Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa
File:                     bbf4e6a9-7140-3d40-9399-e744892289fa.roa (raw, json)
Hash identifier:          JEqZ1pA8m9cYo2O7hNjbPkknYLyIAfusqlBc0s3kiyA=
Subject key identifier:   FD:0A:FC:8C:E6:0E:DD:32:3C:56:43:4D:00:4A:ED:63:CB:C4:A6:E1
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584A119AA3F145527D84122243C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     8987
IP address blocks:        130.137.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:a3:f1:45:52:7d:84:12:22:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=ea4deb99-455d-49f3-b01d-53d52e74a136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:fc:33:32:9c:c6:04:66:ce:3a:c2:81:b9:
                    b8:df:7a:30:c1:8f:31:1b:e2:94:70:97:8e:bf:9e:
                    c1:66:cc:c2:af:6d:88:92:1f:e4:f2:35:8f:6d:4d:
                    1a:34:fd:69:9d:cf:27:e1:72:6a:6f:4b:72:40:95:
                    69:80:96:b8:4f:e6:fa:3b:3e:18:9d:0e:9b:58:b4:
                    f4:2e:ba:7e:15:d0:75:a8:86:d8:31:66:eb:d8:42:
                    66:35:65:f9:fa:e6:4a:c5:77:7e:1c:48:76:73:b9:
                    a6:3c:6b:32:88:8d:52:63:6a:c3:29:56:2b:03:ba:
                    e6:f1:6b:4d:ac:88:cf:69:fd:ac:ef:2e:8c:b4:0e:
                    2e:a1:f7:5c:a6:c2:44:82:ad:13:02:b3:10:96:d1:
                    f3:95:c6:84:14:86:b1:f3:fb:0e:23:ca:25:5c:f4:
                    81:8c:73:2a:cb:31:47:88:a9:91:43:1e:31:52:08:
                    6b:a5:1e:da:c2:bd:16:5e:99:21:43:34:22:3b:b7:
                    2e:bf:f1:91:e1:02:08:fb:89:3c:6b:63:7e:9c:24:
                    8b:bd:88:d6:2a:68:ba:a6:63:ba:76:85:4d:b3:64:
                    02:87:68:6f:bb:94:1e:1d:a7:54:39:06:0c:b3:7e:
                    1c:7b:29:7b:71:44:64:c7:c7:21:77:4a:b6:43:2b:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:FC:8C:E6:0E:DD:32:3C:56:43:4D:00:4A:ED:63:CB:C4:A6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbf4e6a9-7140-3d40-9399-e744892289fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:17:e1:84:ed:e4:5f:0a:ad:26:38:1b:b9:b7:02:05:07:00:
         b6:82:04:76:7c:a8:af:69:5f:d1:fe:49:89:6d:49:a6:25:7b:
         8a:78:fc:fc:81:4c:66:c3:f6:fb:df:74:87:3c:4b:00:8c:66:
         40:52:cc:ea:0b:1c:43:ea:25:a0:62:01:f1:0d:3f:77:42:28:
         07:2f:71:5d:63:c4:ac:41:8b:1e:29:ca:33:b0:b6:29:17:5f:
         81:9d:f0:a1:dd:f4:0f:18:8c:2d:d4:68:9d:19:63:5e:f0:60:
         3b:64:ff:23:fe:b9:18:cc:3c:4f:9b:3b:f2:a7:2c:81:dc:de:
         77:08:97:4c:f7:d4:b5:04:db:5e:fe:82:be:39:7b:dc:84:3d:
         e2:53:11:ee:7e:9a:b8:75:a5:4b:7f:94:b2:91:e5:0e:7b:09:
         b7:fd:39:c5:84:b5:9a:58:17:ec:62:9a:ff:9e:c3:8e:c3:c8:
         c4:66:82:c2:56:55:6d:33:7d:c1:28:7a:dc:23:d8:5c:8a:9e:
         94:20:cb:09:5f:0f:16:42:81:dc:f1:4b:d8:eb:d5:e1:09:63:
         6f:50:12:81:58:67:50:82:05:ae:92:ef:ab:f0:2f:99:cd:c0:
         6c:0c:40:02:6b:40:48:8b:bb:02:c5:dd:eb:76:7f:e8:3f:27:
         db:52:69:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqPxRVJ9hBIiQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZWE0ZGViOTktNDU1ZC00OWYzLWIwMWQtNTNkNTJlNzRhMTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkP8MzKcxgRmzjrCgbm433owwY8xG+KUcJeO
v57BZszCr22Ikh/k8jWPbU0aNP1pnc8n4XJqb0tyQJVpgJa4T+b6Oz4YnQ6bWLT0
Lrp+FdB1qIbYMWbr2EJmNWX5+uZKxXd+HEh2c7mmPGsyiI1SY2rDKVYrA7rm8WtN
rIjPaf2s7y6MtA4uofdcpsJEgq0TArMQltHzlcaEFIax8/sOI8olXPSBjHMqyzFH
iKmRQx4xUghrpR7awr0WXpkhQzQiO7cuv/GR4QII+4k8a2N+nCSLvYjWKmi6pmO6
doVNs2QCh2hvu5QeHadUOQYMs34ceyl7cURkx8chd0q2QyvCiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0K/IzmDt0yPFZDTQBK7WPLxKbhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJmNGU2YTktNzE0MC0z
ZDQwLTkzOTktZTc0NDg5MjI4OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsX4YTt5F8KrSY4G7m3AgUHALaCBHZ8qK9pX9H+SYltSaYle4p4/PyB
TGbD9vvfdIc8SwCMZkBSzOoLHEPqJaBiAfENP3dCKAcvcV1jxKxBix4pyjOwtikX
X4Gd8KHd9A8YjC3UaJ0ZY17wYDtk/yP+uRjMPE+bO/KnLIHc3ncIl0z31LUE217+
gr45e9yEPeJTEe5+mrh1pUt/lLKR5Q57Cbf9OcWEtZpYF+ximv+ew47DyMRmgsJW
VW0zfcEoetwj2FyKnpQgywlfDxZCgdzxS9jr1eEJY29QEoFYZ1CCBa6S76vwL5nN
wGwMQAJrQEiLuwLF3et2f+g/J9tSaXU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:50:10 2025 by rpki-client