Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa
File:                     b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa (raw, json)
Hash identifier:          Cfs1CE7NTXAiwmd0epcjozeJE8crFZDB7ZaOUzltP10=
Subject key identifier:   0E:45:3B:A2:10:2D:82:A3:0C:23:B3:3F:50:07:20:3E:CD:B8:5B:AF
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AB4EB7C9B13B231B60AF95B80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     8987
IP address blocks:        130.137.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7c:9b:13:b2:31:b6:0a:f9:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4b533f07-d0b2-42c8-a6ab-3427300c484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:82:f0:92:04:a7:3b:a1:07:dc:88:a6:f0:
                    c2:29:09:2a:a0:9b:38:d3:f6:db:06:e9:13:1f:29:
                    9e:95:2e:b8:49:de:b7:88:0e:d0:68:c2:fb:9f:64:
                    75:48:74:c9:8b:19:70:8c:14:00:e7:2d:80:c6:6c:
                    66:a4:54:56:fd:13:c8:a0:e1:88:f0:bf:8e:04:51:
                    69:ce:01:c7:84:fd:78:25:37:a4:98:d9:c5:8d:e4:
                    6a:7d:a5:0f:90:54:73:34:d8:7b:26:74:8d:3e:83:
                    13:fd:25:75:4e:86:c7:18:2e:d6:12:78:cf:fd:36:
                    d0:5b:bf:cf:d6:69:91:26:f1:9a:79:1f:84:f4:da:
                    78:24:27:93:2b:4c:34:bf:e7:0f:4e:9f:02:c6:95:
                    28:26:0a:ea:e6:a1:78:a8:83:45:12:68:05:c4:39:
                    b6:dd:35:65:ce:23:3c:2f:3b:6a:87:0c:18:20:fa:
                    18:9b:2e:7a:0a:cf:b8:76:2e:82:e2:df:6a:0d:90:
                    1b:d8:62:da:d1:29:e4:f0:54:09:e5:2d:dc:e3:44:
                    27:0c:18:1f:bb:22:15:45:2f:44:99:05:81:c4:0f:
                    19:7c:07:f7:28:a3:bd:b9:4b:58:80:6a:ca:69:dc:
                    1c:85:b3:15:e9:6e:cb:10:9f:07:39:9a:84:63:02:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:45:3B:A2:10:2D:82:A3:0C:23:B3:3F:50:07:20:3E:CD:B8:5B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b896351c-ca0a-3341-a0e9-73f6fcefa93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:84:6d:73:7e:f2:be:65:58:37:93:1c:83:6f:c0:d3:db:e7:
         f0:89:7b:e5:95:2b:b1:13:b7:36:0a:2d:0f:0d:9f:5b:38:e1:
         af:06:e5:59:df:d9:a7:2e:f3:25:f5:6c:23:47:79:7d:8d:f4:
         6d:b1:b3:62:94:45:4b:fa:52:ad:7c:8b:52:56:e5:5d:4c:37:
         9b:2b:c7:73:c2:1a:ec:0f:d1:23:e6:b6:69:38:cb:c5:3e:be:
         ac:9b:0a:51:20:6f:4e:39:0d:2a:dd:9d:33:fd:d8:25:7a:86:
         93:18:06:81:45:11:35:39:f4:0d:a4:e3:a9:21:f1:90:fa:2f:
         b4:b0:9b:5b:cf:58:cc:00:63:9f:26:a9:76:89:62:ef:b3:58:
         39:af:e8:3b:cd:ee:42:d0:ea:06:59:49:27:04:48:98:36:09:
         26:2e:44:86:73:da:17:f4:90:3f:b1:a3:8d:ce:18:69:5b:88:
         a4:42:11:53:ef:47:de:6f:b7:6b:ac:c8:db:90:46:47:22:33:
         5f:c3:9b:0b:9c:90:3d:25:b2:2b:72:39:94:26:21:bc:b3:9d:
         7c:e6:34:32:07:e7:10:3a:ac:75:6c:61:0e:4b:21:6f:b2:83:
         88:0e:05:c9:df:e5:ba:c8:10:94:44:06:2f:19:a8:e8:21:35:
         94:ef:99:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063ybE7Ixtgr5W4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NGI1MzNmMDctZDBiMi00MmM4LWE2YWItMzQyNzMwMGM0ODRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA476C8JIEpzuhB9yIpvDCKQkqoJs40/bbBukT
HymelS64Sd63iA7QaML7n2R1SHTJixlwjBQA5y2AxmxmpFRW/RPIoOGI8L+OBFFp
zgHHhP14JTekmNnFjeRqfaUPkFRzNNh7JnSNPoMT/SV1TobHGC7WEnjP/TbQW7/P
1mmRJvGaeR+E9Np4JCeTK0w0v+cPTp8CxpUoJgrq5qF4qINFEmgFxDm23TVlziM8
LztqhwwYIPoYmy56Cs+4di6C4t9qDZAb2GLa0Snk8FQJ5S3c40QnDBgfuyIVRS9E
mQWBxA8ZfAf3KKO9uUtYgGrKadwchbMV6W7LEJ8HOZqEYwIvJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5FO6IQLYKjDCOzP1AHID7NuFuvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg5NjM1MWMtY2EwYS0z
MzQxLWEwZTktNzNmNmZjZWZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGEbXN+8r5lWDeTHINvwNPb5/CJe+WVK7ETtzYKLQ8Nn1s44a8G5Vnf
2acu8yX1bCNHeX2N9G2xs2KURUv6Uq18i1JW5V1MN5srx3PCGuwP0SPmtmk4y8U+
vqybClEgb045DSrdnTP92CV6hpMYBoFFETU59A2k46kh8ZD6L7Swm1vPWMwAY58m
qXaJYu+zWDmv6DvN7kLQ6gZZSScESJg2CSYuRIZz2hf0kD+xo43OGGlbiKRCEVPv
R95vt2usyNuQRkciM1/DmwuckD0lsityOZQmIbyznXzmNDIH5xA6rHVsYQ5LIW+y
g4gOBcnf5brIEJREBi8ZqOghNZTvmXw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:26 2025 by rpki-client