Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
File:                     6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa (raw, json)
Hash identifier:          59tNNZWMJYsPgUkF10wPpw/MMzxuW1KY4k+BC1t/1r0=
Subject key identifier:   49:8A:15:D4:60:A1:86:C7:8E:35:A1:E1:7C:B4:98:59:80:B2:CE:44
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584BBE402849DDFB934FC0FAFA00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        130.137.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:28:49:dd:fb:93:4f:c0:fa:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=48a7bdc4-ad5b-496d-80b7-62a009df99a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:5a:aa:4b:c6:a6:f6:ac:03:ba:81:c9:9e:
                    c4:51:cd:99:a0:38:56:3e:47:5b:c0:dc:ed:cf:be:
                    47:b0:c4:e4:08:f7:27:45:cb:2f:52:72:18:22:30:
                    fd:17:2a:bc:9b:e7:8f:69:98:70:8e:8b:e6:12:93:
                    42:35:b5:01:ea:78:7c:f7:5d:d0:6d:6d:f0:b6:a6:
                    40:78:4d:d1:8c:76:9a:02:3e:cd:87:fb:6b:8d:e7:
                    01:97:17:d1:a8:d3:bd:30:84:7b:6b:3e:2f:a2:cf:
                    bb:3b:ea:96:bb:d4:58:8e:89:21:6c:2b:db:88:38:
                    5d:21:80:ee:b6:f6:75:0b:e2:9d:7f:e9:a5:81:7b:
                    e6:fb:9c:13:8c:42:a1:76:3b:e1:d6:b2:62:71:4d:
                    54:cf:65:c6:73:e9:b5:7d:4a:5d:8b:37:89:76:62:
                    20:57:ac:29:d6:06:ab:bc:6b:0c:f2:b8:55:9c:b6:
                    f3:f0:e7:af:da:09:fe:e5:39:65:8b:bb:e5:b0:16:
                    d8:79:ca:0b:83:71:20:09:5e:e3:cf:45:c4:e1:4c:
                    72:c0:68:a0:43:bd:d9:61:a0:55:84:c9:9b:65:39:
                    9f:b9:93:1f:ae:fe:2a:0f:4b:76:62:3e:1e:3b:c1:
                    3e:7d:e0:d4:da:25:ca:09:10:58:b6:71:17:78:f7:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:15:D4:60:A1:86:C7:8E:35:A1:E1:7C:B4:98:59:80:B2:CE:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6e23dbe1-cf06-3846-81f9-a358f5d83ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:bf:22:d7:8f:28:7e:9f:0d:90:f0:c4:86:c9:6a:ee:c8:
         f4:e8:1e:38:64:5a:e8:3e:26:55:0d:26:b8:96:db:21:a7:5f:
         97:55:a3:6f:4e:9f:cc:0a:24:60:39:e6:94:11:20:2c:a9:07:
         c8:9b:9d:53:12:09:82:94:d8:d8:e2:87:fb:4e:d4:53:19:68:
         60:42:1b:b5:cb:6a:17:1e:78:c8:23:3f:cd:8e:44:75:d5:6f:
         f3:9d:28:88:70:ea:0a:61:d8:31:eb:2f:c6:c6:8b:56:97:e1:
         1d:1c:06:f9:e0:6b:9f:38:d8:2e:d2:28:e4:42:5b:18:32:79:
         22:3c:9d:5b:f1:3f:65:fa:29:1e:92:1d:87:33:99:7d:9f:80:
         28:a5:19:35:a1:b1:39:c8:82:45:1a:51:36:44:6c:d2:94:9c:
         e4:4e:44:9c:5b:bf:4a:87:1b:72:b4:4a:f1:5d:7b:ee:b4:20:
         ec:f4:de:f1:25:2b:f6:aa:db:a3:fc:33:9e:22:4d:0c:22:4b:
         c7:d8:37:e2:89:80:25:76:7e:0c:9a:33:7e:e9:91:96:21:e8:
         83:1a:71:53:90:0a:00:2a:9d:84:e9:8b:b4:b3:a7:15:eb:05:
         df:f8:0e:db:a5:bb:0d:c5:65:b2:48:8c:8f:51:d9:ee:a3:9f:
         9b:bc:a6:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QChJ3fuTT8D6+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NDhhN2JkYzQtYWQ1Yi00OTZkLTgwYjctNjJhMDA5ZGY5OWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl5aqkvGpvasA7qByZ7EUc2ZoDhWPkdbwNzt
z75HsMTkCPcnRcsvUnIYIjD9Fyq8m+ePaZhwjovmEpNCNbUB6nh8913QbW3wtqZA
eE3RjHaaAj7Nh/trjecBlxfRqNO9MIR7az4vos+7O+qWu9RYjokhbCvbiDhdIYDu
tvZ1C+Kdf+mlgXvm+5wTjEKhdjvh1rJicU1Uz2XGc+m1fUpdizeJdmIgV6wp1gar
vGsM8rhVnLbz8Oev2gn+5Tlli7vlsBbYecoLg3EgCV7jz0XE4UxywGigQ73ZYaBV
hMmbZTmfuZMfrv4qD0t2Yj4eO8E+feDU2iXKCRBYtnEXePfhCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmKFdRgoYbHjjWh4Xy0mFmAss5EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNmUyM2RiZTEtY2YwNi0z
ODQ2LTgxZjktYTM1OGY1ZDgzY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEesvyLXjyh+nw2Q8MSGyWruyPToHjhkWug+JlUNJriW2yGnX5dVo29O
n8wKJGA55pQRICypB8ibnVMSCYKU2Njih/tO1FMZaGBCG7XLahceeMgjP82ORHXV
b/OdKIhw6gph2DHrL8bGi1aX4R0cBvnga5842C7SKORCWxgyeSI8nVvxP2X6KR6S
HYczmX2fgCilGTWhsTnIgkUaUTZEbNKUnORORJxbv0qHG3K0SvFde+60IOz03vEl
K/aq26P8M54iTQwiS8fYN+KJgCV2fgyaM37pkZYh6IMacVOQCgAqnYTpi7SzpxXr
Bd/4Dtuluw3FZbJIjI9R2e6jn5u8prY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:58 2025 by rpki-client