Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa
File:                     37fd6b0c-fc80-340d-8f7b-960124f34643.roa (raw, json)
Hash identifier:          prBdXS8ozIMMNmxM1TCe1s/OsA82aREuBhRLCdEWUsE=
Subject key identifier:   96:EC:52:17:75:9C:A7:E7:1A:DE:B3:3F:C9:F6:CB:B6:E7:90:B3:21
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584B2496D3A9A65154EA7396ED00
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     397016
IP address blocks:        130.250.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d3:a9:a6:51:54:ea:73:96:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=690bd1fa-488b-4e29-9087-4a99027377b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:47:08:7f:a4:80:b7:c0:fa:b1:c4:ab:b2:
                    5c:20:2d:7b:c1:bb:80:c9:98:19:5d:72:2c:51:4d:
                    6f:c3:1f:3f:72:cd:c9:b4:6e:38:b2:43:8b:d7:c0:
                    5f:d7:fb:fd:e5:cb:de:8f:09:b0:20:f4:40:f1:f0:
                    73:c6:cd:52:4b:89:48:ef:5d:52:13:8c:d3:5d:32:
                    10:11:68:66:9e:07:53:11:90:8a:ff:b3:b8:75:99:
                    da:8c:42:e9:c0:cd:ca:b6:89:b0:5f:1c:7e:53:43:
                    a5:63:bb:53:f2:62:d0:de:b3:8c:c0:be:cc:88:7d:
                    35:6f:54:bb:97:85:67:e2:c7:49:2d:48:5a:bf:91:
                    ee:7c:5f:3e:22:10:1a:16:65:9a:b0:55:54:08:2e:
                    df:4f:b0:1d:8a:95:65:43:8f:0a:a8:a5:ad:e2:75:
                    d4:2f:4f:84:5a:ff:56:43:46:a3:dd:ad:cd:c6:0d:
                    5b:70:20:e0:5b:59:26:e1:6a:87:ca:b0:d6:96:48:
                    09:39:de:bc:b2:58:81:5d:77:04:2d:75:b6:55:c5:
                    16:00:b9:1c:05:dc:cb:42:a9:99:82:93:59:4c:c7:
                    23:ae:90:21:25:1e:72:14:99:5c:24:49:d5:a5:25:
                    04:e0:9a:e9:e6:6b:7f:81:64:31:de:b7:71:f9:33:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:52:17:75:9C:A7:E7:1A:DE:B3:3F:C9:F6:CB:B6:E7:90:B3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:21:89:65:0f:a6:71:2b:eb:52:c0:e5:02:d1:b5:c4:ec:31:
         2a:b8:02:9b:16:18:b1:ee:e4:da:fe:a1:7c:ee:d1:a0:7a:53:
         d4:8d:13:1a:55:bf:f6:ca:6c:61:44:eb:ba:e6:11:8d:5a:39:
         18:89:2f:46:37:c2:b2:85:80:03:6b:5c:53:ab:b2:58:25:2f:
         c0:f5:69:12:8f:4b:95:e4:4a:66:1b:0b:9a:a9:c3:90:55:28:
         c0:5b:c7:a2:9c:54:f1:b1:11:45:7b:30:47:73:eb:91:50:02:
         55:d1:81:c1:11:79:24:6d:f8:ce:51:47:78:e5:03:63:a3:6e:
         b4:f4:cd:a1:db:5f:40:0c:6b:7e:17:be:9c:0c:21:a8:3a:6d:
         b2:1e:8b:ca:d2:e8:47:a5:1f:2a:e2:92:58:75:39:47:f6:e0:
         85:40:b4:12:b3:c8:04:da:21:32:ff:7f:48:14:a9:88:b4:6b:
         72:89:14:0e:f3:47:b3:75:57:bd:9e:a0:cf:7e:b8:4e:a3:83:
         6c:97:96:5b:f6:fc:56:e9:2c:9e:0d:7f:42:0b:fd:8c:f2:77:
         0a:f2:49:74:c2:85:81:96:2f:0d:42:be:c8:47:d5:0e:e8:00:
         e9:f0:64:60:17:04:ff:86:bc:6e:80:f1:b3:c6:ec:8d:d0:fb:
         f1:b9:ad:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltOpplFU6nOW7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh
OGFhMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NjkwYmQxZmEtNDg4Yi00ZTI5LTkwODctNGE5OTAyNzM3N2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic9HCH+kgLfA+rHEq7JcIC17wbuAyZgZXXIs
UU1vwx8/cs3JtG44skOL18Bf1/v95cvejwmwIPRA8fBzxs1SS4lI711SE4zTXTIQ
EWhmngdTEZCK/7O4dZnajELpwM3KtomwXxx+U0OlY7tT8mLQ3rOMwL7MiH01b1S7
l4Vn4sdJLUhav5HufF8+IhAaFmWasFVUCC7fT7AdipVlQ48KqKWt4nXUL0+EWv9W
Q0aj3a3Nxg1bcCDgW1km4WqHyrDWlkgJOd68sliBXXcELXW2VcUWALkcBdzLQqmZ
gpNZTMcjrpAhJR5yFJlcJEnVpSUE4Jrp5mt/gWQx3rdx+TNpRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbsUhd1nKfnGt6zP8n2y7bnkLMhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl
ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvMzdmZDZiMGMtZmM4MC0z
NDBkLThmN2ItOTYwMTI0ZjM0NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4
ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz
YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh
ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAchiWUPpnEr61LA5QLRtcTsMSq4ApsWGLHu5Nr+oXzu0aB6U9SNExpV
v/bKbGFE67rmEY1aORiJL0Y3wrKFgANrXFOrslglL8D1aRKPS5XkSmYbC5qpw5BV
KMBbx6KcVPGxEUV7MEdz65FQAlXRgcEReSRt+M5RR3jlA2OjbrT0zaHbX0AMa34X
vpwMIag6bbIei8rS6EelHyriklh1OUf24IVAtBKzyATaITL/f0gUqYi0a3KJFA7z
R7N1V72eoM9+uE6jg2yXllv2/FbpLJ4Nf0IL/YzydwrySXTChYGWLw1CvshH1Q7o
AOnwZGAXBP+GvG6A8bPG7I3Q+/G5rcY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:01 2025 by rpki-client