Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa
File:                     9e4ca616-100c-338d-90e9-4bee6142ba1f.roa (raw, json)
Hash identifier:          w/73WbvcVjcs8gegNJ1dsaVFv0I+K/BR+YldmvmgDpY=
Subject key identifier:   C4:7C:D7:BB:B3:B8:BF:ED:A0:28:CF:5E:29:9F:40:18:45:39:8B:BB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EFF7770A44653A12D17F9AC80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        130.137.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:70:a4:46:53:a1:2d:17:f9:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=bc8ba6ed-91f1-48e4-b338-a82c2980bc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:bd:0e:aa:65:22:cf:a6:14:7d:e2:b5:18:
                    f6:e8:68:39:07:1a:7d:ef:c3:2c:ab:c7:17:61:92:
                    42:f5:26:2f:19:58:0a:13:48:e5:ec:b5:c0:59:3a:
                    0f:23:72:b9:35:25:c8:3a:3c:51:98:1b:46:a5:de:
                    e6:4b:ce:12:79:c1:4f:c5:7d:fe:7d:f7:0f:28:07:
                    14:c4:e3:9f:f1:f9:f9:44:40:fd:bc:bf:21:a5:eb:
                    a7:fa:63:16:a8:92:ef:6e:02:94:c6:b0:ea:3b:94:
                    5f:3f:d0:b4:d1:88:08:04:04:a8:c6:f8:b9:15:a9:
                    ad:e8:7f:de:d7:16:1a:e4:d4:b6:17:58:cd:21:d4:
                    3e:4b:f9:42:19:57:bf:95:18:45:6d:2c:7d:99:c5:
                    cb:92:f0:60:fb:19:78:ea:f1:bb:37:fa:ef:94:64:
                    f7:96:a3:29:e9:df:b4:f2:d2:1c:4b:0b:07:ba:16:
                    9d:de:48:13:9b:fc:9c:e0:af:03:43:9a:a8:a9:d9:
                    17:32:37:66:36:3a:02:1a:6d:5b:ef:d5:4c:5f:5d:
                    2e:89:b1:02:c6:d6:20:6d:02:85:b0:7e:d2:94:b2:
                    ec:21:5b:44:69:af:4b:9f:e5:b9:04:ff:4d:23:2f:
                    72:59:b4:51:59:3e:f9:03:60:28:4e:d0:fc:e4:8c:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7C:D7:BB:B3:B8:BF:ED:A0:28:CF:5E:29:9F:40:18:45:39:8B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:88:ee:63:76:f9:ca:aa:9d:46:a3:dd:19:42:ad:7e:31:3a:
         95:2d:a0:a1:4f:3e:07:da:64:2c:70:7c:90:2a:4f:78:22:0d:
         b5:4d:c7:1a:17:09:69:0d:f3:9b:ab:5e:a7:77:c9:97:82:3a:
         b2:d2:6c:17:d9:5e:36:7a:eb:d7:0c:ec:3a:dc:39:94:b5:91:
         46:2b:a4:e4:9b:2b:ab:bf:bc:a5:80:5a:cb:31:9a:cd:82:fa:
         b2:92:34:dd:98:3b:a0:60:98:7f:d6:8d:34:a7:e7:92:d5:c0:
         49:69:55:17:2b:58:0b:66:af:22:38:16:ac:71:be:2a:75:36:
         90:bb:e3:41:58:01:fd:1c:02:79:9d:e4:81:59:f4:f5:1b:f5:
         fb:e0:f2:f4:f7:38:f1:ec:73:51:76:85:d3:17:c0:0d:ba:fa:
         28:37:98:44:c7:60:68:a2:a2:15:b6:ae:d9:c2:f9:e6:b4:54:
         b9:63:41:e8:a6:60:9f:94:db:c4:f1:7d:03:29:ca:ef:32:45:
         4a:ec:cc:83:ca:6f:d2:75:42:e4:48:51:c4:2d:5f:01:2e:df:
         7b:d0:11:28:48:3d:89:5a:d0:a9:81:75:63:90:67:d4:72:39:
         bf:59:5c:34:df:22:3f:d0:bd:ae:b9:9b:7f:2e:ac:5e:88:3b:
         27:b3:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:27:12 2026 by rpki-client