Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa
File:                     3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa (raw, json)
Hash identifier:          WK5vkeymr0V+FuIFqbdGzPSO7x56+h5gjBLVxSkXeJk=
Subject key identifier:   AC:23:E9:EF:EB:63:BB:A1:15:CA:42:51:48:DB:EB:60:CF:50:74:01
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584EA7973FAC9C52ECBF3FDC1A50
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     58588
IP address blocks:        130.137.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:3f:ac:9c:52:ec:bf:3f:dc:1a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=208ea705-9c18-42f2-b82f-a2f34a6c804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:c7:9a:c6:06:73:6e:ca:b4:64:9d:0a:0e:
                    c4:f8:da:76:6e:ad:c1:38:23:0b:ea:12:f6:0b:19:
                    90:4e:e5:dd:b4:5b:64:a7:d1:77:a0:ff:9a:e1:65:
                    0a:ea:92:43:1d:45:3e:c7:1f:f9:79:83:7f:27:ba:
                    a7:58:f3:52:01:99:e2:e7:c8:81:ad:72:11:c8:91:
                    d8:c0:ff:b5:b9:ca:39:73:39:69:d5:d8:0a:02:e8:
                    d5:03:33:27:05:73:9e:15:9b:90:98:99:8e:f1:e2:
                    45:4d:bb:1b:dd:40:6b:32:a9:a0:2a:20:e1:12:5b:
                    8a:d8:9a:80:ce:df:c1:77:99:35:e4:f0:9b:41:fc:
                    82:9a:f9:e3:3b:ae:5d:21:ae:6e:98:16:ec:41:48:
                    46:77:e9:17:0f:ca:fa:65:eb:2c:7e:21:69:f9:22:
                    2d:ae:ac:c0:f1:4a:da:1d:35:9c:f1:43:d9:39:5b:
                    e7:23:9b:d0:a3:17:9c:bb:e2:84:cb:09:9d:4f:74:
                    c2:1b:be:79:ee:69:99:d9:51:0e:bf:06:be:5e:81:
                    6d:76:91:37:d3:ef:92:c2:4e:1a:e4:d2:a2:64:da:
                    cc:0f:8b:05:23:7d:d5:ea:08:6c:35:02:2c:11:25:
                    fc:a1:75:90:22:db:8d:5e:56:e2:a9:46:82:8c:c8:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:E9:EF:EB:63:BB:A1:15:CA:42:51:48:DB:EB:60:CF:50:74:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:78:b0:73:bf:be:f3:a8:6b:ef:6c:9b:e1:72:f3:33:bc:13:
         9a:8a:53:7b:1d:ca:91:5d:a3:7d:3d:20:75:1f:2b:25:c5:8e:
         66:74:9e:c2:06:60:57:5d:2a:04:3e:d2:ce:b5:8a:dd:26:34:
         f8:1d:62:fc:2d:e5:8d:c8:cc:64:ab:e3:23:77:01:27:27:f0:
         02:45:dc:4d:13:df:67:41:38:88:17:ab:40:a2:43:4e:f6:ec:
         1f:e7:49:91:60:b5:81:b2:2d:33:a9:0d:28:b9:cb:7f:9f:b8:
         54:94:34:c7:f9:76:6d:ec:02:36:d5:a6:04:42:d0:00:5d:89:
         ff:f9:36:62:8a:d0:37:6e:95:9f:36:d8:1f:a6:cf:08:1a:ab:
         89:c2:20:17:dc:5b:59:0f:97:22:2d:95:b3:00:6d:a3:66:18:
         b0:3b:b8:d1:74:47:b8:81:58:59:5c:6d:19:e9:7a:e3:d1:86:
         1e:8c:3a:ef:ef:6c:b7:79:55:03:4a:ff:2c:49:3a:44:cf:b2:
         47:46:68:da:f8:b2:24:cc:01:f7:9b:09:b0:6e:99:8f:ef:b2:
         36:d2:82:28:1e:5a:83:ea:20:6d:e6:80:e0:86:44:05:5f:f7:
         dd:8c:62:cc:db:ce:11:b9:5e:2d:be:d2:1d:4d:46:b5:15:96:
         8a:93:37:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlz+snFLsvz/cGlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjA4ZWE3MDUtOWMxOC00MmYyLWI4MmYtYTJmMzRhNmM4MDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c7HmsYGc27KtGSdCg7E+Np2bq3BOCML6hL2
CxmQTuXdtFtkp9F3oP+a4WUK6pJDHUU+xx/5eYN/J7qnWPNSAZni58iBrXIRyJHY
wP+1uco5czlp1dgKAujVAzMnBXOeFZuQmJmO8eJFTbsb3UBrMqmgKiDhEluK2JqA
zt/Bd5k15PCbQfyCmvnjO65dIa5umBbsQUhGd+kXD8r6ZessfiFp+SItrqzA8Ura
HTWc8UPZOVvnI5vQoxecu+KEywmdT3TCG7557mmZ2VEOvwa+XoFtdpE30++Swk4a
5NKiZNrMD4sFI33V6ghsNQIsESX8oXWQItuNXlbiqUaCjMhZRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwj6e/rY7uhFcpCUUjb62DPUHQBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2Q3ZTNkZWUtY2RhYy0z
MjM5LTk4ZWItMGRiZThhYTMzMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgompMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIV4sHO/vvOoa+9sm+Fy8zO8E5qKU3sdypFdo309IHUfKyXFjmZ0nsIG
YFddKgQ+0s61it0mNPgdYvwt5Y3IzGSr4yN3AScn8AJF3E0T32dBOIgXq0CiQ072
7B/nSZFgtYGyLTOpDSi5y3+fuFSUNMf5dm3sAjbVpgRC0ABdif/5NmKK0DdulZ82
2B+mzwgaq4nCIBfcW1kPlyItlbMAbaNmGLA7uNF0R7iBWFlcbRnpeuPRhh6MOu/v
bLd5VQNK/yxJOkTPskdGaNr4siTMAfebCbBumY/vsjbSgigeWoPqIG3mgOCGRAVf
992MYszbzhG5Xi2+0h1NRrUVloqTNww=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:32 2026 by rpki-client