Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/73671cad-fca4-3a37-8f12-1df5a94dbecb.roa
File:                     73671cad-fca4-3a37-8f12-1df5a94dbecb.roa (raw, json)
Hash identifier:          wca2FF9pDO6MxW4Z2g3TuK6AnyFR2gzvnTCD38PG+no=
Subject key identifier:   96:67:1D:8C:53:D1:45:2B:E9:75:ED:BB:B4:5B:07:41:FC:14:D1:C3
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F6F22DFFA1123DE621FD3A880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/73671cad-fca4-3a37-8f12-1df5a94dbecb.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        130.137.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:df:fa:11:23:de:62:1f:d3:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=5ce29c95-fb75-44d7-8df7-34a45b5c1643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:4e:7d:7d:90:17:9d:82:6c:27:bc:cc:1f:
                    5d:1c:cd:5a:07:da:18:0d:fc:05:fd:4d:10:68:9d:
                    fe:68:30:a0:26:59:af:82:44:c2:54:0b:82:e8:77:
                    31:38:29:ac:6a:f1:09:51:3f:a4:8d:7f:bb:32:79:
                    31:a4:da:f3:ea:84:29:4d:e7:15:06:0b:c7:dc:64:
                    96:06:94:2c:46:53:75:4c:8e:2f:2a:c6:dc:1d:40:
                    a1:8c:d2:46:57:47:47:64:35:15:1e:03:6e:cb:67:
                    1d:f8:02:5b:b4:61:2b:2a:b6:27:03:69:77:b0:3f:
                    29:3b:61:f2:22:51:a2:c8:0f:34:21:ca:2a:b8:fc:
                    a9:b9:80:55:8c:dd:8c:4a:b3:bc:99:e3:0a:61:1a:
                    4f:42:85:14:db:50:6b:c9:90:b6:d6:25:fb:ca:46:
                    de:a4:fe:4b:c5:f8:da:19:42:18:79:c4:82:c2:b8:
                    40:38:f9:b3:53:6a:87:b5:22:c0:61:51:55:62:d4:
                    91:eb:ee:30:3a:39:bb:f8:c6:ce:45:8e:a3:28:b3:
                    32:0d:a5:10:24:bf:8a:f0:59:86:25:77:e4:a4:c3:
                    b0:b8:f2:d0:1d:2e:c4:80:60:a9:c2:13:a8:bb:c9:
                    d7:45:2c:7c:b2:5a:78:6a:15:cc:71:b8:df:ec:8e:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:1D:8C:53:D1:45:2B:E9:75:ED:BB:B4:5B:07:41:FC:14:D1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/73671cad-fca4-3a37-8f12-1df5a94dbecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:56:6f:e2:bc:f4:9e:c5:a8:dd:89:6c:aa:c0:70:85:84:
         68:63:c6:ba:ec:8f:dc:b3:ee:cd:42:a1:94:16:66:fe:24:55:
         cd:8a:9e:e5:fa:a4:4d:01:eb:e0:ec:05:df:91:68:62:21:bb:
         80:41:32:84:5d:31:9b:8c:37:c1:5c:f9:a2:f6:c8:aa:f1:2a:
         36:5f:53:73:89:49:8a:25:ba:e2:84:0a:6e:da:0a:65:c1:a3:
         7c:cd:c9:e5:72:f4:68:b9:d0:51:02:6d:91:97:f8:6e:63:d7:
         f1:67:87:07:c8:d0:47:67:c3:4b:b8:25:5e:f3:15:42:8c:46:
         11:7f:09:76:99:ee:eb:f0:79:df:f5:e9:32:a1:b4:a1:53:82:
         2a:2c:f9:2d:67:a8:53:c9:5c:27:6b:f7:9a:65:7d:f2:0f:ff:
         4f:32:94:ee:04:d3:2a:51:7e:e3:47:a4:d9:d2:c2:4a:b4:16:
         f5:9c:0e:20:8b:a3:e2:20:ca:49:c1:db:42:78:34:58:bc:dd:
         b7:61:73:d4:36:eb:26:7b:f1:86:7a:0b:0a:59:a9:7f:c3:70:
         d8:5f:36:12:fc:a0:bf:7c:6f:b8:f2:03:3c:b4:77:0b:30:57:
         57:f5:d1:84:2b:ab:4e:43:88:55:82:49:a8:b5:0b:b2:2f:ca:
         a4:9c:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:14:27 2026 by rpki-client