Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa
File:                     a47d3352-10f4-3335-bf83-7e70062a6086.roa (raw, json)
Hash identifier:          i/hyRYMRIHh8EqekzEeHjlPltZavVkvg4nXUNr7Ejmo=
Subject key identifier:   E4:B7:78:4F:7E:B5:FB:3B:E9:71:2E:85:5A:A8:14:C4:16:45:BD:DE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E5D14A54246C6465160897580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.137.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a5:42:46:c6:46:51:60:89:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=e95aed8c-7cac-414e-aecb-385fb88b00ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:14:7b:e8:03:44:c9:f1:9e:59:50:aa:32:
                    ba:0e:44:3c:7a:14:b8:fe:76:20:22:6d:3d:99:b2:
                    bc:80:5c:f3:42:a3:a4:20:29:c1:08:8c:a6:05:49:
                    46:8d:7e:e6:27:bf:6b:f8:7b:6b:13:f2:7a:9a:ff:
                    06:f1:63:e4:18:0d:33:ee:e6:ee:b2:08:b5:21:b8:
                    d9:63:2a:cf:78:e7:24:9f:53:d2:56:15:a3:09:38:
                    44:2b:33:0b:f0:81:30:d6:0b:c0:3f:58:a6:58:b6:
                    c7:2a:7a:ec:e7:2a:92:8d:09:fa:16:a7:d9:f3:c1:
                    8e:7e:d3:4f:6a:ea:af:57:a4:25:20:de:b5:16:e5:
                    ba:e1:e8:6a:d1:54:3c:2f:e1:2f:ee:33:56:53:50:
                    49:c8:72:72:17:84:6d:3a:f8:9e:6a:e3:ac:56:a7:
                    a1:fb:91:c7:28:33:ab:3c:64:4c:6e:57:4c:55:e8:
                    07:77:af:30:af:48:b9:7a:d4:3a:81:ae:8e:5a:75:
                    8e:13:a3:fb:ba:48:cc:33:af:0d:52:fd:94:1e:65:
                    ef:f6:9b:e7:c2:df:c5:30:6a:f5:b9:d5:bb:aa:8b:
                    a0:dc:75:78:61:81:55:76:17:b6:13:39:2b:22:85:
                    ae:74:b8:b9:bd:af:cd:63:5c:04:52:ae:64:22:0d:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:78:4F:7E:B5:FB:3B:E9:71:2E:85:5A:A8:14:C4:16:45:BD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:e0:40:3d:98:5f:d9:91:9d:d9:c0:8b:c4:70:1a:16:ac:
         7d:22:ef:20:93:42:76:de:fa:e8:61:1d:6b:03:fb:d5:06:7f:
         b9:36:18:f2:0c:d9:12:21:3b:1e:00:b1:dc:6e:56:6e:72:d9:
         36:f7:71:c2:7c:bd:a0:97:68:4f:20:76:88:b1:4d:ba:d2:e1:
         8c:db:02:f8:0c:01:6a:e9:ba:af:f9:23:d0:38:4e:b2:bd:38:
         33:ef:39:c7:28:1c:bf:bf:0b:56:9a:e2:f9:7f:c4:e2:71:7a:
         7b:ea:40:85:9b:a5:bc:6d:84:7d:3b:55:36:aa:54:a7:26:4d:
         cd:b8:56:38:7c:27:4c:69:32:62:47:08:64:29:9f:06:30:23:
         79:86:54:ef:83:b2:fd:fc:08:88:44:71:40:06:a5:27:ff:45:
         92:c1:44:d8:f6:aa:16:ca:6c:16:ed:84:23:cd:3e:1e:3d:da:
         7d:81:90:70:3b:b8:c0:c4:a3:ab:8e:83:40:3b:74:42:0c:4e:
         09:ab:47:ff:6a:ac:32:ae:db:b9:28:d4:72:21:da:6d:95:28:
         a3:a4:3f:2d:02:0b:89:2e:52:d7:c7:39:87:be:7f:66:de:6d:
         9e:5c:ec:62:71:d4:d9:d6:2c:c8:3e:fb:4b:b4:6d:b4:72:c3:
         5a:ad:59:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKVCRsZGUWCJdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
ZTk1YWVkOGMtN2NhYy00MTRlLWFlY2ItMzg1ZmI4OGIwMGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXMUe+gDRMnxnllQqjK6DkQ8ehS4/nYgIm09
mbK8gFzzQqOkICnBCIymBUlGjX7mJ79r+HtrE/J6mv8G8WPkGA0z7ubusgi1IbjZ
YyrPeOckn1PSVhWjCThEKzML8IEw1gvAP1imWLbHKnrs5yqSjQn6FqfZ88GOftNP
auqvV6QlIN61FuW64ehq0VQ8L+Ev7jNWU1BJyHJyF4RtOvieauOsVqeh+5HHKDOr
PGRMbldMVegHd68wr0i5etQ6ga6OWnWOE6P7ukjMM68NUv2UHmXv9pvnwt/FMGr1
udW7qoug3HV4YYFVdhe2EzkrIoWudLi5va/NY1wEUq5kIg3ghwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOS3eE9+tfs76XEuhVqoFMQWRb3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTQ3ZDMzNTItMTBmNC0z
MzM1LWJmODMtN2U3MDA2MmE2MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgombMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByF4EA9mF/ZkZ3ZwIvEcBoWrH0i7yCTQnbe+uhhHWsD+9UGf7k2GPIM
2RIhOx4AsdxuVm5y2Tb3ccJ8vaCXaE8gdoixTbrS4YzbAvgMAWrpuq/5I9A4TrK9
ODPvOccoHL+/C1aa4vl/xOJxenvqQIWbpbxthH07VTaqVKcmTc24Vjh8J0xpMmJH
CGQpnwYwI3mGVO+Dsv38CIhEcUAGpSf/RZLBRNj2qhbKbBbthCPNPh492n2BkHA7
uMDEo6uOg0A7dEIMTgmrR/9qrDKu27ko1HIh2m2VKKOkPy0CC4kuUtfHOYe+f2be
bZ5c7GJx1NnWLMg++0u0bbRyw1qtWZo=
-----END CERTIFICATE-----
Generated at Sun Jul 19 22:15:41 2026 by rpki-client