Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f1bff84-8698-316f-8bb3-3a96c15910bc.roa
File:                     1f1bff84-8698-316f-8bb3-3a96c15910bc.roa (raw, json)
Hash identifier:          1KXB36ZhZQfZxSiKBxlUF+MApxg/0Fud3xxuteC4JmQ=
Subject key identifier:   7C:8B:CE:5D:2E:F0:78:D9:1B:D9:ED:8A:F8:47:89:CA:6A:B4:DB:6A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584DA8157056B7B3564A6E9CBE00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f1bff84-8698-316f-8bb3-3a96c15910bc.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        130.137.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:70:56:b7:b3:56:4a:6e:9c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=6f78a3a5-072c-4a07-8801-996183ce927f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:ab:20:4e:02:8b:87:47:8d:6d:24:eb:95:
                    fa:df:31:65:87:ac:9a:a9:d8:5b:09:db:e3:4a:51:
                    a7:3b:0d:72:42:46:df:d0:6b:3d:74:65:df:3e:f7:
                    a5:21:cf:f5:e2:9a:e3:94:2a:2e:c8:34:58:17:83:
                    e1:d1:72:2d:f7:08:2f:67:4d:02:7b:90:15:e4:5d:
                    10:d3:d0:34:56:af:88:d2:a8:82:ef:db:8a:68:3b:
                    e0:53:4d:f9:b3:84:39:8e:66:60:2a:ec:dc:a1:33:
                    96:e5:74:59:f2:15:8c:41:8b:91:aa:85:2a:41:f8:
                    74:11:5a:00:ce:f3:66:85:03:22:99:cd:28:fd:f5:
                    08:7e:1b:27:07:55:1c:c8:61:98:4d:63:55:bd:00:
                    90:18:85:08:5c:da:fa:0c:d4:52:59:6c:b7:d8:0e:
                    f0:17:fa:c2:ba:c9:2a:48:38:41:18:b7:8d:d1:d1:
                    c1:e6:40:a2:ab:51:b9:17:ac:5b:74:73:45:16:04:
                    01:94:e3:b9:a7:95:71:eb:fc:39:94:3c:56:43:97:
                    3d:d4:93:83:8b:79:fd:6a:43:5d:42:50:7a:06:4f:
                    d4:d1:3c:3b:ba:54:56:91:27:76:fd:3b:f0:9e:6f:
                    97:52:e3:8f:0e:79:a0:71:d6:4a:b1:27:3a:fb:12:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8B:CE:5D:2E:F0:78:D9:1B:D9:ED:8A:F8:47:89:CA:6A:B4:DB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f1bff84-8698-316f-8bb3-3a96c15910bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:6a:a5:d9:1c:f0:1a:40:55:c4:28:c7:92:7b:b8:1e:56:
         92:25:5f:af:68:ef:ad:e3:02:72:18:14:09:60:94:d9:07:0e:
         49:45:6c:73:be:d4:28:58:bf:1b:fe:0b:58:9d:3b:5f:92:57:
         ca:4f:e0:e3:e7:85:a8:68:9f:e4:0d:61:c0:91:82:3c:2b:f6:
         b7:5a:ea:b0:41:76:a2:b9:c5:62:1c:a5:01:cf:14:d1:91:b0:
         e9:49:08:b6:63:3b:d4:41:fc:63:66:25:63:ff:8b:3a:88:c4:
         e5:a6:d4:fc:73:5a:97:0f:15:0a:e3:68:24:b7:98:ee:5e:46:
         ae:8d:69:12:89:4d:03:93:7c:71:d1:17:1b:a6:69:f9:7a:3b:
         7d:51:87:5b:b8:ed:8a:49:87:81:da:0b:22:7f:34:8d:16:83:
         97:c7:72:79:7f:35:ae:91:0f:f6:29:4d:e2:a8:e9:28:99:9e:
         a2:3d:ad:94:a6:f3:4c:08:09:bc:70:7a:98:54:4f:88:35:1d:
         71:a5:f6:2c:8a:0c:d6:06:86:1f:d9:75:e7:0a:2b:32:4c:19:
         86:45:9e:e3:ab:8e:eb:d6:84:9a:71:46:bb:e0:9c:66:8c:62:
         08:67:2a:9a:3e:ea:ca:1a:ad:8f:eb:07:7e:60:d4:4e:ba:07:
         ff:f2:92:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXBWt7NWSm6cvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
NmY3OGEzYTUtMDcyYy00YTA3LTg4MDEtOTk2MTgzY2U5MjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yerIE4Ci4dHjW0k65X63zFlh6yaqdhbCdvj
SlGnOw1yQkbf0Gs9dGXfPvelIc/14prjlCouyDRYF4Ph0XIt9wgvZ00Ce5AV5F0Q
09A0Vq+I0qiC79uKaDvgU035s4Q5jmZgKuzcoTOW5XRZ8hWMQYuRqoUqQfh0EVoA
zvNmhQMimc0o/fUIfhsnB1UcyGGYTWNVvQCQGIUIXNr6DNRSWWy32A7wF/rCuskq
SDhBGLeN0dHB5kCiq1G5F6xbdHNFFgQBlOO5p5Vx6/w5lDxWQ5c91JODi3n9akNd
QlB6Bk/U0Tw7ulRWkSd2/Tvwnm+XUuOPDnmgcdZKsSc6+xLnkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyLzl0u8HjZG9ntivhHicpqtNtqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWYxYmZmODQtODY5OC0z
MTZmLThiYjMtM2E5NmMxNTkxMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABp2aqXZHPAaQFXEKMeSe7geVpIlX69o763jAnIYFAlglNkHDklFbHO+
1ChYvxv+C1idO1+SV8pP4OPnhahon+QNYcCRgjwr9rda6rBBdqK5xWIcpQHPFNGR
sOlJCLZjO9RB/GNmJWP/izqIxOWm1PxzWpcPFQrjaCS3mO5eRq6NaRKJTQOTfHHR
Fxumafl6O31Rh1u47YpJh4HaCyJ/NI0Wg5fHcnl/Na6RD/YpTeKo6SiZnqI9rZSm
80wICbxwephUT4g1HXGl9iyKDNYGhh/ZdecKKzJMGYZFnuOrjuvWhJpxRrvgnGaM
YghnKpo+6soarY/rB35g1E66B//ykv8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:16:05 2026 by rpki-client