Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/51475ec6-e647-362e-aa57-335ca9d5d267.roa
File:                     51475ec6-e647-362e-aa57-335ca9d5d267.roa (raw, json)
Hash identifier:          pFn0qwlqE2amO4l3TwzbV5AAzirjFapAaMFFNOXtgbQ=
Subject key identifier:   8D:1E:C2:A0:68:19:64:96:B1:10:AF:16:83:D0:8C:01:C1:EB:7B:6C
Certificate issuer:       /CN=595941d6-63c3-448f-a1d8-89c887c32b78
Certificate serial:       010D0C9F4328584B27617D3CCE1610BFBF899E20
Authority key identifier: B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/51475ec6-e647-362e-aa57-335ca9d5d267.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     400797
IP address blocks:        130.250.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:7d:3c:ce:16:10:bf:bf:89:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595941d6-63c3-448f-a1d8-89c887c32b78
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=b7eeae8f-a7dc-48ba-bed0-d5eeb4a3cf50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:35:0d:4d:6a:ac:0b:39:3b:77:46:06:70:
                    b6:31:1f:8c:6e:1a:4c:33:ea:cc:c2:5e:0f:14:a5:
                    3a:e0:54:7a:04:79:da:ab:69:26:d9:78:ff:55:7c:
                    ac:6d:97:03:44:9c:d3:dc:b3:db:0d:e9:f4:44:81:
                    eb:11:0d:52:d8:2d:64:6c:1e:5a:87:7f:4b:04:11:
                    60:48:94:da:02:fa:d8:98:2b:ef:4e:4a:11:b5:f5:
                    31:05:30:83:78:32:c0:10:ad:c9:41:9c:eb:d3:b1:
                    17:b5:3f:f0:40:05:55:5d:c2:c8:3f:63:01:c7:88:
                    8b:5c:73:23:72:0b:61:66:bf:7f:79:d8:22:84:73:
                    d1:75:2f:b3:98:b4:aa:b2:88:dc:f6:fe:0a:dd:52:
                    11:b2:00:65:4b:b4:cc:19:03:a1:ab:71:6a:73:f8:
                    45:47:8d:84:ff:95:6a:51:c3:79:b0:ba:2c:f5:be:
                    cf:cd:40:66:13:e7:4e:bd:55:c0:cb:56:c2:7b:0c:
                    a7:fe:c3:f9:47:8f:d2:b4:11:a4:37:d3:7c:e9:69:
                    cd:ec:6c:f3:a0:03:c4:90:56:4b:b7:d9:55:60:84:
                    47:26:75:0f:11:36:7d:42:80:52:2e:8e:9a:c6:ab:
                    8f:7a:9b:b9:af:d3:95:16:36:6d:58:55:14:32:b0:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1E:C2:A0:68:19:64:96:B1:10:AF:16:83:D0:8C:01:C1:EB:7B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/51475ec6-e647-362e-aa57-335ca9d5d267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a9:be:e4:ba:f6:89:0b:29:81:3b:8c:e7:e9:f4:d7:6d:21:
         15:35:ee:83:f3:36:8c:3f:ad:85:5d:9e:a1:ed:a5:aa:42:47:
         08:2a:e7:d0:36:59:7b:7e:e4:6d:5c:87:2d:f3:40:f4:86:aa:
         df:45:aa:7a:28:02:2c:13:f2:ec:22:02:49:65:fa:78:d9:72:
         46:c5:58:69:0f:e8:ec:16:17:31:af:b1:01:03:b2:f3:64:d8:
         2d:10:be:2a:b7:a1:18:93:e5:af:82:44:32:51:96:b0:09:6c:
         fa:af:1b:d3:5f:86:9c:dd:24:bd:62:f2:97:0b:e0:fe:04:c3:
         98:9c:86:59:b0:54:17:e8:1a:9a:73:41:c4:a8:2d:5c:d5:43:
         12:44:d7:76:68:7e:3b:f1:3c:a4:8a:08:13:50:1d:6e:c3:f7:
         8f:e4:1b:21:63:b3:3f:09:72:2d:72:1e:72:ad:45:3b:02:c1:
         89:37:72:2e:84:0f:d1:5d:9e:69:a1:09:79:a2:a9:f4:5e:30:
         26:67:ec:82:19:23:36:18:59:e1:4b:b1:5d:1f:4d:bd:29:c0:
         89:5f:69:d7:62:3d:d5:ac:22:0a:69:4f:af:b2:0f:ca:12:29:
         ef:34:e2:25:6e:4c:5e:d0:fd:33:b6:e0:8d:ba:c1:75:a3:1e:
         84:90:e7:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYX08zhYQv7+JniAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTk1OTQxZDYtNjNjMy00NDhmLWExZDgtODljODg3YzMy
Yjc4MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk
YjdlZWFlOGYtYTdkYy00OGJhLWJlZDAtZDVlZWI0YTNjZjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmo1DU1qrAs5O3dGBnC2MR+MbhpMM+rMwl4P
FKU64FR6BHnaq2km2Xj/VXysbZcDRJzT3LPbDen0RIHrEQ1S2C1kbB5ah39LBBFg
SJTaAvrYmCvvTkoRtfUxBTCDeDLAEK3JQZzr07EXtT/wQAVVXcLIP2MBx4iLXHMj
cgthZr9/edgihHPRdS+zmLSqsojc9v4K3VIRsgBlS7TMGQOhq3Fqc/hFR42E/5Vq
UcN5sLos9b7PzUBmE+dOvVXAy1bCewyn/sP5R4/StBGkN9N86WnN7GzzoAPEkFZL
t9lVYIRHJnUPETZ9QoBSLo6axquPepu5r9OVFjZtWFUUMrBuEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0ewqBoGWSWsRCvFoPQjAHB63tsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5
NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4ODdjMzJiNzgvNTE0NzVlYzYtZTY0Ny0z
NjJlLWFhNTctMzM1Y2E5ZDVkMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTk1OTQxZDYtNjNjMy00NDhmLWEx
ZDgtODljODg3YzMyYjc4LzU5NTk0MWQ2LTYzYzMtNDQ4Zi1hMWQ4LTg5Yzg4N2Mz
MmI3OC5jcmwwHwYDVR0jBBgwFoAUtkLlfj6k0yOGgGObyDx1noC4Jg0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4
ODdjMzJiNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvqJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqpvuS69okLKYE7jOfp9NdtIRU17oPzNow/rYVdnqHtpapCRwgq59A2
WXt+5G1chy3zQPSGqt9FqnooAiwT8uwiAkll+njZckbFWGkP6OwWFzGvsQEDsvNk
2C0Qviq3oRiT5a+CRDJRlrAJbPqvG9NfhpzdJL1i8pcL4P4Ew5ichlmwVBfoGppz
QcSoLVzVQxJE13ZofjvxPKSKCBNQHW7D94/kGyFjsz8Jci1yHnKtRTsCwYk3ci6E
D9FdnmmhCXmiqfReMCZn7IIZIzYYWeFLsV0fTb0pwIlfaddiPdWsIgppT6+yD8oS
Ke804iVuTF7Q/TO24I26wXWjHoSQ55U=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:16:41 2025 by rpki-client