Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/892c5fd8-e4d3-3962-ac31-f9097755a182.roa
File:                     892c5fd8-e4d3-3962-ac31-f9097755a182.roa (raw, json)
Hash identifier:          ZxG+IGH31AibBtt4Wgrpi6ucFMTUw/2rMceIhNV3n0w=
Subject key identifier:   BB:0A:13:15:FC:54:7C:85:83:24:FF:14:3F:55:FD:FE:BC:44:1E:9D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85BAAFD8FF9435300D06840
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/892c5fd8-e4d3-3962-ac31-f9097755a182.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        130.137.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:aa:fd:8f:f9:43:53:00:d0:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=3fecb096-edec-4907-88e3-291fa61f949b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:35:90:7c:61:f7:bd:bb:fc:05:99:31:30:
                    44:13:15:90:bc:73:64:7d:74:b9:2b:83:06:f5:4c:
                    9e:3c:dd:01:87:96:f3:f4:95:4e:84:24:c8:c4:48:
                    c0:ca:d7:b9:fd:e8:a3:90:a1:81:c7:a2:9c:35:ce:
                    45:7f:c5:83:51:a0:cd:a4:27:87:41:34:8d:9c:d3:
                    85:01:98:46:ce:5d:e0:05:eb:aa:14:7e:72:e6:dc:
                    d6:0f:03:56:fd:cb:95:e8:7b:e9:9a:58:d5:09:b2:
                    9b:f4:e9:71:e8:f7:04:48:76:75:82:bb:54:90:7f:
                    2c:f3:e4:e5:c8:ba:81:62:41:13:5e:95:69:68:c5:
                    7d:ce:98:00:f4:8b:6c:ff:9b:76:79:70:62:35:a4:
                    a9:34:b6:38:d1:35:54:65:19:d9:21:1a:77:1e:18:
                    d7:a3:e7:84:de:b4:f0:61:88:91:ef:93:cb:bd:01:
                    75:6e:c3:cb:c5:cf:76:72:b6:32:74:21:1d:3d:ec:
                    fe:0c:f8:e0:33:98:c0:5f:80:56:5f:7f:dc:53:58:
                    86:8f:a4:18:85:4c:05:22:d2:f0:16:27:99:41:82:
                    87:a0:99:9d:72:67:65:6a:7f:37:6f:df:60:da:ff:
                    29:18:94:d5:9b:00:75:8f:39:23:ed:4f:dc:4a:ae:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0A:13:15:FC:54:7C:85:83:24:FF:14:3F:55:FD:FE:BC:44:1E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/892c5fd8-e4d3-3962-ac31-f9097755a182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:27:88:0d:9f:4d:a0:3d:d8:50:87:39:e9:74:c5:06:db:50:
         fa:03:ea:8d:4f:4f:7c:a0:4f:7f:9f:3a:f3:f7:0a:ca:29:97:
         7e:b9:4f:0b:93:f2:a4:25:a7:8b:9c:47:b1:09:0e:97:9e:81:
         80:f7:b5:16:ff:02:6c:fd:7a:9f:6a:94:4a:de:a5:6b:2c:52:
         d1:44:3a:06:f4:66:f0:02:4a:37:ef:9a:0a:0a:ab:ec:cb:d2:
         c8:34:2d:7f:8e:16:66:c8:cd:56:cf:94:38:d1:43:1f:5f:3d:
         6b:6b:a9:28:5c:fc:4a:9a:99:a0:f7:1f:44:dd:26:6c:d5:08:
         cb:69:3d:2f:95:f6:66:73:c2:f1:dd:53:fe:16:2e:82:8c:77:
         53:72:54:1c:d6:b3:ae:e4:3f:49:e8:df:09:29:2c:02:17:7d:
         b4:47:d5:3d:66:d4:bc:9d:4c:17:57:df:72:04:8f:aa:33:e8:
         b6:86:b7:c8:25:3e:47:16:7e:59:69:80:f0:e8:f6:f9:c8:db:
         fb:02:bd:a7:d5:1b:cd:e2:62:a1:b2:33:be:82:1a:fe:91:31:
         8a:9e:6f:e3:19:68:80:15:99:51:bc:54:43:db:af:be:ef:d8:
         9c:ca:3a:37:4e:cf:c9:64:66:be:e9:9b:e9:71:28:a0:0b:d9:
         4c:7f:4e:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6r9j/lDUwDQaEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
M2ZlY2IwOTYtZWRlYy00OTA3LTg4ZTMtMjkxZmE2MWY5NDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRQ1kHxh9727/AWZMTBEExWQvHNkfXS5K4MG
9UyePN0Bh5bz9JVOhCTIxEjAyte5/eijkKGBx6KcNc5Ff8WDUaDNpCeHQTSNnNOF
AZhGzl3gBeuqFH5y5tzWDwNW/cuV6HvpmljVCbKb9Olx6PcESHZ1grtUkH8s8+Tl
yLqBYkETXpVpaMV9zpgA9Its/5t2eXBiNaSpNLY40TVUZRnZIRp3HhjXo+eE3rTw
YYiR75PLvQF1bsPLxc92crYydCEdPez+DPjgM5jAX4BWX3/cU1iGj6QYhUwFItLw
FieZQYKHoJmdcmdlan83b99g2v8pGJTVmwB1jzkj7U/cSq6YYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsKExX8VHyFgyT/FD9V/f68RB6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODkyYzVmZDgtZTRkMy0z
OTYyLWFjMzEtZjkwOTc3NTVhMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkniA2fTaA92FCHOel0xQbbUPoD6o1PT3ygT3+fOvP3Csopl365TwuT
8qQlp4ucR7EJDpeegYD3tRb/Amz9ep9qlErepWssUtFEOgb0ZvACSjfvmgoKq+zL
0sg0LX+OFmbIzVbPlDjRQx9fPWtrqShc/EqamaD3H0TdJmzVCMtpPS+V9mZzwvHd
U/4WLoKMd1NyVBzWs67kP0no3wkpLAIXfbRH1T1m1LydTBdX33IEj6oz6LaGt8gl
PkcWfllpgPDo9vnI2/sCvafVG83iYqGyM76CGv6RMYqeb+MZaIAVmVG8VEPbr77v
2JzKOjdOz8lkZr7pm+lxKKAL2Ux/Tis=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:29 2025 by rpki-client