Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa
File:                     7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa (raw, json)
Hash identifier:          KFeTDesAmIOAmoC4dJLILBiifljTJNZZeoK7/7JODt8=
Subject key identifier:   7F:B8:0E:94:DD:38:5F:F8:D5:35:AA:2D:CD:C0:AE:EA:00:7C:55:BC
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D7F9A7EF5D53987449A710A80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     8987
IP address blocks:        130.137.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:7e:f5:d5:39:87:44:9a:71:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=eda98518-f36c-4032-a44a-95efaac40f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:fb:8a:ed:6a:0e:d5:e3:8f:3d:b0:80:1c:
                    f1:3a:41:31:3e:0b:ec:04:b7:7b:7c:88:17:ed:09:
                    71:91:ac:f8:1a:9f:c3:9d:99:1e:fc:57:9b:d9:eb:
                    da:e3:0f:39:8a:8b:05:05:14:1e:6c:63:3a:ee:af:
                    3c:d4:e2:3b:d0:b6:3d:99:25:88:fe:de:1b:5c:53:
                    b6:72:2e:cf:90:58:28:a9:1c:c5:7d:03:5c:60:4d:
                    e7:a3:f4:1e:60:71:c6:fe:96:da:aa:e5:6c:1b:76:
                    09:bb:e1:d0:8f:be:32:d6:8f:44:4e:02:e8:ba:56:
                    64:14:14:11:68:39:33:a7:3a:a3:bf:ca:c9:9f:99:
                    9b:1a:09:7c:b1:cb:f2:41:51:ab:dc:03:be:64:51:
                    b7:b9:39:dc:c2:c6:b1:f2:f5:4d:af:de:6f:62:92:
                    5f:7f:09:77:3a:eb:6f:5c:3d:b7:28:f6:41:36:14:
                    8d:98:6e:e0:bb:b0:85:08:df:34:ec:54:5e:3a:3f:
                    eb:fe:4a:08:c7:d7:bb:f6:d9:8c:fe:f5:9c:dd:a9:
                    6e:f6:c6:d3:93:b3:e9:d4:ca:2f:6a:de:52:ab:d1:
                    eb:4a:5e:0d:59:2b:7c:83:36:9f:de:37:d3:de:dd:
                    b9:3c:ee:79:05:97:24:51:a9:32:c1:db:98:26:1b:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:0E:94:DD:38:5F:F8:D5:35:AA:2D:CD:C0:AE:EA:00:7C:55:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:a9:61:bd:93:8f:a5:ec:dc:ed:91:20:83:28:aa:9a:f8:
         76:4d:33:27:bd:4f:19:54:0c:b6:12:8e:47:81:64:79:88:8b:
         b1:8e:b3:af:78:b2:c4:81:f2:dd:1e:42:61:75:c0:1c:55:aa:
         f3:cc:42:7b:1e:be:6e:5a:d1:0f:5e:d1:c0:9a:57:c2:09:67:
         09:d7:18:15:1b:b4:93:cb:4a:80:e2:78:85:63:d8:91:a1:8e:
         b0:80:a5:1d:e6:57:b6:db:67:f9:b3:29:1d:7c:30:45:61:ed:
         77:35:8d:86:1e:90:b9:c7:24:f2:ec:57:6e:fb:74:b6:17:21:
         2e:41:d3:f1:7c:b8:68:3d:25:5d:f8:ff:13:f4:9b:9d:5f:47:
         3b:8e:0b:77:4b:9c:1d:ea:dd:cc:07:a9:58:f1:36:df:13:80:
         a7:c6:14:27:52:12:fe:5e:dd:7d:38:30:37:99:fc:cb:c7:a2:
         cf:b9:1c:53:68:0c:f3:ad:f2:b2:69:d3:7d:fd:99:8b:95:09:
         1d:3b:57:dc:61:56:0e:80:13:a9:3a:7c:ed:0e:c0:45:e5:52:
         ba:0d:e8:13:88:8f:fe:e0:3f:39:3a:ce:69:56:7a:a3:8d:0e:
         3d:a2:65:18:89:a3:9f:c2:2d:64:48:6a:c0:82:4b:bc:96:fc:
         43:a5:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:15 2026 by rpki-client