Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5db238c6-1721-36ea-b230-33bd44e6a0b5.roa
File:                     5db238c6-1721-36ea-b230-33bd44e6a0b5.roa (raw, json)
Hash identifier:          eUlyzhwhutIcgG2POy6akjMXtCqeUIQzWChDtZekmOs=
Subject key identifier:   A3:0B:1C:79:0F:41:D1:E1:42:D4:67:AA:9C:7C:23:9A:B4:BE:E8:0D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5D14A3FACF43C43F0340FEA0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5db238c6-1721-36ea-b230-33bd44e6a0b5.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     8987
IP address blocks:        130.137.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a3:fa:cf:43:c4:3f:03:40:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=ebbc1c87-72e1-4e97-a916-f8c23ebd23f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:28:8c:6b:ca:a9:1f:06:d4:71:93:da:dc:
                    42:72:c0:b0:f9:5a:65:36:6a:9a:65:3f:2f:aa:19:
                    38:9f:2b:0a:c1:a1:42:c7:02:e7:66:22:dd:ff:3a:
                    76:95:3e:49:5f:e2:0d:2e:03:a6:33:24:89:ef:60:
                    63:f5:06:c3:03:5e:a9:73:11:04:08:95:a2:d9:05:
                    c6:0b:f2:1b:29:b7:f6:6d:c6:b2:96:01:e7:f7:71:
                    38:b6:95:06:ef:08:29:85:f6:85:30:4f:7f:f3:3b:
                    e8:78:08:1c:ce:64:98:ba:0a:7f:fb:55:e1:6f:49:
                    e8:04:ae:8d:71:2e:80:e4:69:58:6e:90:f2:8a:62:
                    a4:23:b0:d6:ce:eb:b8:17:c6:7f:f6:fb:81:16:45:
                    a0:45:11:fd:fa:4f:d5:1e:88:8d:87:59:d2:67:0a:
                    be:83:1b:f0:46:c0:43:a4:d9:44:46:47:27:4e:17:
                    a3:9b:f1:ff:77:c6:9f:15:17:20:23:35:3b:ed:e2:
                    8f:b1:9c:33:89:13:14:64:26:d5:ca:fa:10:45:e7:
                    f8:89:17:2d:68:3e:06:1e:8c:94:3a:45:9e:2e:68:
                    ce:d9:e4:94:a0:34:26:f1:55:8d:69:77:74:dd:b4:
                    bd:12:56:f6:74:53:d7:8e:0f:c1:0e:9e:b0:b1:6b:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:1C:79:0F:41:D1:E1:42:D4:67:AA:9C:7C:23:9A:B4:BE:E8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5db238c6-1721-36ea-b230-33bd44e6a0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:63:2e:9c:19:f8:14:cf:c1:95:41:2f:07:99:a5:2b:fc:4c:
         30:7b:5f:5f:3b:c0:79:9d:e6:e8:b3:c5:f6:de:af:01:2c:94:
         97:a2:07:b1:6e:b5:05:85:a7:f6:af:89:fb:14:8a:02:6a:ee:
         1f:e5:0f:9f:40:49:03:ea:86:dc:3d:32:a7:6a:dd:42:0e:b7:
         dd:16:dc:cb:83:71:28:a5:b0:62:25:ad:4d:67:e2:4f:3e:ef:
         57:d2:6b:18:a7:68:16:1d:d1:28:75:2c:bc:2b:46:55:c5:86:
         ce:2f:7d:fb:17:62:28:af:13:f2:83:cc:4f:25:21:75:28:59:
         af:5a:93:41:1a:fa:15:22:08:35:ef:17:e0:74:e2:96:6d:39:
         1e:43:31:7a:1a:f8:3d:5e:23:30:fc:3a:3e:5a:db:85:d7:bb:
         29:0d:45:ef:ac:ba:be:8d:23:46:ad:91:1a:28:a9:19:48:25:
         05:1f:4f:8c:3c:b5:66:e6:76:fd:03:ba:2d:28:f4:d2:76:d3:
         50:28:5b:0e:89:17:19:84:93:47:b5:78:db:1e:61:ae:a5:de:
         2a:d8:59:72:f5:9b:1d:32:56:60:41:0c:5d:60:24:44:35:d7:
         53:fb:95:1d:5c:9a:71:9f:6c:63:f6:1a:62:06:4e:17:c2:93:
         e1:e1:86:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKP6z0PEPwNA/qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
ZWJiYzFjODctNzJlMS00ZTk3LWE5MTYtZjhjMjNlYmQyM2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArowojGvKqR8G1HGT2txCcsCw+VplNmqaZT8v
qhk4nysKwaFCxwLnZiLd/zp2lT5JX+INLgOmMySJ72Bj9QbDA16pcxEECJWi2QXG
C/IbKbf2bcaylgHn93E4tpUG7wgphfaFME9/8zvoeAgczmSYugp/+1Xhb0noBK6N
cS6A5GlYbpDyimKkI7DWzuu4F8Z/9vuBFkWgRRH9+k/VHoiNh1nSZwq+gxvwRsBD
pNlERkcnThejm/H/d8afFRcgIzU77eKPsZwziRMUZCbVyvoQRef4iRctaD4GHoyU
OkWeLmjO2eSUoDQm8VWNaXd03bS9Elb2dFPXjg/BDp6wsWt6UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMLHHkPQdHhQtRnqpx8I5q0vugNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWRiMjM4YzYtMTcyMS0z
NmVhLWIyMzAtMzNiZDQ0ZTZhMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRjLpwZ+BTPwZVBLweZpSv8TDB7X187wHmd5uizxfberwEslJeiB7Fu
tQWFp/avifsUigJq7h/lD59ASQPqhtw9Mqdq3UIOt90W3MuDcSilsGIlrU1n4k8+
71fSaxinaBYd0Sh1LLwrRlXFhs4vffsXYiivE/KDzE8lIXUoWa9ak0Ea+hUiCDXv
F+B04pZtOR5DMXoa+D1eIzD8Oj5a24XXuykNRe+sur6NI0atkRooqRlIJQUfT4w8
tWbmdv0Dui0o9NJ201AoWw6JFxmEk0e1eNseYa6l3irYWXL1mx0yVmBBDF1gJEQ1
11P7lR1cmnGfbGP2GmIGThfCk+HhhvY=
-----END CERTIFICATE-----
Generated at Sun Jul 19 05:28:07 2026 by rpki-client