Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa
File:                     4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa (raw, json)
Hash identifier:          hrNSEOt7sZcP+EYKTJDhkOSXhZg2LoaqNcfiPNeeCMM=
Subject key identifier:   40:55:0F:31:01:5A:9A:D3:46:06:62:E1:2D:BB:B8:F7:FB:52:31:16
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F374D1F18C1226A9D3D57FFC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        130.137.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1f:18:c1:22:6a:9d:3d:57:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=566e64f7-3c46-4129-ac9d-804d1be163b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:59:2e:d0:8b:46:62:d2:56:d7:29:a6:73:
                    5b:2e:b4:95:fa:5b:21:00:a0:01:e2:c8:fe:34:89:
                    87:1e:38:7e:fb:04:35:21:19:a4:ec:de:09:e1:46:
                    df:f5:29:b2:f3:c1:0f:cb:39:29:9f:e2:70:bb:30:
                    8c:7e:aa:fc:59:67:61:ac:a9:4d:61:46:0a:ed:e5:
                    16:2b:a9:92:c9:9e:6d:ab:ce:b6:51:6f:be:bb:27:
                    e1:4a:d6:39:75:db:bf:e2:cc:e4:99:ab:b3:3d:9c:
                    ca:69:44:f7:d1:c1:ff:c4:34:23:86:bf:6c:32:bd:
                    21:cc:72:41:df:ed:e7:dc:2d:f9:23:4e:12:46:e6:
                    a4:78:0c:d4:94:24:43:39:61:e3:ed:d1:4a:25:e8:
                    a2:b6:a4:78:10:5a:c5:76:55:8a:e2:72:e9:52:f0:
                    99:de:3d:95:77:47:1b:86:29:7d:fc:e1:10:a2:13:
                    ae:78:b5:a2:a8:89:60:fc:71:b2:78:c5:20:4c:9b:
                    2d:0f:b4:f8:8b:4a:0b:75:e1:00:a8:13:f3:44:5f:
                    cc:fb:07:44:17:ce:34:c1:fb:4c:59:b1:b0:23:81:
                    ac:87:e5:c8:f0:bd:06:86:1c:36:14:25:ff:7b:da:
                    9c:2d:40:dd:81:61:81:b7:43:b3:54:1a:e0:4b:dd:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:0F:31:01:5A:9A:D3:46:06:62:E1:2D:BB:B8:F7:FB:52:31:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d1b52ac-4d05-3f63-84d1-ccb33f2535a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f0:e8:0e:05:59:a9:dd:1c:1e:fe:0d:54:ef:57:ef:40:49:
         35:c8:34:b1:64:27:41:d5:3d:e2:d2:2a:30:93:8e:4d:d5:19:
         8e:dc:7d:3b:32:c8:4f:ff:fe:18:0b:e8:d3:84:b1:d7:17:44:
         a7:82:c5:56:fc:29:38:d8:e9:3c:65:91:8a:42:54:e0:6e:84:
         27:a8:47:a0:4c:a1:66:12:be:fd:cb:91:2d:08:22:96:65:b1:
         22:91:80:20:fa:21:5b:cd:0d:e6:8a:79:a0:1f:94:7d:f8:ad:
         80:0c:8e:63:12:65:70:35:6c:e9:88:35:af:31:d9:d6:60:61:
         96:84:5a:0a:22:76:63:45:9e:52:1e:41:e3:44:e5:6a:dc:07:
         a8:9a:05:93:f3:0e:22:e8:a7:a0:f4:58:28:b4:0a:53:ec:3f:
         d0:bb:03:75:7e:04:64:50:42:72:63:12:eb:90:c9:33:60:7a:
         66:b5:31:62:a6:cc:ca:c2:c8:74:7b:38:75:8b:be:76:87:e8:
         e1:b6:1f:ce:b7:aa:cb:87:8d:49:ce:91:ae:d5:2d:6a:ab:ba:
         95:d3:79:65:bb:e0:05:0f:64:6e:49:eb:14:5a:f3:03:65:66:
         fb:06:74:a3:44:cc:50:ba:67:75:a7:2f:2b:65:af:7a:2b:28:
         68:c8:73:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TR8YwSJqnT1X/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
NTY2ZTY0ZjctM2M0Ni00MTI5LWFjOWQtODA0ZDFiZTE2M2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm1ZLtCLRmLSVtcppnNbLrSV+lshAKAB4sj+
NImHHjh++wQ1IRmk7N4J4Ubf9Smy88EPyzkpn+JwuzCMfqr8WWdhrKlNYUYK7eUW
K6mSyZ5tq862UW++uyfhStY5ddu/4szkmauzPZzKaUT30cH/xDQjhr9sMr0hzHJB
3+3n3C35I04SRuakeAzUlCRDOWHj7dFKJeiitqR4EFrFdlWK4nLpUvCZ3j2Vd0cb
hil9/OEQohOueLWiqIlg/HGyeMUgTJstD7T4i0oLdeEAqBPzRF/M+wdEF840wftM
WbGwI4Gsh+XI8L0Ghhw2FCX/e9qcLUDdgWGBt0OzVBrgS9005wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBVDzEBWprTRgZi4S27uPf7UjEWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGQxYjUyYWMtNGQwNS0z
ZjYzLTg0ZDEtY2NiMzNmMjUzNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPw6A4FWandHB7+DVTvV+9ASTXINLFkJ0HVPeLSKjCTjk3VGY7cfTsy
yE///hgL6NOEsdcXRKeCxVb8KTjY6TxlkYpCVOBuhCeoR6BMoWYSvv3LkS0IIpZl
sSKRgCD6IVvNDeaKeaAflH34rYAMjmMSZXA1bOmINa8x2dZgYZaEWgoidmNFnlIe
QeNE5WrcB6iaBZPzDiLop6D0WCi0ClPsP9C7A3V+BGRQQnJjEuuQyTNgema1MWKm
zMrCyHR7OHWLvnaH6OG2H863qsuHjUnOka7VLWqrupXTeWW74AUPZG5J6xRa8wNl
ZvsGdKNEzFC6Z3WnLytlr3orKGjIc4Y=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:56 2026 by rpki-client