Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa
File:                     4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa (raw, json)
Hash identifier:          qi0/pAT634/XbzS1C3xiVc/i2HULJp0KAIxNaNSjDmU=
Subject key identifier:   1A:5E:08:22:F8:66:BB:C4:4F:00:9C:D7:99:E4:F2:F2:8C:28:B8:7E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B89176A027626F663B5B10200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:6a:02:76:26:f6:63:b5:b1:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=3630243b-7b6e-4bc4-b7e3-ad1451d5df1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:66:b0:f5:e1:74:b4:31:f4:cc:a5:bc:1d:
                    1e:fd:83:9f:76:fd:3f:96:6f:ee:6f:13:40:8b:dc:
                    7e:4d:b0:13:90:2f:e6:c6:c7:e2:40:7e:d1:48:63:
                    4d:48:7d:f3:6d:5c:32:e4:89:ab:61:2f:ff:2e:d3:
                    a8:2d:a0:1e:d5:8c:c7:35:88:ec:ac:12:f4:fd:1e:
                    c0:08:c7:08:56:04:92:22:73:db:69:44:44:e3:64:
                    32:3e:f2:7a:b2:f2:cc:14:64:63:bb:35:51:53:03:
                    9f:c5:77:12:d6:cb:fc:1c:be:4e:ad:b3:10:2e:97:
                    f0:3f:65:e3:b6:f7:89:0b:97:c9:84:bf:a5:34:b6:
                    b7:00:f6:d6:3e:f4:ac:d7:b5:bb:e8:38:65:67:86:
                    f3:ee:69:b0:e6:58:b5:62:b8:05:cf:09:8d:db:de:
                    f5:f8:6d:ea:c0:88:1a:ad:85:ed:43:45:09:80:17:
                    c8:44:89:84:9f:96:58:bd:ff:94:de:80:25:bf:4f:
                    91:71:48:91:b3:89:33:c3:46:c6:85:c9:58:72:73:
                    33:20:98:9d:f3:6d:15:b4:89:66:af:24:c3:68:bd:
                    66:77:d6:c7:8f:36:f5:b4:86:9c:04:69:1a:04:b3:
                    2e:1b:1b:5a:7f:10:cd:00:f3:0a:4c:67:b5:04:de:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:08:22:F8:66:BB:C4:4F:00:9C:D7:99:E4:F2:F2:8C:28:B8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4c1b1ce2-4371-3a4b-abfe-684fa7833e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ad:27:67:8a:ae:62:16:16:80:dd:a8:0c:e2:3a:67:9a:9f:
         a7:5d:cb:ad:13:f3:4e:fb:0c:c3:3b:f0:74:41:60:84:bb:ff:
         35:b4:22:29:2d:02:74:57:da:30:32:2a:69:bb:ae:dc:fb:91:
         68:22:04:94:7d:10:29:31:74:1e:c3:ba:ac:19:92:72:eb:1a:
         3e:2d:d6:9d:23:31:04:7e:8b:b7:65:dd:65:e5:da:b8:2d:da:
         7e:1f:3a:f7:28:8b:74:2d:71:f2:7e:9c:9d:95:e1:ce:f6:69:
         2c:f7:e3:2d:f1:93:da:13:0e:6e:0e:fd:17:a6:2a:dc:1f:fc:
         00:93:7f:a2:31:32:a0:c1:35:05:62:f6:16:86:c8:e1:a8:ca:
         f4:c9:b1:a8:52:6d:3e:5e:bd:94:24:7d:93:2b:58:e9:49:45:
         eb:b7:7a:4f:98:71:a8:b6:97:e7:a7:73:2a:19:05:ef:94:9b:
         d3:af:11:1f:4e:7d:16:b7:43:2e:b8:9b:4b:e4:f7:6b:4d:4b:
         8e:47:ed:95:28:d4:d9:b4:1b:da:44:7b:10:b5:de:32:dd:44:
         4f:7d:da:34:49:94:56:b2:68:7e:cb:d2:0d:6f:ef:0b:cf:4b:
         64:08:02:c8:10:bf:38:b6:c4:39:a0:67:9f:88:c2:e0:d3:83:
         f7:b7:16:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2oCdib2Y7WxAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
MzYzMDI0M2ItN2I2ZS00YmM0LWI3ZTMtYWQxNDUxZDVkZjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbNmsPXhdLQx9MylvB0e/YOfdv0/lm/ubxNA
i9x+TbATkC/mxsfiQH7RSGNNSH3zbVwy5ImrYS//LtOoLaAe1YzHNYjsrBL0/R7A
CMcIVgSSInPbaURE42QyPvJ6svLMFGRjuzVRUwOfxXcS1sv8HL5OrbMQLpfwP2Xj
tveJC5fJhL+lNLa3APbWPvSs17W76DhlZ4bz7mmw5li1YrgFzwmN2971+G3qwIga
rYXtQ0UJgBfIRImEn5ZYvf+U3oAlv0+RcUiRs4kzw0bGhclYcnMzIJid820VtIlm
ryTDaL1md9bHjzb1tIacBGkaBLMuGxtafxDNAPMKTGe1BN4SJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpeCCL4ZrvETwCc15nk8vKMKLh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGMxYjFjZTItNDM3MS0z
YTRiLWFiZmUtNjg0ZmE3ODMzZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACtJ2eKrmIWFoDdqAziOmean6ddy60T8077DMM78HRBYIS7/zW0Iikt
AnRX2jAyKmm7rtz7kWgiBJR9ECkxdB7DuqwZknLrGj4t1p0jMQR+i7dl3WXl2rgt
2n4fOvcoi3QtcfJ+nJ2V4c72aSz34y3xk9oTDm4O/RemKtwf/ACTf6IxMqDBNQVi
9haGyOGoyvTJsahSbT5evZQkfZMrWOlJReu3ek+Ycai2l+encyoZBe+Um9OvER9O
fRa3Qy64m0vk92tNS45H7ZUo1Nm0G9pEexC13jLdRE992jRJlFayaH7L0g1v7wvP
S2QIAsgQvzi2xDmgZ5+IwuDTg/e3FnU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:46 2025 by rpki-client