Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7b3186c2-6414-34b2-8137-40fa2d10f69d.roa
File:                     7b3186c2-6414-34b2-8137-40fa2d10f69d.roa (raw, json)
Hash identifier:          E0mv7QLPQnaovYPIx2bT4hZzNMuPEEY5xCbTGFehOhM=
Subject key identifier:   72:68:83:1B:24:CD:52:1E:3E:3E:C5:A6:78:7E:FE:2F:95:27:41:C6
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85B9FB6DF97B7D8E8C6CAA0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7b3186c2-6414-34b2-8137-40fa2d10f69d.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.137.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:9f:b6:df:97:b7:d8:e8:c6:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=fd48480c-97b5-4e4d-b094-405164334772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:88:89:b7:f7:05:d9:05:13:02:44:9e:d8:
                    0a:87:d7:63:80:37:ab:b8:5a:b7:91:c5:d2:fe:5c:
                    f0:69:0a:3e:e5:55:99:da:2d:e2:dc:14:73:f1:c6:
                    0b:b2:fd:fc:11:9d:bc:45:ab:57:c3:3a:15:23:83:
                    de:ba:78:b9:23:94:6c:5a:19:d9:29:6c:bd:79:3b:
                    18:f7:0c:d7:e0:7b:e6:3b:46:d4:70:c7:0f:7d:65:
                    03:24:28:bc:d4:af:b5:a5:d4:53:ca:b8:0f:d9:56:
                    d1:ef:7a:c1:74:38:cc:40:c3:de:b0:9c:94:f0:ab:
                    b1:21:93:52:37:15:05:c8:61:26:4a:28:13:64:01:
                    72:3a:e3:f0:3d:53:f0:8e:68:0b:0b:3b:d7:c0:34:
                    69:82:70:ca:cc:3e:af:19:00:9c:76:4c:45:f0:68:
                    66:af:e2:46:8c:0f:83:20:95:27:68:27:3d:b5:35:
                    d9:39:7c:00:ab:c4:df:05:80:85:05:fd:c1:59:d0:
                    e4:ec:fa:45:fe:14:c5:68:1c:fd:51:4a:ef:20:ab:
                    5b:15:bf:4a:98:61:81:b1:33:94:c1:36:50:e0:7c:
                    87:94:90:75:af:c8:96:a2:a0:8b:0a:ff:2b:44:c2:
                    d0:d5:26:da:2e:e2:b1:9e:ed:42:fd:1e:b3:57:17:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:83:1B:24:CD:52:1E:3E:3E:C5:A6:78:7E:FE:2F:95:27:41:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7b3186c2-6414-34b2-8137-40fa2d10f69d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:14:93:74:f2:a4:c2:8a:ae:f7:61:16:b0:8e:fe:7f:be:88:
         75:66:6f:5c:1d:78:13:87:bd:5d:7a:0a:c1:c2:5f:55:5e:f3:
         22:4e:eb:83:c9:60:e6:01:b1:7f:13:9f:9e:2c:08:9a:77:be:
         b0:e9:8f:1e:1c:71:0e:c7:60:19:cd:12:a8:7a:be:56:78:e7:
         28:2f:39:98:ff:02:50:e7:bc:26:b6:80:7f:e1:bd:09:86:2d:
         02:88:1e:41:32:fa:2f:87:0c:0b:ee:af:14:16:0b:26:ab:6d:
         ba:20:15:47:67:93:0a:63:ac:30:20:57:8c:b0:be:f3:44:bf:
         e7:b4:4f:3d:72:df:e9:9e:25:e0:d2:9e:c9:ee:66:b9:52:c0:
         56:07:75:70:24:aa:95:10:fe:f8:1b:29:40:07:1a:66:e0:d4:
         46:00:43:d1:51:85:03:60:4b:63:b5:ee:a2:c8:f0:26:23:da:
         c4:ff:1c:70:50:ac:8c:02:50:33:65:ae:9c:b6:2f:1c:ce:6f:
         a6:dd:ff:c6:88:e4:01:cc:c3:c1:00:d2:2a:c7:ee:82:0b:fe:
         dc:77:74:e4:0b:3f:86:5d:81:15:95:f8:ff:00:85:39:8f:47:
         e2:87:67:be:e2:e0:b5:b2:94:02:ee:11:0f:2b:be:5b:b9:28:
         09:02:ba:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW5+235e32OjGyqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
ZmQ0ODQ4MGMtOTdiNS00ZTRkLWIwOTQtNDA1MTY0MzM0NzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOeIibf3BdkFEwJEntgKh9djgDeruFq3kcXS
/lzwaQo+5VWZ2i3i3BRz8cYLsv38EZ28RatXwzoVI4Peuni5I5RsWhnZKWy9eTsY
9wzX4HvmO0bUcMcPfWUDJCi81K+1pdRTyrgP2VbR73rBdDjMQMPesJyU8KuxIZNS
NxUFyGEmSigTZAFyOuPwPVPwjmgLCzvXwDRpgnDKzD6vGQCcdkxF8Ghmr+JGjA+D
IJUnaCc9tTXZOXwAq8TfBYCFBf3BWdDk7PpF/hTFaBz9UUrvIKtbFb9KmGGBsTOU
wTZQ4HyHlJB1r8iWoqCLCv8rRMLQ1SbaLuKxnu1C/R6zVxeliwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJogxskzVIePj7Fpnh+/i+VJ0HGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvN2IzMTg2YzItNjQxNC0z
NGIyLTgxMzctNDBmYTJkMTBmNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQUk3TypMKKrvdhFrCO/n++iHVmb1wdeBOHvV16CsHCX1Ve8yJO64PJ
YOYBsX8Tn54sCJp3vrDpjx4ccQ7HYBnNEqh6vlZ45ygvOZj/AlDnvCa2gH/hvQmG
LQKIHkEy+i+HDAvurxQWCyarbbogFUdnkwpjrDAgV4ywvvNEv+e0Tz1y3+meJeDS
nsnuZrlSwFYHdXAkqpUQ/vgbKUAHGmbg1EYAQ9FRhQNgS2O17qLI8CYj2sT/HHBQ
rIwCUDNlrpy2LxzOb6bd/8aI5AHMw8EA0irH7oIL/tx3dOQLP4ZdgRWV+P8AhTmP
R+KHZ77i4LWylALuEQ8rvlu5KAkCurE=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:34 2025 by rpki-client