Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/baf2010e-1789-353a-a4c9-fdd1885da1c6.roa
File:                     baf2010e-1789-353a-a4c9-fdd1885da1c6.roa (raw, json)
Hash identifier:          Dk3+jiygGyo6uXD6Fjs57Hzin+Iu6F1eaVI9tmf1bOs=
Subject key identifier:   7D:E0:9F:27:13:2F:9F:96:B4:82:7F:B1:AF:6A:22:11:B3:EE:DD:60
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D55BA48EE7C1D151263867D00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/baf2010e-1789-353a-a4c9-fdd1885da1c6.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        130.137.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:48:ee:7c:1d:15:12:63:86:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=832c31d6-beab-4a52-b3b1-c0afa0e558bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:bd:b5:7d:95:2c:60:53:59:11:67:68:fc:
                    36:8f:8a:b7:3c:1a:8a:30:22:42:e2:db:c8:ea:db:
                    77:ef:bf:6a:eb:2f:dc:ec:47:4d:7d:61:8e:24:40:
                    f5:3a:48:eb:a1:09:23:b8:b8:2e:da:19:cc:12:a0:
                    fa:85:a4:b5:f4:d0:c9:5f:d0:6f:82:89:79:64:d5:
                    39:4a:88:b9:db:af:7b:4a:3c:3d:57:8d:96:a1:11:
                    1c:3d:9f:36:04:5f:cc:69:fd:79:13:9a:13:03:cf:
                    6a:a8:68:87:5e:68:b7:be:ed:b4:0c:1c:a4:03:1f:
                    5f:72:6d:3d:31:83:7c:f6:b6:c0:f5:dc:6e:49:59:
                    42:b9:5e:3f:bf:9c:f3:ad:dc:34:ce:74:42:1e:86:
                    da:00:99:5e:b3:59:88:95:33:6f:77:d4:7b:f9:16:
                    14:40:f1:5a:26:14:ce:d5:b5:78:51:e9:8a:b4:23:
                    1a:2f:be:7e:08:07:8b:3f:db:06:25:23:d1:89:5e:
                    5c:95:20:9b:5d:95:46:56:fd:d7:c9:e6:57:b3:e6:
                    54:23:b3:b7:a1:db:bf:92:c0:85:42:53:93:5f:76:
                    fb:af:c2:df:91:9c:ba:51:70:3a:d3:5a:9d:6e:fa:
                    43:ba:70:34:00:fa:78:a8:5a:d3:83:a4:f4:23:d1:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E0:9F:27:13:2F:9F:96:B4:82:7F:B1:AF:6A:22:11:B3:EE:DD:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/baf2010e-1789-353a-a4c9-fdd1885da1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:45:af:9c:83:c4:ca:de:b3:76:19:9a:d4:a9:5d:2d:fe:08:
         fe:e8:af:73:97:93:10:67:77:56:d9:fd:04:90:ce:b2:3b:58:
         29:1a:e2:b1:cc:e1:aa:2d:c6:67:d3:9a:94:4f:bb:69:d4:8d:
         54:ce:aa:83:1d:9f:1c:1a:47:2d:06:b9:75:cc:18:51:21:e5:
         20:35:f9:f6:4b:c8:a1:5c:30:4a:f4:d6:af:d7:50:6d:09:4a:
         f7:7b:0b:e3:81:dd:61:83:f1:9f:36:ef:68:9a:c4:e3:c6:0a:
         6f:23:9a:e7:15:d2:2a:ae:fd:6f:20:3a:8c:32:14:39:de:5a:
         17:13:2f:6a:29:f0:d7:a7:aa:d4:87:60:1f:50:cc:fd:52:61:
         ff:af:73:86:43:bf:74:a4:fe:41:ac:99:89:fd:33:a9:c0:f7:
         de:6f:15:e7:5c:36:9d:1f:49:4e:39:4b:ea:8f:04:e7:cd:ca:
         f0:98:ff:c6:99:49:79:f1:c5:a4:5e:0d:71:8d:b5:ac:aa:0c:
         e5:79:d7:88:0f:95:2d:3d:5c:80:ad:1b:72:7e:27:32:99:bb:
         1b:80:91:aa:37:b1:d2:73:8e:96:5e:2d:94:40:c5:11:a2:16:
         67:a5:ed:35:e7:00:6e:0b:c3:78:ef:53:70:f0:47:d5:90:e6:
         3e:e3:3f:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukjufB0VEmOGfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ODMyYzMxZDYtYmVhYi00YTUyLWIzYjEtYzBhZmEwZTU1OGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwq9tX2VLGBTWRFnaPw2j4q3PBqKMCJC4tvI
6tt3779q6y/c7EdNfWGOJED1OkjroQkjuLgu2hnMEqD6haS19NDJX9Bvgol5ZNU5
Soi52697Sjw9V42WoREcPZ82BF/Maf15E5oTA89qqGiHXmi3vu20DBykAx9fcm09
MYN89rbA9dxuSVlCuV4/v5zzrdw0znRCHobaAJles1mIlTNvd9R7+RYUQPFaJhTO
1bV4UemKtCMaL75+CAeLP9sGJSPRiV5clSCbXZVGVv3XyeZXs+ZUI7O3odu/ksCF
QlOTX3b7r8LfkZy6UXA601qdbvpDunA0APp4qFrTg6T0I9FydQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3gnycTL5+WtIJ/sa9qIhGz7t1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmFmMjAxMGUtMTc4OS0z
NTNhLWE0YzktZmRkMTg4NWRhMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpFr5yDxMres3YZmtSpXS3+CP7or3OXkxBnd1bZ/QSQzrI7WCka4rHM
4aotxmfTmpRPu2nUjVTOqoMdnxwaRy0GuXXMGFEh5SA1+fZLyKFcMEr01q/XUG0J
Svd7C+OB3WGD8Z8272iaxOPGCm8jmucV0iqu/W8gOowyFDneWhcTL2op8NenqtSH
YB9QzP1SYf+vc4ZDv3Sk/kGsmYn9M6nA995vFedcNp0fSU45S+qPBOfNyvCY/8aZ
SXnxxaReDXGNtayqDOV514gPlS09XICtG3J+JzKZuxuAkao3sdJzjpZeLZRAxRGi
Fmel7TXnAG4Lw3jvU3DwR9WQ5j7jP2A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:58 2026 by rpki-client