Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa
File:                     a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa (raw, json)
Hash identifier:          G8s2JFOwL+icZHDM3ALBCoMKuy08Wb7T8oi71aIK5Kk=
Subject key identifier:   B8:8D:E2:97:53:1B:84:A1:3F:6A:9D:BD:0D:D8:69:23:22:59:0E:72
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584B891761A7D8953E961B2F1C40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        130.137.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:61:a7:d8:95:3e:96:1b:2f:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=782d93b1-ded5-4d76-aae0-c76a81080dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:5f:a5:76:ec:57:08:ef:1a:c7:ad:30:5e:
                    4d:18:23:18:e7:96:c4:a9:2d:ce:07:56:e1:fb:f4:
                    26:aa:2a:93:85:2d:91:15:59:b9:b1:28:55:f3:7d:
                    33:e5:31:4c:b9:af:0e:a4:2f:5e:e6:96:e7:4a:9c:
                    a3:0f:61:be:4f:b0:99:25:87:91:06:6f:62:4b:03:
                    f0:80:fb:0f:a7:73:13:a3:fa:c4:3b:d1:7d:f6:dd:
                    45:92:dd:cd:d6:03:93:d7:0b:15:03:d8:ce:bd:43:
                    1d:a3:a7:35:32:db:53:82:24:50:94:9b:57:a9:f3:
                    fe:80:56:cf:a5:ee:7c:aa:ac:23:27:ad:55:d9:8a:
                    3a:d2:0a:fd:18:84:c6:d5:36:4c:0f:fd:e6:c5:66:
                    75:d8:0e:81:9e:a7:76:63:5f:3b:c5:1e:d4:b2:21:
                    aa:6b:32:a4:ed:5d:2d:04:28:97:fd:6f:b7:76:5a:
                    d0:e2:90:53:90:72:97:65:7d:1e:6b:7a:e0:12:b2:
                    f6:0a:48:47:ca:9a:76:82:b3:70:7c:0e:d0:10:e2:
                    c3:54:20:ae:b8:b3:98:c5:45:c9:bf:5f:39:a2:74:
                    3e:27:cf:cb:5d:db:9e:13:c4:5f:5e:8d:b3:66:20:
                    c3:d3:6b:81:c4:84:f8:2d:3a:39:ca:71:69:b9:af:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8D:E2:97:53:1B:84:A1:3F:6A:9D:BD:0D:D8:69:23:22:59:0E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a06f6fce-40c6-399a-9ee1-82c5f3a2cf36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:3a:c7:05:7f:08:50:eb:7b:75:ea:00:a3:69:84:83:91:
         69:42:bc:9f:9d:3c:3a:6b:af:a7:c7:f5:bf:27:7f:50:35:e7:
         af:62:99:35:79:27:34:7e:ca:a2:84:6a:fd:37:37:c7:9f:31:
         b2:a9:c4:99:ee:91:42:90:89:18:8e:c6:6f:b5:a5:6a:c6:ff:
         5c:fd:6b:ba:03:8f:96:f2:8a:2a:a1:d6:db:65:63:f2:e0:53:
         b7:6e:24:ad:5c:0b:d3:2c:b6:60:c6:64:70:ae:6f:60:fd:79:
         db:de:36:9b:5c:01:f2:47:9b:36:af:51:08:59:24:21:87:c6:
         3e:2e:e3:18:1f:cc:19:3b:38:01:de:26:52:8d:fd:a4:97:d7:
         57:e9:d3:5e:fa:6c:51:ca:84:45:91:05:b2:11:b8:a7:46:ac:
         a0:92:59:ae:9c:bd:a4:63:db:80:48:2a:74:4b:3b:1c:c4:82:
         af:08:29:a3:0c:a0:06:42:e8:ca:a7:3c:52:f8:56:5f:03:8c:
         48:7f:eb:22:11:ce:2c:14:c8:19:4a:76:7d:04:a2:4b:0e:b2:
         73:4d:45:fe:0c:6a:63:88:92:8c:1c:b5:ef:05:2c:35:fa:72:
         ef:92:5c:7e:3d:58:59:e3:77:d4:d9:13:e6:07:7b:27:0b:16:
         1e:8a:31:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2Gn2JU+lhsvHEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
NzgyZDkzYjEtZGVkNS00ZDc2LWFhZTAtYzc2YTgxMDgwZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFxfpXbsVwjvGsetMF5NGCMY55bEqS3OB1bh
+/QmqiqThS2RFVm5sShV830z5TFMua8OpC9e5pbnSpyjD2G+T7CZJYeRBm9iSwPw
gPsPp3MTo/rEO9F99t1Fkt3N1gOT1wsVA9jOvUMdo6c1MttTgiRQlJtXqfP+gFbP
pe58qqwjJ61V2Yo60gr9GITG1TZMD/3mxWZ12A6Bnqd2Y187xR7UsiGqazKk7V0t
BCiX/W+3dlrQ4pBTkHKXZX0ea3rgErL2CkhHypp2grNwfA7QEOLDVCCuuLOYxUXJ
v185onQ+J8/LXdueE8RfXo2zZiDD02uBxIT4LTo5ynFpua/IYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLiN4pdTG4ShP2qdvQ3YaSMiWQ5yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTA2ZjZmY2UtNDBjNi0z
OTlhLTllZTEtODJjNWYzYTJjZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8oOscFfwhQ63t16gCjaYSDkWlCvJ+dPDprr6fH9b8nf1A1569imTV5
JzR+yqKEav03N8efMbKpxJnukUKQiRiOxm+1pWrG/1z9a7oDj5byiiqh1ttlY/Lg
U7duJK1cC9MstmDGZHCub2D9edveNptcAfJHmzavUQhZJCGHxj4u4xgfzBk7OAHe
JlKN/aSX11fp0176bFHKhEWRBbIRuKdGrKCSWa6cvaRj24BIKnRLOxzEgq8IKaMM
oAZC6MqnPFL4Vl8DjEh/6yIRziwUyBlKdn0EoksOsnNNRf4MamOIkowcte8FLDX6
cu+SXH49WFnjd9TZE+YHeycLFh6KMT0=
-----END CERTIFICATE-----
Generated at Fri Oct 17 04:38:03 2025 by rpki-client