Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f93074d3-caa8-37fb-b28a-32deb6fabdde.roa
File:                     f93074d3-caa8-37fb-b28a-32deb6fabdde.roa (raw, json)
Hash identifier:          tUkRzJDe1hXHA+vMZe2eTEcRN9cR+dOe+HA/2YaWD6k=
Subject key identifier:   5A:2E:61:37:7B:BA:BB:5E:BB:21:74:8E:6A:01:74:B1:9E:16:6F:30
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AB650E5179056B401C9CC5E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f93074d3-caa8-37fb-b28a-32deb6fabdde.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        130.137.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e5:17:90:56:b4:01:c9:cc:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=a5adc25e-6a24-4063-94b4-7710ff007fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:38:d7:f9:ce:d4:c7:3f:2a:6f:bb:ba:aa:
                    47:91:72:c3:d5:9b:97:98:48:cd:bd:a2:69:1b:3f:
                    94:f2:0e:9c:1a:22:e6:87:82:1b:f0:67:45:97:94:
                    fb:6c:8e:d8:a3:5a:57:88:49:6f:e3:f9:45:b8:29:
                    ee:ab:20:fb:69:42:90:18:13:95:a6:2f:53:83:cc:
                    30:36:36:fa:55:d3:72:c2:00:05:31:5e:b4:fc:fd:
                    ce:94:95:09:d1:39:3b:e3:fe:63:36:a5:41:3d:83:
                    0d:3a:9d:fd:4b:18:17:f8:47:c3:02:64:1c:a2:f2:
                    75:2c:0e:3a:0d:b6:f8:f4:13:27:07:32:2c:6e:67:
                    c6:73:8c:11:bb:d7:c3:e3:16:c5:c2:d8:19:04:6c:
                    cf:80:df:35:7e:25:b6:e1:54:b1:6c:eb:ae:4d:69:
                    39:d2:fd:e4:57:ff:76:fd:de:97:44:4b:47:70:4d:
                    69:3d:7b:58:c0:56:6c:aa:2a:e5:f5:c2:c8:6b:29:
                    e9:5d:28:41:aa:c9:38:dd:1b:0a:fb:70:ee:ef:66:
                    83:c1:68:92:4c:d3:76:1e:c4:90:42:7a:f9:23:19:
                    57:f8:0d:22:7a:3a:41:4c:0b:c4:ce:f7:bb:75:c2:
                    78:5d:65:03:72:72:ee:93:6d:f7:b8:37:9a:33:e7:
                    61:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:61:37:7B:BA:BB:5E:BB:21:74:8E:6A:01:74:B1:9E:16:6F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f93074d3-caa8-37fb-b28a-32deb6fabdde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:7e:83:e1:70:df:96:8c:2d:a9:46:62:e7:ae:25:80:b2:
         59:d1:62:c0:0a:0c:9c:35:0b:e6:69:d4:dd:68:59:98:57:c3:
         2f:94:83:a4:f6:cb:77:7a:56:bc:82:42:a0:58:e6:49:61:f6:
         c0:6f:5e:b6:29:a4:2a:40:52:2d:16:99:18:c1:af:ae:53:6a:
         38:fa:f1:83:89:f3:ea:74:e3:76:39:fe:02:24:56:94:14:93:
         ae:bc:2c:d7:5f:51:f5:a1:61:aa:0a:7d:dc:43:da:c4:51:f9:
         ab:db:7a:ae:6b:88:40:7c:e7:c7:3d:36:d8:ea:b2:28:b1:f7:
         36:53:46:f6:f8:3d:40:43:bb:29:2b:75:34:f8:77:e4:f4:89:
         17:b8:fe:cf:e6:e3:a0:c1:62:40:c5:50:24:13:ce:fd:07:85:
         d9:b6:fa:d8:91:d0:4c:50:ad:6d:fc:24:ca:3c:ba:c3:fb:26:
         56:71:26:45:0d:00:78:56:d6:28:26:80:e3:6d:82:c6:2f:a3:
         0c:84:eb:de:1f:3e:a2:bc:c8:c4:3b:7d:a2:99:68:13:bc:94:
         b6:ee:7f:cc:82:04:32:54:c1:38:ff:e0:f5:11:de:ca:04:3e:
         64:49:81:97:79:53:f8:fb:66:32:79:01:c0:fd:47:97:20:23:
         b9:01:62:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOUXkFa0AcnMXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
YTVhZGMyNWUtNmEyNC00MDYzLTk0YjQtNzcxMGZmMDA3ZmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6841/nO1Mc/Km+7uqpHkXLD1ZuXmEjNvaJp
Gz+U8g6cGiLmh4Ib8GdFl5T7bI7Yo1pXiElv4/lFuCnuqyD7aUKQGBOVpi9Tg8ww
Njb6VdNywgAFMV60/P3OlJUJ0Tk74/5jNqVBPYMNOp39SxgX+EfDAmQcovJ1LA46
Dbb49BMnBzIsbmfGc4wRu9fD4xbFwtgZBGzPgN81fiW24VSxbOuuTWk50v3kV/92
/d6XREtHcE1pPXtYwFZsqirl9cLIaynpXShBqsk43RsK+3Du72aDwWiSTNN2HsSQ
Qnr5IxlX+A0iejpBTAvEzve7dcJ4XWUDcnLuk233uDeaM+dh4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFouYTd7urteuyF0jmoBdLGeFm8wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZjkzMDc0ZDMtY2FhOC0z
N2ZiLWIyOGEtMzJkZWI2ZmFiZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9QfoPhcN+WjC2pRmLnriWAslnRYsAKDJw1C+Zp1N1oWZhXwy+Ug6T2
y3d6VryCQqBY5klh9sBvXrYppCpAUi0WmRjBr65Tajj68YOJ8+p043Y5/gIkVpQU
k668LNdfUfWhYaoKfdxD2sRR+avbeq5riEB858c9Ntjqsiix9zZTRvb4PUBDuykr
dTT4d+T0iRe4/s/m46DBYkDFUCQTzv0Hhdm2+tiR0ExQrW38JMo8usP7JlZxJkUN
AHhW1igmgONtgsYvowyE694fPqK8yMQ7faKZaBO8lLbuf8yCBDJUwTj/4PUR3soE
PmRJgZd5U/j7ZjJ5AcD9R5cgI7kBYk8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:47:56 2025 by rpki-client