Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa
File:                     cd5a3695-dc79-32b2-b279-0651d13c045f.roa (raw, json)
Hash identifier:          QpyS8YrUfs2WCIyJgj+LeLGtJ4/jCjda7AAFkIERnzU=
Subject key identifier:   D0:E7:79:24:B2:4A:89:2C:96:03:BE:C5:D9:49:FB:53:CD:C3:68:F8
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D7A051E63195D309380DB6B30
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        130.137.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:1e:63:19:5d:30:93:80:db:6b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=cb907e50-13a9-4a64-83b1-c147d78f1ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:53:23:6e:fa:cf:88:8a:4e:70:42:99:bf:
                    01:b9:f6:b3:74:b7:2f:d3:8b:df:ac:38:c5:b8:ea:
                    52:a6:37:78:b5:ea:c5:7b:b5:98:ce:cc:85:93:51:
                    e9:b2:a0:43:43:11:9c:1a:a4:9f:de:a8:a0:88:6b:
                    f6:4a:aa:ab:81:d2:6e:06:32:f9:74:41:e1:7f:b7:
                    39:40:48:21:3d:b9:75:87:f1:30:34:62:51:44:19:
                    41:b0:86:f1:4f:9b:69:df:6c:54:5e:f1:d0:15:08:
                    7a:a7:f0:07:f5:fa:db:2b:bc:48:fc:e2:b0:bc:3a:
                    09:4f:2c:b2:02:91:f3:18:38:0a:71:01:0d:13:55:
                    79:1d:5d:94:9f:7a:36:d9:c6:19:5b:89:f4:ab:c4:
                    e7:15:98:42:cd:15:52:68:ef:e7:4c:d7:61:1f:14:
                    e7:8b:8e:fb:dc:60:1c:ac:f8:4d:57:44:36:1b:28:
                    11:09:d2:c3:54:6a:86:80:83:e8:7c:e0:21:2c:86:
                    35:1e:e6:fd:ae:24:6f:a2:f8:88:00:7d:36:c7:b3:
                    67:a5:59:82:fd:d3:58:74:d2:73:fd:b3:ed:53:ea:
                    a2:0a:b0:0a:50:0a:88:90:c7:3c:7b:54:6b:8f:30:
                    b4:37:68:a6:5b:7d:9c:10:65:02:33:42:fb:f4:aa:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E7:79:24:B2:4A:89:2C:96:03:BE:C5:D9:49:FB:53:CD:C3:68:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:54:4e:03:1b:ef:d0:6e:5f:f2:82:3a:4e:cd:30:25:e4:
         a2:37:50:8c:a2:42:3a:19:62:3a:31:31:60:4e:0f:4d:aa:0a:
         ef:fd:16:ac:57:9c:67:11:ba:fa:ea:c5:3a:0a:8a:cd:c1:8a:
         d5:2f:34:1b:86:5a:cb:16:df:d2:42:03:e4:cc:72:90:04:06:
         be:29:ca:0f:d0:55:d2:a4:3e:79:69:0a:58:b9:cb:7f:b2:97:
         14:b8:a8:90:57:97:5a:7b:c2:24:e1:0c:6c:e5:c7:64:db:1b:
         89:8d:aa:3e:88:2c:92:9d:7a:04:7f:47:36:72:8c:07:a3:a4:
         55:85:55:d7:d7:d9:0f:ff:2b:6a:c2:8d:21:28:fe:28:b4:86:
         73:af:2a:53:ba:0e:54:b6:e6:b0:f1:af:72:4a:29:7a:35:da:
         7f:72:cb:a7:56:18:20:0e:79:a9:d3:fd:86:ce:f0:2a:1a:ba:
         b5:3a:99:e7:d9:f9:7e:73:4e:30:ce:d5:64:8b:17:e1:d8:e4:
         07:ec:b6:f0:2b:30:7b:d3:4c:85:3f:a8:30:94:95:a4:7f:25:
         52:37:07:47:44:31:09:02:01:55:72:0e:75:82:29:24:61:4f:
         ee:43:c7:43:8e:2d:36:f9:d1:d2:ad:d8:9d:6f:f2:16:d4:11:
         ed:27:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:46 2026 by rpki-client