Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7224cd54-2153-346e-b576-cee0a478be1c.roa
File:                     7224cd54-2153-346e-b576-cee0a478be1c.roa (raw, json)
Hash identifier:          JezJbjifpPJ8PJD5+Xd+R0mL9HYPfZm6NE+96cwzWNc=
Subject key identifier:   7B:17:2F:6B:DC:99:82:B3:9F:BD:F6:65:2B:E3:F5:24:31:65:57:BF
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584AD7D113DB5BE5307DCE8E1FC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7224cd54-2153-346e-b576-cee0a478be1c.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        130.137.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:13:db:5b:e5:30:7d:ce:8e:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=cdf1025d-89ad-4225-bd2c-d76a24e95d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:38:2d:d2:b9:d0:f0:31:ee:33:2c:d0:41:fc:
                    3d:25:b1:2e:c3:c0:07:4a:f1:e0:79:fa:13:8e:66:
                    78:20:a7:83:e4:03:b9:f2:5d:6a:9e:53:1d:dd:16:
                    c6:76:6a:02:5a:d2:4d:ef:8c:76:e6:77:42:fd:b7:
                    80:17:97:0d:88:9a:fb:6a:f8:61:79:2b:13:66:e3:
                    85:7f:3f:8e:16:bd:0a:89:04:eb:48:80:37:22:98:
                    3e:61:53:6b:58:75:39:58:f8:ab:72:c7:8e:01:c7:
                    e4:e1:bb:0f:dd:c3:54:b3:09:66:5c:7d:4c:4b:2f:
                    66:bf:c5:8f:58:44:c0:43:2c:11:7b:3b:f0:84:b1:
                    c5:a2:82:64:02:04:5d:48:57:b0:b9:6d:19:b7:04:
                    53:0e:3e:62:05:cf:b9:86:54:9c:0d:8e:1c:a2:fc:
                    5f:cd:c9:4a:21:7d:63:18:56:99:b2:97:a0:8d:e4:
                    7f:c7:8e:30:23:8f:e8:6f:fe:95:47:db:79:45:f3:
                    7c:a4:9b:9a:31:f4:b9:34:14:c2:50:95:fb:07:90:
                    d0:b4:04:2f:33:96:2b:95:d1:0c:de:85:43:56:90:
                    b5:2f:13:20:51:34:6c:84:b4:57:b9:27:4a:7c:ae:
                    91:da:11:73:fc:60:da:34:b9:cc:22:00:a4:80:1c:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:2F:6B:DC:99:82:B3:9F:BD:F6:65:2B:E3:F5:24:31:65:57:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7224cd54-2153-346e-b576-cee0a478be1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:2d:a7:3a:cd:dd:37:f3:6d:74:72:0a:2d:cd:ce:e9:ac:
         aa:6a:a0:24:56:a1:5b:0f:5d:67:54:f7:6f:59:15:25:5c:66:
         94:59:22:a7:59:87:fb:6b:58:0b:c6:d1:d4:ad:cf:4d:9c:bb:
         bd:b0:b4:24:ad:d6:dc:90:b6:ef:7c:47:82:21:c1:59:d5:27:
         a5:c2:3a:d9:6f:2a:16:63:0c:c5:f3:a3:6a:03:35:92:f1:9e:
         5e:01:d7:0d:2e:95:ce:d8:45:d1:ec:bc:86:a1:f2:3b:37:59:
         8b:9c:31:fd:19:f3:a3:5c:61:36:97:2a:94:96:7b:b0:f1:f0:
         f3:dc:6d:38:7e:d6:48:b8:b7:58:32:a5:ed:bf:16:38:c9:c2:
         a4:cf:1d:86:7c:c2:7b:1e:d7:51:cc:09:be:35:8b:d7:28:e2:
         e3:ea:58:2e:f4:d0:f7:12:0f:1d:ac:72:81:ab:62:63:c6:14:
         30:3c:bc:e5:dc:f9:99:79:aa:64:0d:4e:76:a0:16:51:d9:f5:
         6a:55:f9:d5:49:fe:2f:36:9e:5f:19:78:b4:12:8d:ec:15:c8:
         6e:36:20:21:b3:01:03:aa:82:8a:3a:07:7c:1a:be:e7:04:d6:
         70:41:df:0b:cf:27:8e:8f:bb:f0:10:52:15:ef:7b:92:3f:56:
         bd:2c:b8:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RPbW+Uwfc6OH8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
Y2RmMTAyNWQtODlhZC00MjI1LWJkMmMtZDc2YTI0ZTk1ZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTgt0rnQ8DHuMyzQQfw9JbEuw8AHSvHgefoT
jmZ4IKeD5AO58l1qnlMd3RbGdmoCWtJN74x25ndC/beAF5cNiJr7avhheSsTZuOF
fz+OFr0KiQTrSIA3Ipg+YVNrWHU5WPircseOAcfk4bsP3cNUswlmXH1MSy9mv8WP
WETAQywRezvwhLHFooJkAgRdSFewuW0ZtwRTDj5iBc+5hlScDY4covxfzclKIX1j
GFaZspegjeR/x44wI4/ob/6VR9t5RfN8pJuaMfS5NBTCUJX7B5DQtAQvM5YrldEM
3oVDVpC1LxMgUTRshLRXuSdKfK6R2hFz/GDaNLnMIgCkgBzA3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsXL2vcmYKzn732ZSvj9SQxZVe/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzIyNGNkNTQtMjE1My0z
NDZlLWI1NzYtY2VlMGE0NzhiZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE45Lac6zd038210cgotzc7prKpqoCRWoVsPXWdU929ZFSVcZpRZIqdZ
h/trWAvG0dStz02cu72wtCSt1tyQtu98R4IhwVnVJ6XCOtlvKhZjDMXzo2oDNZLx
nl4B1w0ulc7YRdHsvIah8js3WYucMf0Z86NcYTaXKpSWe7Dx8PPcbTh+1ki4t1gy
pe2/FjjJwqTPHYZ8wnse11HMCb41i9co4uPqWC700PcSDx2scoGrYmPGFDA8vOXc
+Zl5qmQNTnagFlHZ9WpV+dVJ/i82nl8ZeLQSjewVyG42ICGzAQOqgoo6B3wavucE
1nBB3wvPJ46Pu/AQUhXve5I/Vr0suLI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:10 2025 by rpki-client