Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
File:                     1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json)
Hash identifier:          JyDCoYa/NVFj4i/v4SIZuNFhClHrCXfQuJIeZOwuWFE=
Subject key identifier:   CE:03:1F:ED:44:FA:5D:8D:1C:1D:F0:D1:DD:3F:7C:3A:91:4D:F6:68
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBB758204E27F8477828359C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     8987
IP address blocks:        130.137.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:82:04:e2:7f:84:77:82:83:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=ab45188c-f5ed-48d9-bf7e-752cf87ea533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:6d:4a:c1:46:18:02:9c:93:fd:5b:2f:39:
                    d2:e1:48:21:e7:4c:a8:9d:b9:c7:d0:2c:7f:ae:b4:
                    80:e4:ba:e0:b3:c6:ba:1d:cf:c1:2a:1b:13:a4:ae:
                    3d:ef:34:cd:60:b9:c6:cb:ef:53:a6:44:34:97:72:
                    b5:ae:1e:bc:fe:8e:11:2b:72:05:de:a6:80:e3:00:
                    5c:68:0f:35:cc:b0:b6:45:f8:30:0f:b0:df:f2:44:
                    69:4d:d7:d4:62:5a:d7:d5:26:19:39:3e:86:26:87:
                    58:ff:0a:1b:34:10:04:d1:af:d8:a1:0c:05:8d:e3:
                    86:56:6f:d6:e3:bf:a4:4b:bc:f7:2e:06:e7:22:78:
                    3d:16:ec:cf:83:c6:27:a0:03:41:a3:48:83:4b:bc:
                    48:0d:96:cf:9e:9b:f3:28:41:cb:69:17:6f:05:2b:
                    d3:be:2d:11:18:df:1c:db:23:48:97:60:12:f5:a0:
                    91:0c:d8:1e:c3:e1:7b:67:de:09:a0:59:27:5c:49:
                    9a:70:ed:10:c3:1c:49:51:b7:2b:2b:14:2f:5d:a7:
                    da:aa:cf:c3:a8:77:dd:2e:f8:de:4c:78:6a:99:8e:
                    69:1a:44:23:30:da:ff:59:16:30:e3:a4:c4:0a:46:
                    ba:a3:1c:b6:ab:d0:9a:5e:ae:ec:4d:91:07:0c:96:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:03:1F:ED:44:FA:5D:8D:1C:1D:F0:D1:DD:3F:7C:3A:91:4D:F6:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:d7:9e:93:9f:10:07:5e:cd:81:f6:d6:0a:99:7b:2e:fa:
         50:38:8b:89:b1:fd:ce:24:e6:0f:4b:a5:5a:88:99:6b:65:72:
         02:06:f9:f3:98:99:98:58:8b:9b:a2:01:b9:82:73:60:69:ea:
         c4:72:3b:19:9f:21:d5:48:62:13:88:93:9f:f1:c3:82:7b:1c:
         b2:0d:0e:6e:e1:9b:75:52:5e:a3:fd:28:c8:75:c0:50:3c:53:
         03:13:40:37:c8:f7:14:0e:3e:b1:89:38:1b:20:d3:4a:d9:97:
         2f:7d:4d:68:45:ee:4b:54:78:92:a3:43:26:f3:16:73:9d:8e:
         3b:6b:c2:b0:f3:52:82:f7:cb:4a:f8:c8:03:f6:06:f5:f6:83:
         81:8b:90:1c:b4:fb:b4:10:b1:dd:d5:07:ad:c6:a1:4e:06:92:
         20:6a:2b:48:8c:41:a3:3f:19:13:c6:6e:9b:48:d3:cc:bc:23:
         35:0d:f6:1b:1b:03:24:da:ea:d4:1c:bd:28:49:65:3d:57:2d:
         e4:f8:b0:a3:cf:aa:d9:9a:59:da:c6:e8:86:ae:fc:11:52:d9:
         a7:87:1c:88:a5:fb:ac:46:53:0b:6a:ae:40:f4:57:96:70:47:
         99:c9:2a:60:a8:32:2e:22:71:a9:be:5a:cf:32:87:5e:0b:78:
         43:be:05:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYIE4n+Ed4KDWcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
YWI0NTE4OGMtZjVlZC00OGQ5LWJmN2UtNzUyY2Y4N2VhNTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQFtSsFGGAKck/1bLznS4Ugh50yonbnH0Cx/
rrSA5Lrgs8a6Hc/BKhsTpK497zTNYLnGy+9TpkQ0l3K1rh68/o4RK3IF3qaA4wBc
aA81zLC2RfgwD7Df8kRpTdfUYlrX1SYZOT6GJodY/wobNBAE0a/YoQwFjeOGVm/W
47+kS7z3LgbnIng9FuzPg8YnoANBo0iDS7xIDZbPnpvzKEHLaRdvBSvTvi0RGN8c
2yNIl2AS9aCRDNgew+F7Z94JoFknXEmacO0QwxxJUbcrKxQvXafaqs/DqHfdLvje
THhqmY5pGkQjMNr/WRYw46TECka6oxy2q9CaXq7sTZEHDJak0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4DH+1E+l2NHB3w0d0/fDqRTfZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWIxZjQzMWEtY2MyZC0z
NDc2LTkwMTAtYTAxY2YxOGUzMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTd156TnxAHXs2B9tYKmXsu+lA4i4mx/c4k5g9LpVqImWtlcgIG+fOY
mZhYi5uiAbmCc2Bp6sRyOxmfIdVIYhOIk5/xw4J7HLINDm7hm3VSXqP9KMh1wFA8
UwMTQDfI9xQOPrGJOBsg00rZly99TWhF7ktUeJKjQybzFnOdjjtrwrDzUoL3y0r4
yAP2BvX2g4GLkBy0+7QQsd3VB63GoU4GkiBqK0iMQaM/GRPGbptI08y8IzUN9hsb
AyTa6tQcvShJZT1XLeT4sKPPqtmaWdrG6Iau/BFS2aeHHIil+6xGUwtqrkD0V5Zw
R5nJKmCoMi4icam+Ws8yh14LeEO+BWo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:28 2025 by rpki-client