Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/93bb1051-e2bc-3ada-8196-249f3705956e.roa
File:                     93bb1051-e2bc-3ada-8196-249f3705956e.roa (raw, json)
Hash identifier:          gIRXPuLeML9iGg2VknCk2Bj1JWAez7QJS7AVa+1jtdc=
Subject key identifier:   50:0F:A6:8A:22:CE:85:87:3A:9D:29:6C:E1:A6:02:9F:2D:56:78:CD
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584D492A642329ADF9FE9ACF6680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/93bb1051-e2bc-3ada-8196-249f3705956e.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        130.137.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:64:23:29:ad:f9:fe:9a:cf:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=03db5268-0e11-485f-a80e-6724f1252498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:2f:4c:cd:55:94:00:53:4a:b2:6a:26:a2:
                    39:c3:ee:fc:44:10:88:dd:fd:fe:fc:5f:97:e2:3d:
                    f5:bf:c6:05:93:07:0f:a4:bf:49:2d:6f:57:93:37:
                    cd:f9:1b:cf:9c:4c:d6:91:ba:04:12:eb:77:ec:62:
                    18:12:d9:6a:f3:62:06:81:67:e9:d2:8b:64:86:61:
                    b7:e7:60:d2:f8:5f:94:53:2a:68:78:79:e8:4c:c5:
                    bf:e8:64:57:b0:83:0a:73:a2:63:98:96:b8:1a:2f:
                    63:ae:7d:f1:3d:ce:a0:5c:48:57:83:4b:57:7f:33:
                    db:9d:8e:68:8d:30:17:be:60:03:51:cb:36:84:38:
                    6b:4c:2a:29:b9:98:ba:8f:07:c1:0e:ff:9d:1e:99:
                    c2:22:ac:e5:99:6e:d1:45:27:8a:fe:ee:b7:e4:be:
                    60:a1:c2:e8:8a:7d:bf:27:e1:8c:7c:74:8e:9f:06:
                    08:38:8f:c7:d4:4e:9b:e0:ed:dd:a4:fb:ae:23:72:
                    e3:4c:4e:d0:a0:7a:7c:e7:46:e9:c2:be:1d:97:fd:
                    5d:14:9f:65:e7:a8:37:4c:1d:ae:e3:2d:84:ae:1d:
                    82:1c:cb:2f:76:2d:1d:ce:fe:ed:92:c8:eb:01:31:
                    16:9c:46:e5:50:7a:40:b2:fc:d8:6a:08:c8:9d:6e:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:A6:8A:22:CE:85:87:3A:9D:29:6C:E1:A6:02:9F:2D:56:78:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/93bb1051-e2bc-3ada-8196-249f3705956e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:aa:00:b5:18:3d:60:c1:47:63:d5:65:55:27:d0:0d:ab:
         2b:ca:22:bc:d8:55:2d:24:52:4b:e1:19:8b:16:8b:ab:e2:78:
         63:a4:5b:ff:07:04:c4:0f:b6:9a:87:7a:05:71:85:75:fb:ba:
         24:51:58:ad:d7:2d:a4:49:71:5a:45:31:45:4f:2a:98:dd:6b:
         0b:44:12:3b:4f:8b:8c:37:66:57:ad:67:13:ac:af:c7:68:a3:
         6c:d5:06:1f:51:3d:c5:42:b2:bf:7b:72:b1:62:a5:8d:b8:30:
         98:2f:1b:3b:48:3d:6a:20:e4:f2:d0:39:38:dd:f2:36:5e:4f:
         67:47:33:f1:21:58:47:fb:2b:a1:41:1f:c2:1b:f4:9d:87:dd:
         29:a4:5d:b6:36:ce:a7:53:28:77:cd:3b:ad:2e:3b:4c:29:90:
         7e:8e:3a:88:5c:83:56:98:aa:a3:ae:ad:3f:91:35:1f:ef:a8:
         99:8c:75:a5:71:5f:86:a6:45:3b:fb:37:4a:49:78:4f:57:cd:
         4d:ff:8a:16:ec:c6:c3:1d:b7:89:e5:82:5a:14:40:d7:78:80:
         b3:11:79:d1:03:9b:e0:7b:05:a1:02:35:55:13:91:e8:b0:d6:
         b1:ed:a3:03:5e:b4:00:79:eb:7d:26:de:85:d5:5e:be:58:9c:
         c1:d1:33:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmQjKa35/prPZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
MDNkYjUyNjgtMGUxMS00ODVmLWE4MGUtNjcyNGYxMjUyNDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTQvTM1VlABTSrJqJqI5w+78RBCI3f3+/F+X
4j31v8YFkwcPpL9JLW9XkzfN+RvPnEzWkboEEut37GIYEtlq82IGgWfp0otkhmG3
52DS+F+UUypoeHnoTMW/6GRXsIMKc6JjmJa4Gi9jrn3xPc6gXEhXg0tXfzPbnY5o
jTAXvmADUcs2hDhrTCopuZi6jwfBDv+dHpnCIqzlmW7RRSeK/u635L5gocLoin2/
J+GMfHSOnwYIOI/H1E6b4O3dpPuuI3LjTE7QoHp850bpwr4dl/1dFJ9l56g3TB2u
4y2Erh2CHMsvdi0dzv7tksjrATEWnEblUHpAsvzYagjInW4A8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAPpooizoWHOp0pbOGmAp8tVnjNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTNiYjEwNTEtZTJiYy0z
YWRhLTgxOTYtMjQ5ZjM3MDU5NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXzqgC1GD1gwUdj1WVVJ9ANqyvKIrzYVS0kUkvhGYsWi6vieGOkW/8H
BMQPtpqHegVxhXX7uiRRWK3XLaRJcVpFMUVPKpjdawtEEjtPi4w3ZletZxOsr8do
o2zVBh9RPcVCsr97crFipY24MJgvGztIPWog5PLQOTjd8jZeT2dHM/EhWEf7K6FB
H8Ib9J2H3SmkXbY2zqdTKHfNO60uO0wpkH6OOohcg1aYqqOurT+RNR/vqJmMdaVx
X4amRTv7N0pJeE9XzU3/ihbsxsMdt4nlgloUQNd4gLMRedEDm+B7BaECNVUTkeiw
1rHtowNetAB5630m3oXVXr5YnMHRMxE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:09 2026 by rpki-client