e5:aa:68:2b:f4:0b:
                    17:51:3e:cc:fb:8e:f7:d5:3d:d4:5b:5c:8d:a7:e2:
                    7d:f5:06:3f:63:0d:2c:ce:20:f9:35:d5:1a:f5:f6:
                    ab:a4:07:98:61:60:3c:9f:82:dd:09:b0:8e:f9:79:
                    9f:3b:50:ff:f1:c6:53:b5:1d:44:cc:a1:f3:e5:f9:
                    bc:1d:62:d1:bf:2c:32:0c:da:dc:44:72:68:b4:95:
                    4c:b7:1a:72:c6:2f:f1:1a:9e:ea:6a:0a:15:38:a9:
                    30:06:e6:52:03:3d:38:c9:3e:ce:3a:7e:c2:74:ed:
                    cc:b8:e7:4e:2e:bc:93:00:f8:90:bc:d0:59:82:e0:
                    0d:0e:dc:4b:6e:37:d6:c6:25:57:b2:2b:2c:a3:7e:
                    c8:09:62:2e:4a:16:b1:c6:f7:04:12:79:87:55:d4:
                    d4:78:9f:f5:5b:49:58:f0:b5:75:27:34:8f:95:77:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F6:01:DA:19:20:6B:5A:01:25:41:DE:72:58:4D:82:16:D2:73:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/365716ff-e766-3c41-a7e7-04934618eebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:11:c9:86:b4:2a:e0:05:59:af:d3:a5:13:01:b1:20:e5:
         25:6a:eb:5c:30:55:39:8f:26:8d:43:0f:7f:5e:7e:79:c0:7b:
         69:2f:da:2c:d0:3f:64:eb:c9:37:fd:4d:b3:f0:4b:f8:2b:c0:
         95:24:e1:89:7e:6a:5f:26:01:e7:e8:be:de:8e:18:f8:ef:e7:
         ee:d4:a5:65:00:59:2e:96:ef:7f:52:01:a5:14:34:cb:14:26:
         71:bb:80:19:e6:a3:c9:3e:28:30:98:da:7c:82:34:33:6c:87:
         17:f9:95:d5:04:7e:c8:2f:59:78:f4:63:b7:37:14:ab:4f:59:
         a1:54:a2:0f:e2:50:62:ed:3f:00:5d:28:2a:c5:f7:60:a0:35:
         f5:6e:ed:ca:48:0d:e5:d3:49:2c:f2:e6:50:85:61:c2:ce:05:
         db:b8:e4:c0:37:0c:3f:c4:96:75:ee:b5:a3:40:56:24:ae:c2:
         f7:ba:40:45:53:32:88:5c:1c:29:93:b4:d6:54:10:22:cc:f9:
         a1:76:1b:c6:13:5a:61:b2:4e:0e:81:83:56:9a:a8:21:53:c8:
         ce:fc:13:f0:ba:a6:83:58:07:07:7c:6b:e9:aa:33:da:f8:95:
         b2:77:d6:db:7e:20:dc:23:5e:b8:d0:7d:da:68:86:be:6a:ba:
         05:8b:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:20:58 2026 by rpki-client