Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa
File:                     2ac6c5b1-6113-336e-9800-aec40e75f251.roa (raw, json)
Hash identifier:          Lg/YgFVTHaRxgTymeWoOcCULduKAlEpeSH1nvYdQIUc=
Subject key identifier:   D8:66:6C:3F:47:02:6F:31:B2:70:B5:E5:EF:0B:A9:65:F8:88:34:3F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E94EA5091B0106CF8660A0320
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     8987
IP address blocks:        130.137.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:50:91:b0:10:6c:f8:66:0a:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=65a28176-e3e4-401e-a59a-3f8968df55d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:3c:e3:73:d7:5e:2f:78:9d:b0:91:94:af:
                    73:d7:05:d2:b2:16:71:da:a8:e8:a1:23:d4:96:8b:
                    40:ef:81:60:49:42:d1:68:00:97:c5:67:00:14:12:
                    a5:f0:6f:33:d5:3d:fc:7f:f2:45:21:2c:01:1a:79:
                    12:5c:c6:a3:78:2b:4d:57:9d:be:93:3b:70:a5:38:
                    ed:4b:40:a1:08:b8:36:ff:e9:c5:67:ad:f6:af:e0:
                    70:85:a0:14:d5:97:b5:43:ae:93:93:8c:de:40:f7:
                    81:12:97:76:08:8a:5a:ff:0b:e4:e4:3e:7f:9e:6e:
                    f7:00:a2:f2:9e:77:d9:fe:7f:34:05:32:63:e7:4c:
                    9a:2e:9d:b2:eb:49:c3:43:bf:b8:3c:19:c0:f4:a2:
                    8a:44:8f:fd:6c:5a:57:2b:66:6e:9d:34:bb:86:97:
                    74:bb:23:53:2a:5d:8a:42:b8:66:b9:ce:49:ab:a8:
                    c0:41:8a:5a:11:04:22:4d:81:3c:da:70:74:8f:56:
                    a4:d1:68:5c:c1:98:2c:4b:a8:05:c3:d1:ad:54:0e:
                    19:8f:0e:69:47:41:19:bb:c6:c7:cc:c6:3c:60:b1:
                    d2:41:e2:6e:73:45:44:1a:fe:78:d7:69:6c:f1:dd:
                    47:0f:a9:af:08:e2:81:4d:07:1d:5e:86:6e:8d:6d:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:6C:3F:47:02:6F:31:B2:70:B5:E5:EF:0B:A9:65:F8:88:34:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2ac6c5b1-6113-336e-9800-aec40e75f251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:09:c5:48:ea:31:34:31:08:f4:73:96:f7:e7:bf:ec:46:
         86:1c:62:27:3e:33:a1:c0:e0:43:f2:4f:c8:a4:0c:de:4b:b2:
         68:35:b2:44:c9:87:9c:00:06:ce:5d:2b:78:8f:75:09:bf:a4:
         ef:db:16:52:49:b7:ec:2a:23:29:97:03:82:ff:d8:fc:9d:22:
         15:c2:74:19:42:cb:3d:0b:a7:3a:3e:aa:f3:d2:7f:89:4e:c6:
         f0:9d:8d:56:f2:e6:d3:d3:a0:32:5c:19:9e:e3:86:fc:a2:3f:
         70:7d:53:bf:61:82:bc:ea:ef:76:90:ec:59:00:f1:a1:06:4c:
         ca:44:f3:68:05:47:d0:c4:b6:97:23:f4:6d:45:7e:f0:03:b8:
         c3:23:6e:45:1c:19:2e:45:33:01:55:36:c0:e9:84:60:ac:05:
         36:22:5b:d8:4c:30:be:be:d0:7a:10:6f:9a:a9:da:65:e5:eb:
         84:e9:ed:68:68:bd:14:d2:49:30:b4:3a:8b:37:e2:4c:d3:88:
         c6:fe:c5:f3:75:b9:b2:24:a4:2a:8c:f3:6d:8b:1c:91:d9:87:
         f9:a1:cf:c6:a2:c9:73:3f:5c:07:6b:70:94:fb:8d:21:f3:75:
         b3:dc:cc:2e:b7:2e:40:bb:da:f5:80:b2:73:95:f2:ff:ab:93:
         25:e0:23:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lCRsBBs+GYKAyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
NjVhMjgxNzYtZTNlNC00MDFlLWE1OWEtM2Y4OTY4ZGY1NWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojM843PXXi94nbCRlK9z1wXSshZx2qjooSPU
lotA74FgSULRaACXxWcAFBKl8G8z1T38f/JFISwBGnkSXMajeCtNV52+kztwpTjt
S0ChCLg2/+nFZ632r+BwhaAU1Ze1Q66Tk4zeQPeBEpd2CIpa/wvk5D5/nm73AKLy
nnfZ/n80BTJj50yaLp2y60nDQ7+4PBnA9KKKRI/9bFpXK2ZunTS7hpd0uyNTKl2K
Qrhmuc5Jq6jAQYpaEQQiTYE82nB0j1ak0WhcwZgsS6gFw9GtVA4Zjw5pR0EZu8bH
zMY8YLHSQeJuc0VEGv5412ls8d1HD6mvCOKBTQcdXoZujW0zIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhmbD9HAm8xsnC15e8LqWX4iDQ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmFjNmM1YjEtNjExMy0z
MzZlLTk4MDAtYWVjNDBlNzVmMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYaCcVI6jE0MQj0c5b357/sRoYcYic+M6HA4EPyT8ikDN5Lsmg1skTJ
h5wABs5dK3iPdQm/pO/bFlJJt+wqIymXA4L/2PydIhXCdBlCyz0Lpzo+qvPSf4lO
xvCdjVby5tPToDJcGZ7jhvyiP3B9U79hgrzq73aQ7FkA8aEGTMpE82gFR9DEtpcj
9G1FfvADuMMjbkUcGS5FMwFVNsDphGCsBTYiW9hMML6+0HoQb5qp2mXl64Tp7Who
vRTSSTC0Oos34kzTiMb+xfN1ubIkpCqM822LHJHZh/mhz8aiyXM/XAdrcJT7jSHz
dbPczC63LkC72vWAsnOV8v+rkyXgIzY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:52:10 2026 by rpki-client