Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b13409e6-003c-35fb-b4f8-dad6f89edd0d.roa
File:                     b13409e6-003c-35fb-b4f8-dad6f89edd0d.roa (raw, json)
Hash identifier:          GETSeepyMeYGNDHW+78YXmpuVdiQ1qbcYoqVvwHdaLs=
Subject key identifier:   93:68:C4:84:29:33:1B:73:F5:61:D4:98:3F:18:00:D5:EB:BA:D8:91
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584ADD6667139CD8382113322180
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b13409e6-003c-35fb-b4f8-dad6f89edd0d.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     8987
IP address blocks:        130.137.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:67:13:9c:d8:38:21:13:32:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=c3828cfd-b43d-44f7-b5cd-719d7c29760e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:d9:1a:7f:97:b4:8d:72:a6:05:af:e9:77:
                    79:22:b5:03:ff:f4:5d:c6:05:b3:e3:44:66:38:75:
                    b0:de:4c:ce:d3:02:4d:e7:09:ef:18:ba:29:d5:64:
                    63:b0:08:99:c1:76:73:f7:5e:5e:36:e5:1e:49:c2:
                    18:b0:c2:3c:18:9e:73:88:f9:ed:a1:40:27:89:eb:
                    df:e3:a9:d8:60:ba:c4:64:0e:57:0c:09:35:a7:01:
                    14:38:83:57:09:5e:38:d1:dd:82:3e:8d:28:d5:19:
                    82:52:cd:89:90:7a:6c:2b:c3:89:92:93:b2:4e:b2:
                    b2:63:3f:df:a1:c4:dc:21:7d:86:44:83:32:7d:10:
                    80:cd:72:ff:e7:35:88:17:e9:fb:e7:01:4d:b3:f5:
                    6b:cd:98:b7:22:14:26:46:8f:2a:b1:0e:01:5b:bb:
                    b7:aa:f3:be:42:d3:29:0d:4f:9d:6a:06:66:fb:93:
                    eb:9e:63:0d:af:84:77:c4:1d:b2:bf:54:2f:98:16:
                    a9:2d:b3:c7:b4:dd:43:28:c5:5f:33:f3:28:2c:e1:
                    17:ab:72:a2:83:1e:5f:15:ae:d0:2a:24:ce:df:a2:
                    84:c5:88:71:e5:84:3e:09:ef:7c:91:0b:35:88:b7:
                    bb:86:f4:8f:2c:2b:28:5a:50:b1:e0:98:92:56:f4:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:68:C4:84:29:33:1B:73:F5:61:D4:98:3F:18:00:D5:EB:BA:D8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b13409e6-003c-35fb-b4f8-dad6f89edd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7a:7e:4f:27:8c:df:09:8e:35:00:3e:0d:6c:28:c3:8d:c0:
         5c:7d:8b:bf:c0:07:11:b2:de:75:ab:c0:65:d0:6c:97:bc:43:
         1f:93:56:44:e5:1a:bc:14:94:e2:ba:74:04:78:2e:b5:b3:b6:
         9e:74:c0:a0:41:25:5e:f3:8c:19:21:74:2c:3d:92:18:2a:30:
         e1:fe:40:47:19:0a:dd:01:cc:34:a7:d4:bd:9d:55:21:a8:b6:
         49:c9:4d:06:4c:f5:30:48:ea:f7:9a:0f:e6:85:7e:4c:c2:40:
         66:cc:c5:19:98:8e:52:39:33:ac:a9:e8:46:d6:32:1d:e5:0f:
         29:c3:40:8e:44:0a:33:67:98:d3:05:b8:a3:ea:83:47:d2:02:
         11:5b:9d:f5:48:ef:13:bc:d9:aa:f7:1b:6d:03:4e:69:01:cc:
         dc:d2:c2:d1:02:5e:9f:6e:a9:8c:9b:69:c5:9d:20:7f:63:77:
         49:96:e8:9a:34:40:8c:1f:f5:3b:72:12:eb:03:10:8a:52:2b:
         43:4f:7b:58:43:c3:12:62:3d:06:58:ca:72:c7:b3:5f:85:c6:
         55:25:e8:cc:66:7c:05:1e:3f:5a:11:c9:99:16:ee:b8:23:30:
         2f:61:21:30:e2:17:6f:17:2d:a3:1b:2b:4a:c0:fa:e6:ee:61:
         91:c6:d6:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmcTnNg4IRMyIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
YzM4MjhjZmQtYjQzZC00NGY3LWI1Y2QtNzE5ZDdjMjk3NjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmPZGn+XtI1ypgWv6Xd5IrUD//RdxgWz40Rm
OHWw3kzO0wJN5wnvGLop1WRjsAiZwXZz915eNuUeScIYsMI8GJ5ziPntoUAnievf
46nYYLrEZA5XDAk1pwEUOINXCV440d2CPo0o1RmCUs2JkHpsK8OJkpOyTrKyYz/f
ocTcIX2GRIMyfRCAzXL/5zWIF+n75wFNs/VrzZi3IhQmRo8qsQ4BW7u3qvO+QtMp
DU+dagZm+5PrnmMNr4R3xB2yv1QvmBapLbPHtN1DKMVfM/MoLOEXq3Kigx5fFa7Q
KiTO36KExYhx5YQ+Ce98kQs1iLe7hvSPLCsoWlCx4JiSVvTPmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNoxIQpMxtz9WHUmD8YANXrutiRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjEzNDA5ZTYtMDAzYy0z
NWZiLWI0ZjgtZGFkNmY4OWVkZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZ6fk8njN8JjjUAPg1sKMONwFx9i7/ABxGy3nWrwGXQbJe8Qx+TVkTl
GrwUlOK6dAR4LrWztp50wKBBJV7zjBkhdCw9khgqMOH+QEcZCt0BzDSn1L2dVSGo
tknJTQZM9TBI6veaD+aFfkzCQGbMxRmYjlI5M6yp6EbWMh3lDynDQI5ECjNnmNMF
uKPqg0fSAhFbnfVI7xO82ar3G20DTmkBzNzSwtECXp9uqYybacWdIH9jd0mW6Jo0
QIwf9TtyEusDEIpSK0NPe1hDwxJiPQZYynLHs1+FxlUl6MxmfAUeP1oRyZkW7rgj
MC9hITDiF28XLaMbK0rA+ubuYZHG1jE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:27 2025 by rpki-client