Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b0838e3a-cd2f-3534-b4e6-74e9b0253ef2.roa
File:                     b0838e3a-cd2f-3534-b4e6-74e9b0253ef2.roa (raw, json)
Hash identifier:          VqcRIBvVXvNN4zLUSUEUY/P9XvWZ+yuOMri/qNnToRo=
Subject key identifier:   92:94:E5:6D:4E:50:F0:A5:B4:F4:68:E6:03:4D:21:40:F2:0C:36:41
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AA85BA137C9B95412CFE12780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b0838e3a-cd2f-3534-b4e6-74e9b0253ef2.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        130.137.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a1:37:c9:b9:54:12:cf:e1:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=6561e6db-653b-42fd-8455-54aa72185ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:8b:e5:64:9c:02:fb:62:d6:8f:8f:8d:3f:
                    90:53:2a:60:d3:2b:12:fa:45:c3:b0:75:8b:90:b4:
                    45:55:2a:4e:06:d6:35:d1:5f:64:01:51:a5:72:f9:
                    f5:6f:1a:3b:82:24:b4:74:c3:6f:4a:14:cf:e2:89:
                    8e:90:32:84:12:b1:71:4c:6d:9d:6b:1b:2e:6e:71:
                    92:27:1c:dc:32:39:ba:57:6d:53:b0:ee:80:a9:e8:
                    ac:a1:a1:eb:3a:d1:64:28:30:aa:ca:dc:91:6c:90:
                    28:cf:cd:30:32:9c:23:ed:fc:39:42:52:df:3b:c3:
                    0d:d8:a5:36:c6:02:48:87:c6:64:b8:d2:73:9c:aa:
                    3b:0a:06:bf:31:6f:b8:81:a2:a4:9a:64:43:a3:ee:
                    a3:e6:50:a1:9e:7e:99:5c:75:c8:82:c7:51:04:f1:
                    58:5e:b8:bc:e7:fb:7e:cf:ed:0f:35:b0:f4:9b:eb:
                    92:96:00:56:ee:21:bb:0c:3c:ae:f1:c8:9b:3b:3e:
                    e3:0d:ec:f4:50:f8:5f:6b:24:71:0a:f9:91:21:1b:
                    54:91:c0:05:8b:9e:06:8c:8f:fd:b6:61:8d:db:cf:
                    b3:5c:25:0c:2a:f1:96:dc:ca:bb:c4:07:64:05:46:
                    90:dc:f0:e6:96:cf:55:f6:c3:f4:77:fb:87:ce:d2:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:94:E5:6D:4E:50:F0:A5:B4:F4:68:E6:03:4D:21:40:F2:0C:36:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b0838e3a-cd2f-3534-b4e6-74e9b0253ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:cc:fa:cf:15:b7:c3:e0:d0:bd:11:eb:c7:ab:d0:83:a0:
         db:b5:58:7c:60:ab:1d:36:1c:ff:25:7c:fa:3c:3c:10:d3:ea:
         e5:cc:2a:97:16:1d:07:5b:a3:d7:3d:b2:a7:45:79:1d:56:06:
         88:28:2c:1d:d4:89:c9:77:8f:83:9f:7c:29:1a:b1:41:17:86:
         d1:02:fc:11:3f:e6:c5:37:55:79:38:a0:73:e6:4a:17:bd:2a:
         7b:46:23:b7:4a:90:b5:f5:46:98:89:2b:6e:d3:87:fb:7f:6a:
         80:fb:f7:1e:a3:64:62:0e:6c:11:58:20:34:1a:3b:11:00:b7:
         60:70:10:b6:db:bb:88:f1:6d:54:27:76:91:a4:97:5a:40:87:
         f7:70:34:40:e3:d6:7a:c1:b3:dd:b7:ba:94:81:23:65:69:86:
         f4:4e:2c:10:da:f5:77:22:8f:52:f4:b4:1c:f9:e1:8e:5e:e9:
         c0:80:6b:77:18:91:c9:4d:6c:a5:4f:42:b5:72:d6:88:8f:04:
         54:9e:66:9c:92:b1:33:bd:27:41:73:b0:e9:d2:21:07:22:62:
         6b:90:f8:c2:e5:72:87:82:25:86:7e:02:5d:3a:8a:28:de:33:
         b2:fa:f8:95:d2:37:a1:a1:68:3d:0b:40:63:92:fa:24:5a:97:
         9d:29:7d:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6E3yblUEs/hJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
NjU2MWU2ZGItNjUzYi00MmZkLTg0NTUtNTRhYTcyMTg1Y2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv6L5WScAvti1o+PjT+QUypg0ysS+kXDsHWL
kLRFVSpOBtY10V9kAVGlcvn1bxo7giS0dMNvShTP4omOkDKEErFxTG2daxsubnGS
JxzcMjm6V21TsO6AqeisoaHrOtFkKDCqytyRbJAoz80wMpwj7fw5QlLfO8MN2KU2
xgJIh8ZkuNJznKo7Cga/MW+4gaKkmmRDo+6j5lChnn6ZXHXIgsdRBPFYXri85/t+
z+0PNbD0m+uSlgBW7iG7DDyu8cibOz7jDez0UPhfayRxCvmRIRtUkcAFi54GjI/9
tmGN28+zXCUMKvGW3Mq7xAdkBUaQ3PDmls9V9sP0d/uHztLz1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKU5W1OUPCltPRo5gNNIUDyDDZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjA4MzhlM2EtY2QyZi0z
NTM0LWI0ZTYtNzRlOWIwMjUzZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEE9zPrPFbfD4NC9EevHq9CDoNu1WHxgqx02HP8lfPo8PBDT6uXMKpcW
HQdbo9c9sqdFeR1WBogoLB3Uicl3j4OffCkasUEXhtEC/BE/5sU3VXk4oHPmShe9
KntGI7dKkLX1RpiJK27Th/t/aoD79x6jZGIObBFYIDQaOxEAt2BwELbbu4jxbVQn
dpGkl1pAh/dwNEDj1nrBs923upSBI2VphvROLBDa9Xcij1L0tBz54Y5e6cCAa3cY
kclNbKVPQrVy1oiPBFSeZpySsTO9J0FzsOnSIQciYmuQ+MLlcoeCJYZ+Al06iije
M7L6+JXSN6GhaD0LQGOS+iRal50pfdk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:09 2025 by rpki-client