Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5b2c0f30-763e-3a09-b4b9-2754d5d539e6.roa
File:                     5b2c0f30-763e-3a09-b4b9-2754d5d539e6.roa (raw, json)
Hash identifier:          srKuhtxb6zvljvjGMahJZOG2q1ipDwJt1J0wKQOJxv0=
Subject key identifier:   81:12:FE:4B:4E:92:22:33:61:AA:E4:86:03:4A:3F:8C:5D:D8:3C:CA
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5FDF51B6B101B2681E634800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5b2c0f30-763e-3a09-b4b9-2754d5d539e6.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:51:b6:b1:01:b2:68:1e:63:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=febea695-a799-4b42-8479-02e6c99db3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:4e:77:f4:0f:49:aa:5c:73:7e:8c:65:1a:
                    ad:ff:ba:8a:b7:42:3e:6d:6d:d7:ab:02:dc:f3:4c:
                    45:5e:a5:70:3f:dc:05:a6:4e:c7:52:59:dc:ec:39:
                    57:3a:72:4d:6b:ae:d9:b4:9d:84:ef:9f:ca:ba:0e:
                    3b:83:5a:ea:b3:84:3a:93:e0:e3:38:9e:5a:eb:90:
                    98:08:2b:92:f9:bc:2d:3f:c5:1a:f9:96:5f:06:d5:
                    dc:97:94:f9:3b:df:45:ce:a3:28:c8:e7:15:23:27:
                    8d:fd:28:0c:89:ea:bb:7f:2f:20:a5:cd:a7:5e:56:
                    e7:01:a7:dc:8a:c6:38:0a:5d:c6:8e:7e:ee:87:09:
                    ea:a3:74:e3:2f:d8:cf:6a:e9:b9:79:4a:6e:8e:c8:
                    41:11:7f:dc:8a:97:48:82:92:90:f1:10:50:5e:ad:
                    32:61:ac:19:84:99:8e:ec:3c:4b:e6:df:c5:e9:81:
                    65:80:57:94:be:4e:83:03:fd:a0:21:0e:fc:1d:27:
                    b5:07:21:9e:a9:53:ae:e1:7b:9f:0e:f4:c1:3b:2b:
                    23:61:4f:cb:10:7f:5e:67:6a:44:50:13:6b:53:ad:
                    ba:ee:a7:b7:7a:a0:37:17:0d:01:ab:75:48:4c:f1:
                    ba:eb:fe:e6:40:6b:9b:e9:96:c0:74:49:0c:b5:61:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:FE:4B:4E:92:22:33:61:AA:E4:86:03:4A:3F:8C:5D:D8:3C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5b2c0f30-763e-3a09-b4b9-2754d5d539e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:b2:03:1d:ba:94:5e:32:dd:18:53:92:98:e5:c0:22:52:
         42:a6:ea:f2:dd:1a:36:91:1d:d3:3c:76:15:76:14:0c:5d:78:
         a6:3e:ec:f1:10:ef:b3:a6:66:92:94:de:46:2f:10:57:01:e1:
         5e:5a:96:7c:ad:ad:c3:13:f0:82:75:94:e8:cf:14:c5:db:ce:
         38:2f:9d:da:48:55:48:4a:d5:aa:db:54:cf:b7:91:06:1d:61:
         cd:20:0d:c2:8e:1a:1d:3b:78:02:15:4c:9a:38:55:e6:a3:9c:
         7e:9c:a2:11:38:a8:e5:17:1a:7b:c1:be:69:31:3b:cb:c8:7f:
         e1:35:14:34:6b:a6:fc:f6:6e:38:ce:e9:aa:98:cd:db:b5:36:
         58:77:d8:82:9b:21:09:53:dc:e3:e8:2d:2a:35:8d:09:f2:9b:
         0d:80:0c:c4:80:c7:64:0f:d1:54:80:da:3e:59:d5:6c:00:22:
         e4:49:52:ae:f0:45:4e:0e:7e:9a:82:e9:40:63:e3:17:d8:c8:
         33:d6:d2:0c:c9:a7:82:c2:32:76:4f:0b:17:40:0a:25:ea:df:
         da:df:0c:99:42:8d:e5:aa:16:f4:8b:57:16:ae:17:9a:29:2e:
         80:42:26:c2:49:16:92:f8:b1:bf:8b:37:ca:c9:86:84:56:e2:
         bd:a0:9f:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f31G2sQGyaB5jSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
ZmViZWE2OTUtYTc5OS00YjQyLTg0NzktMDJlNmM5OWRiM2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle9Od/QPSapcc36MZRqt/7qKt0I+bW3XqwLc
80xFXqVwP9wFpk7HUlnc7DlXOnJNa67ZtJ2E75/Kug47g1rqs4Q6k+DjOJ5a65CY
CCuS+bwtP8Ua+ZZfBtXcl5T5O99FzqMoyOcVIyeN/SgMieq7fy8gpc2nXlbnAafc
isY4Cl3Gjn7uhwnqo3TjL9jPaum5eUpujshBEX/cipdIgpKQ8RBQXq0yYawZhJmO
7DxL5t/F6YFlgFeUvk6DA/2gIQ78HSe1ByGeqVOu4XufDvTBOysjYU/LEH9eZ2pE
UBNrU6267qe3eqA3Fw0Bq3VITPG66/7mQGub6ZbAdEkMtWGfEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIES/ktOkiIzYarkhgNKP4xd2DzKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWIyYzBmMzAtNzYzZS0z
YTA5LWI0YjktMjc1NGQ1ZDUzOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu2sgMdupReMt0YU5KY5cAiUkKm6vLdGjaRHdM8dhV2FAxdeKY+7PEQ
77OmZpKU3kYvEFcB4V5alnytrcMT8IJ1lOjPFMXbzjgvndpIVUhK1arbVM+3kQYd
Yc0gDcKOGh07eAIVTJo4VeajnH6cohE4qOUXGnvBvmkxO8vIf+E1FDRrpvz2bjjO
6aqYzdu1Nlh32IKbIQlT3OPoLSo1jQnymw2ADMSAx2QP0VSA2j5Z1WwAIuRJUq7w
RU4OfpqC6UBj4xfYyDPW0gzJp4LCMnZPCxdACiXq39rfDJlCjeWqFvSLVxauF5op
LoBCJsJJFpL4sb+LN8rJhoRW4r2gn+Q=
-----END CERTIFICATE-----
Generated at Sun Jul 19 22:14:58 2026 by rpki-client