Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
File:                     2e892f0a-0935-3e59-bd12-3f0547f44c55.roa (raw, json)
Hash identifier:          cXIxzp3TKD5YBp8eHz8b5L5DUhZ95MBgLQQPPoxik/Y=
Subject key identifier:   C2:E9:59:15:05:79:3D:BD:4F:5C:17:97:6B:CF:75:1F:F8:97:D3:2C
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F02421B740B3F5C1ED4717D40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        130.137.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1b:74:0b:3f:5c:1e:d4:71:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=a683b693-d8aa-4765-9d0f-3b298b7d77cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:13:6f:5b:ea:8a:5e:2d:13:e7:e0:60:91:
                    84:ec:d2:16:9a:b8:9c:f1:dc:41:87:f4:bb:c6:88:
                    f5:b7:c6:c9:0a:df:16:99:09:bc:29:3b:63:58:d7:
                    7f:fd:36:78:32:18:ea:63:2c:5c:86:43:b3:d1:1b:
                    5f:7d:a4:8c:bd:52:3c:c3:6b:8a:af:7a:6d:fe:30:
                    5b:43:ac:44:b9:a8:57:09:ad:de:43:4e:2c:e2:94:
                    f3:72:5f:ec:dd:18:ca:12:52:c7:23:23:30:9d:9e:
                    2f:ff:bb:af:98:d5:40:a4:01:f2:3e:01:0e:17:1f:
                    7c:e6:8f:00:29:4f:08:c6:b7:fb:43:d0:97:82:42:
                    d3:13:d0:77:54:2e:a4:ae:6f:ed:bd:f2:46:24:75:
                    1c:9a:4b:c1:c4:7c:68:84:aa:ce:6e:5c:3b:71:94:
                    52:d8:e7:16:d7:b6:e5:a4:90:1d:a1:65:0b:0b:e1:
                    57:bc:e7:64:bc:49:2e:45:05:95:92:1f:47:68:35:
                    4d:4c:0f:35:22:dc:ba:c1:9c:b1:d2:71:25:0a:da:
                    1f:7c:73:18:8b:e6:6e:b2:50:6c:24:4a:b7:b0:07:
                    99:49:6d:76:4e:80:33:d1:d1:0a:c4:f5:88:2c:80:
                    b4:b2:60:ba:f7:4b:2e:f6:57:6d:a1:17:2b:5c:8f:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:59:15:05:79:3D:BD:4F:5C:17:97:6B:CF:75:1F:F8:97:D3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:05:da:26:de:14:78:1c:2e:7a:f1:2a:28:9e:b4:02:ca:
         61:c8:e3:24:c7:5e:61:e9:11:2a:2e:1b:4e:9d:9c:06:54:2f:
         50:99:a3:68:dc:70:eb:7e:12:f1:06:13:d9:70:47:4a:52:b2:
         b2:12:db:9f:12:57:a4:2c:5a:6b:44:ac:b3:f2:32:08:42:79:
         4f:ba:9c:5b:bd:a1:61:20:22:75:27:68:8a:d3:e3:8b:b9:6f:
         8f:ca:ac:57:ce:d4:10:fb:22:8f:63:b6:5b:0f:d0:7c:cc:7c:
         69:e9:36:46:d3:2f:ee:0b:42:c0:4a:29:da:44:45:1f:00:34:
         24:84:4c:64:05:73:18:7b:d0:96:d3:1a:6a:66:ef:5b:e7:d5:
         13:11:30:7d:ad:85:9d:81:63:1d:68:d7:f4:ac:7e:83:88:07:
         44:4e:d8:fe:63:91:40:f6:de:d0:ed:78:d8:a8:6b:9d:3f:73:
         1f:a8:fa:b8:84:a8:d6:be:eb:c6:72:c8:25:36:20:2e:e9:8b:
         c9:f4:af:17:eb:17:d8:b6:1f:89:d4:9e:70:2d:96:85:67:a7:
         c7:37:96:82:19:a3:07:04:11:2b:7c:e9:d3:f5:66:75:9b:c2:
         7b:50:c2:19:1d:ef:c6:00:00:d1:22:7d:80:00:97:1f:65:1b:
         04:77:df:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQht0Cz9cHtRxfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
YTY4M2I2OTMtZDhhYS00NzY1LTlkMGYtM2IyOThiN2Q3N2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnUTb1vqil4tE+fgYJGE7NIWmric8dxBh/S7
xoj1t8bJCt8WmQm8KTtjWNd//TZ4MhjqYyxchkOz0RtffaSMvVI8w2uKr3pt/jBb
Q6xEuahXCa3eQ04s4pTzcl/s3RjKElLHIyMwnZ4v/7uvmNVApAHyPgEOFx985o8A
KU8Ixrf7Q9CXgkLTE9B3VC6krm/tvfJGJHUcmkvBxHxohKrOblw7cZRS2OcW17bl
pJAdoWULC+FXvOdkvEkuRQWVkh9HaDVNTA81Ity6wZyx0nElCtoffHMYi+ZuslBs
JEq3sAeZSW12ToAz0dEKxPWILIC0smC690su9ldtoRcrXI81OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLpWRUFeT29T1wXl2vPdR/4l9MsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmU4OTJmMGEtMDkzNS0z
ZTU5LWJkMTItM2YwNTQ3ZjQ0YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+zBdom3hR4HC568SoonrQCymHI4yTHXmHpESouG06dnAZUL1CZo2jc
cOt+EvEGE9lwR0pSsrIS258SV6QsWmtErLPyMghCeU+6nFu9oWEgInUnaIrT44u5
b4/KrFfO1BD7Io9jtlsP0HzMfGnpNkbTL+4LQsBKKdpERR8ANCSETGQFcxh70JbT
Gmpm71vn1RMRMH2thZ2BYx1o1/SsfoOIB0RO2P5jkUD23tDteNioa50/cx+o+riE
qNa+68ZyyCU2IC7pi8n0rxfrF9i2H4nUnnAtloVnp8c3loIZowcEESt86dP1ZnWb
wntQwhkd78YAANEifYAAlx9lGwR33/I=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:46:09 2026 by rpki-client