Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa
File:                     3eb727f7-429d-3153-84bc-bca2a65f45a7.roa (raw, json)
Hash identifier:          dAzyUHS2KTdcENEOHPYt8dG+f8VRR/PoIsTXoYTcrRY=
Subject key identifier:   DA:F5:1D:DB:E1:A6:32:67:29:D3:CD:27:6C:F9:C4:86:2D:B3:03:EA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EFF7771499EB18C612B437000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:71:49:9e:b1:8c:61:2b:43:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=907d690a-879c-4da3-8e5d-e30f7bb686b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:58:55:93:ff:20:23:18:f1:a6:74:fa:4d:
                    e2:47:44:0c:01:32:98:58:41:e2:62:ad:9e:27:80:
                    8c:7a:45:3b:93:da:16:29:39:a7:aa:f4:f4:8f:76:
                    fd:a9:8c:2f:0e:b7:e5:7e:37:b7:4f:91:c3:f5:86:
                    0a:9f:a4:24:03:19:30:b0:e9:2e:0e:bf:f0:2b:ad:
                    e5:86:30:b4:72:33:0d:46:ab:aa:7d:5b:1a:3d:7a:
                    aa:30:db:c8:8b:b4:cb:21:97:b4:2a:37:f5:f4:d2:
                    5c:d6:a2:6d:08:65:a5:11:b5:31:d5:8b:f8:44:bf:
                    04:69:a6:b3:b1:83:ac:32:2f:a6:ad:ed:85:da:f2:
                    bf:0e:cb:a6:81:b1:22:af:82:db:ac:48:7b:fe:67:
                    9a:49:11:45:8f:80:06:40:4e:cd:ee:2c:99:44:69:
                    34:f0:e6:b8:26:0d:30:1a:5d:a0:ed:b5:37:8b:be:
                    98:6e:ed:e9:4d:90:08:71:4c:5e:14:3a:09:32:38:
                    73:30:13:9b:4c:2e:82:d9:40:84:56:d7:53:a4:0c:
                    fd:45:f7:8c:b5:44:02:d3:1d:98:bd:14:83:9b:87:
                    d0:62:84:07:f6:9a:26:62:da:75:ea:f4:80:ed:4b:
                    54:79:c4:b1:97:16:47:92:b5:a1:cc:fe:b9:c4:45:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:1D:DB:E1:A6:32:67:29:D3:CD:27:6C:F9:C4:86:2D:B3:03:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:62:f4:89:b0:eb:f5:2b:19:25:29:47:2c:a5:bf:c2:99:
         5f:bd:d1:e6:ad:21:35:a2:d6:0a:1c:6d:dd:2c:8d:fa:5b:6f:
         0e:62:b0:d0:a3:31:52:42:01:8e:f1:f5:03:64:1d:02:dd:2a:
         62:6e:3e:c9:38:52:c0:3b:4f:31:81:0d:dd:b8:7d:c9:9a:85:
         dc:58:cd:e0:a6:67:6e:61:dd:16:b3:8f:9b:90:c7:48:3a:47:
         da:e5:2a:23:87:8a:97:6f:b2:4d:60:d3:db:65:89:39:f7:60:
         54:08:7a:17:ed:40:dd:e2:4e:98:1d:db:3b:b5:7a:33:da:5b:
         a4:66:e3:2f:51:09:09:ac:76:05:af:bd:6d:eb:5f:0a:75:6f:
         fe:e9:7e:fa:cc:8b:d3:35:29:d9:bf:64:db:b3:bb:a7:8c:1b:
         16:29:a0:d8:40:5a:ce:06:d9:69:9f:98:2d:2d:69:df:0c:90:
         2f:40:3c:60:36:fc:03:e5:1e:09:30:dd:3e:65:09:ee:15:fa:
         aa:13:3a:7b:a7:1b:05:ba:23:9b:82:e6:40:c3:69:80:be:07:
         18:5c:fb:44:9c:01:cb:43:46:62:c3:4c:47:30:f1:a6:bc:d7:
         e8:cc:9e:e9:99:c1:6a:fb:e5:d2:88:fc:04:9e:8e:62:2f:17:
         61:ea:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:55 2026 by rpki-client