Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa
File:                     e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa (raw, json)
Hash identifier:          CZgg+6LJheg9aMYbD4L3fL6ZPVlJ1rlpvQeBT5fNwbM=
Subject key identifier:   A3:A1:DD:1F:18:B1:40:43:0E:F4:68:18:AA:0C:27:E3:A3:33:22:A5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D75D524528FAE9CD84B23B280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        130.137.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:24:52:8f:ae:9c:d8:4b:23:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=b40df2c2-c485-4fd7-85bf-e68dc33241d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:ec:a1:31:c1:7f:a8:0d:d2:fe:e9:80:9a:
                    99:d4:9a:3a:8d:d8:f1:ee:33:b6:3a:1f:ff:ae:2e:
                    04:d3:97:b2:b0:35:2b:33:b3:9e:79:23:bb:63:e4:
                    3c:9b:b1:fd:ec:b8:4a:de:f4:a8:e2:b2:07:26:3c:
                    2c:18:c5:a4:16:8d:83:5b:89:2c:b5:c7:65:79:1f:
                    a7:44:bb:67:c4:54:e7:c1:97:49:85:7e:bd:85:99:
                    26:aa:d0:28:60:67:cd:36:2d:04:ce:77:39:7b:7e:
                    44:66:07:59:60:74:56:de:b8:56:34:7e:06:31:a5:
                    e9:52:60:34:d4:27:69:08:1f:ee:a7:a2:57:1e:eb:
                    f8:61:74:25:4d:10:eb:50:17:c3:d1:17:8c:67:c0:
                    ff:f5:4c:c3:d8:47:56:7e:01:a7:ee:e1:f0:5e:56:
                    58:9a:ed:9c:b9:59:8f:88:8c:74:05:d0:82:61:7f:
                    27:8b:7b:08:9c:20:61:a6:60:c0:7f:60:7d:98:8b:
                    56:73:95:9e:61:33:52:98:35:13:5f:8e:04:b5:59:
                    40:a5:57:79:75:1d:18:4a:29:98:a6:7a:c3:64:cf:
                    b7:25:17:53:66:29:ae:df:b9:fb:59:09:cb:97:e8:
                    05:c2:c4:06:af:7f:82:f3:a7:d9:80:9a:20:34:9b:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:DD:1F:18:B1:40:43:0E:F4:68:18:AA:0C:27:E3:A3:33:22:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:a5:8b:3f:64:c5:e0:fc:de:41:5e:ab:4e:3d:fb:44:3b:
         54:82:7e:5b:f2:5a:39:70:e2:36:28:5a:ee:fe:28:f3:31:ec:
         34:b7:4a:13:30:fa:10:9a:3f:48:91:5d:35:e8:24:98:df:3d:
         0a:ff:54:c3:34:04:82:8d:c8:00:c8:e1:3a:16:55:c5:e7:70:
         76:f6:09:c8:f7:19:f8:93:c3:52:2d:73:a9:86:62:76:00:8d:
         ae:b1:0b:6f:0a:4e:56:78:0e:f3:96:12:f1:c1:c0:a8:7f:3d:
         7a:b6:2b:90:7f:a4:ea:5d:3d:40:53:65:a5:82:b2:13:18:f5:
         1f:53:1c:5d:6c:08:0d:9c:7d:72:88:d8:d2:ba:56:58:ee:1c:
         2e:40:40:e7:85:d3:02:99:ad:aa:90:1d:98:d0:24:55:fc:f5:
         ee:c7:22:a2:19:95:40:f5:59:11:9e:4b:e1:a6:9e:ed:56:c7:
         4e:e8:cd:15:49:25:ce:d8:06:3e:4c:23:2a:95:97:e0:db:99:
         e9:4e:bb:59:19:38:e7:6c:6c:9c:e1:1b:ea:e8:15:b1:05:be:
         3a:65:4d:90:0b:ef:38:8d:07:53:3e:04:06:e1:a6:65:52:4e:
         0b:d3:ac:41:79:57:c6:11:a0:1f:7c:a2:6c:e6:12:1e:92:fb:
         9f:07:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:01 2026 by rpki-client