Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/32e8ff0b-da8e-338f-b3b0-7387fbb6d196.roa
File:                     32e8ff0b-da8e-338f-b3b0-7387fbb6d196.roa (raw, json)
Hash identifier:          lx74ELsHFyYBcS8+OLAdUC8v33wOkDKEOguDHBwvG6M=
Subject key identifier:   07:29:37:9C:B6:60:DB:50:8C:0C:AC:D6:AE:B0:8F:63:D2:E5:B5:CD
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584F1897913B1F6567A42194DE00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/32e8ff0b-da8e-338f-b3b0-7387fbb6d196.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        130.137.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:91:3b:1f:65:67:a4:21:94:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=fdfa4a34-c5f2-45ec-a819-e8bc310472a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:11:4a:9f:4b:9e:95:6d:58:cb:e4:58:3d:
                    4b:82:9c:fe:b3:b7:f8:a5:d0:bc:79:f5:90:6a:1e:
                    25:08:be:0e:05:4b:44:6f:82:7e:ee:4b:d2:ee:af:
                    58:d0:51:2a:93:1b:30:d8:3f:3c:2e:c5:52:93:30:
                    5d:d4:98:a9:65:37:9f:d7:97:b4:17:2c:c4:77:be:
                    dc:64:0d:05:30:41:46:ba:e2:a3:bf:c0:cb:de:1e:
                    ae:30:7c:dc:b1:a6:07:26:36:05:c5:93:5a:ad:30:
                    38:59:da:22:37:48:6b:5a:bd:d4:65:d0:aa:8c:cc:
                    a5:19:6e:b9:e8:6c:aa:07:ce:de:5d:ce:c2:f5:39:
                    70:1d:2a:d9:09:ca:2e:f2:68:6d:00:37:d4:5f:f3:
                    b4:8f:ce:cc:24:0c:65:a4:6a:d4:4b:8e:33:27:28:
                    5d:10:c4:e9:42:7d:15:7b:4d:1a:8a:98:b2:7b:c8:
                    99:d5:bb:88:26:e5:73:2c:3f:92:c1:3d:ce:dc:91:
                    5e:f4:97:a5:71:82:ee:5b:cd:ba:90:89:48:e5:29:
                    bf:c5:95:e8:a0:e5:a6:d7:7a:1e:07:08:3b:7e:48:
                    da:71:ae:e9:7b:b7:20:59:99:b6:7d:b1:1a:ce:ac:
                    0b:b5:83:7b:e8:0d:3e:16:da:ae:cb:b8:3f:0a:97:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:37:9C:B6:60:DB:50:8C:0C:AC:D6:AE:B0:8F:63:D2:E5:B5:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/32e8ff0b-da8e-338f-b3b0-7387fbb6d196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:09:ac:c3:08:c4:22:8b:f5:33:e8:9b:c3:ea:99:28:e7:
         1f:9e:33:d7:3b:f4:e5:3d:ec:9e:c8:d0:ad:b5:46:aa:fb:96:
         7a:1b:09:72:52:c9:92:f4:11:fb:e0:54:18:a2:08:7c:32:b6:
         0b:0a:d7:11:59:e6:2d:d8:2c:bd:e7:4a:29:e0:2f:6a:c0:0d:
         6c:60:bf:4d:98:aa:57:03:72:c9:5f:01:fb:bf:25:d0:1f:1b:
         17:46:0f:b4:67:29:17:ba:ce:d2:39:86:f3:44:ab:12:57:e7:
         f5:ed:e4:82:7a:d7:99:f5:e1:43:90:16:19:db:4f:a5:15:20:
         49:a1:3a:9b:0b:db:08:09:1c:02:1f:e6:2e:3c:56:41:8b:9a:
         68:b1:02:aa:04:e3:7f:5e:07:f2:1f:bf:0d:d9:73:2d:f7:3b:
         30:fa:63:30:c6:9c:3c:ea:7f:64:aa:1f:7e:45:24:9a:a1:fb:
         05:27:d3:14:35:de:2c:5d:b8:8a:80:10:64:86:eb:4d:78:4a:
         c4:3e:de:51:48:3c:ba:f3:ca:67:8a:8f:0c:7a:9d:90:8e:2f:
         c2:a3:bf:97:7f:3e:2a:6e:1f:66:55:22:3a:22:a1:c5:b0:c0:
         ee:ee:78:99:00:d4:2b:8b:50:8f:76:21:bb:ed:71:85:f7:1b:
         3c:30:6d:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5E7H2VnpCGU3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZmRmYTRhMzQtYzVmMi00NWVjLWE4MTktZThiYzMxMDQ3MmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A8RSp9LnpVtWMvkWD1Lgpz+s7f4pdC8efWQ
ah4lCL4OBUtEb4J+7kvS7q9Y0FEqkxsw2D88LsVSkzBd1JipZTef15e0FyzEd77c
ZA0FMEFGuuKjv8DL3h6uMHzcsaYHJjYFxZNarTA4WdoiN0hrWr3UZdCqjMylGW65
6GyqB87eXc7C9TlwHSrZCcou8mhtADfUX/O0j87MJAxlpGrUS44zJyhdEMTpQn0V
e00aipiye8iZ1buIJuVzLD+SwT3O3JFe9JelcYLuW826kIlI5Sm/xZXooOWm13oe
Bwg7fkjaca7pe7cgWZm2fbEazqwLtYN76A0+Ftquy7g/CpftlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcpN5y2YNtQjAys1q6wj2PS5bXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzJlOGZmMGItZGE4ZS0z
MzhmLWIzYjAtNzM4N2ZiYjZkMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+ICazDCMQii/Uz6JvD6pko5x+eM9c79OU97J7I0K21Rqr7lnobCXJS
yZL0EfvgVBiiCHwytgsK1xFZ5i3YLL3nSingL2rADWxgv02YqlcDcslfAfu/JdAf
GxdGD7RnKRe6ztI5hvNEqxJX5/Xt5IJ615n14UOQFhnbT6UVIEmhOpsL2wgJHAIf
5i48VkGLmmixAqoE439eB/Ifvw3Zcy33OzD6YzDGnDzqf2SqH35FJJqh+wUn0xQ1
3ixduIqAEGSG6014SsQ+3lFIPLrzymeKjwx6nZCOL8Kjv5d/PipuH2ZVIjoiocWw
wO7ueJkA1CuLUI92IbvtcYX3GzwwbXE=
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:51:44 2026 by rpki-client