Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa
File:                     d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa (raw, json)
Hash identifier:          BZEd9kLRapm4/6aM4RRBLpeRMie+eKZdQxzuKYVx8ww=
Subject key identifier:   29:A5:7E:33:A4:FB:B6:0A:48:7B:68:38:C9:F9:5C:41:ED:AD:E7:08
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584E6F3A1EB99A4D3ED1030FE800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     8987
IP address blocks:        130.137.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:1e:b9:9a:4d:3e:d1:03:0f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=87cb9435-c539-4836-9647-5ff2fa9a0bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:e2:b5:bb:e2:ea:d8:d7:7e:7f:17:dd:46:
                    de:14:db:82:33:4d:ce:45:0d:0b:af:29:4a:e7:39:
                    20:28:a0:e3:5f:f7:65:83:f2:f8:6b:2b:c7:90:53:
                    af:f1:ff:d0:a2:19:42:5a:29:13:1a:b5:fe:ab:c0:
                    e9:19:96:d8:d3:53:79:05:84:b9:75:c7:43:57:22:
                    47:59:ac:1d:5f:00:76:cd:59:d2:01:ab:9d:66:fb:
                    28:1d:ca:95:2c:ee:59:b2:da:2c:26:67:bb:05:37:
                    f1:29:07:10:bc:f1:41:07:bf:47:9b:d4:e1:0d:82:
                    1b:22:14:82:f9:5c:88:2a:75:77:a8:42:b9:3e:95:
                    69:95:09:94:79:90:b0:74:c9:27:d5:07:a6:e7:74:
                    41:d4:84:27:15:77:31:c4:ab:6a:6e:52:de:08:1a:
                    11:9a:2d:80:f6:bb:6f:e6:52:9c:68:8b:29:75:93:
                    7f:43:81:c4:ce:21:55:5f:6c:9d:18:8e:f7:2c:38:
                    8b:a2:39:b6:1a:72:3a:96:2f:21:d3:dc:ae:57:a5:
                    15:08:01:42:5e:52:2a:a4:b7:59:bb:da:3a:34:f2:
                    0c:61:a7:fe:e3:7f:13:15:25:34:25:57:1c:8b:77:
                    a0:64:42:12:74:3d:54:83:99:3d:7e:49:b2:ca:c7:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A5:7E:33:A4:FB:B6:0A:48:7B:68:38:C9:F9:5C:41:ED:AD:E7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d4d2d52f-a5dd-3fd4-8fb9-e1600cf3cd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:8c:5c:a1:16:f2:8c:c3:ce:48:42:97:20:d3:47:b6:0e:
         b2:23:f0:ee:96:9b:c2:e0:b5:79:6f:97:b7:51:fc:d6:33:8f:
         fc:13:df:a1:84:bd:8c:46:e5:40:48:b3:99:59:f2:22:74:5f:
         30:4d:f4:87:93:07:11:95:7c:75:25:93:c4:74:61:24:99:cc:
         b1:f3:52:fd:a1:f6:d2:bb:a6:e4:ea:9c:b9:5f:79:66:4a:5b:
         cb:94:d9:a7:50:54:4d:5e:86:39:d1:94:fe:23:7d:6b:fd:b2:
         ad:49:c1:6b:64:7c:a7:a1:64:58:ba:df:26:2d:6e:59:22:17:
         c9:01:c4:b2:5e:2c:00:39:eb:4b:1e:bd:19:9b:3f:e9:26:af:
         f7:48:d0:d2:90:8e:73:fc:5a:b3:7e:45:9e:f8:db:d1:b8:5c:
         49:7b:b5:ff:fa:c8:20:39:06:00:d2:78:6a:a5:cb:71:59:03:
         c7:26:59:67:2d:7b:a4:b2:72:c5:9c:c0:0d:f6:63:4f:b8:ea:
         73:8a:ba:b7:86:4e:c9:f3:31:8e:98:6a:6d:e2:4d:b1:19:07:
         85:18:df:bc:7e:80:d9:90:f3:db:e5:2b:d8:25:67:7d:89:fa:
         88:a5:72:be:78:2b:36:ab:3e:9a:53:b4:d2:27:9f:76:c3:cc:
         52:b9:96:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOh65mk0+0QMP6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
ODdjYjk0MzUtYzUzOS00ODM2LTk2NDctNWZmMmZhOWEwYmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxULitbvi6tjXfn8X3UbeFNuCM03ORQ0LrylK
5zkgKKDjX/dlg/L4ayvHkFOv8f/QohlCWikTGrX+q8DpGZbY01N5BYS5dcdDVyJH
WawdXwB2zVnSAaudZvsoHcqVLO5ZstosJme7BTfxKQcQvPFBB79Hm9ThDYIbIhSC
+VyIKnV3qEK5PpVplQmUeZCwdMkn1Qem53RB1IQnFXcxxKtqblLeCBoRmi2A9rtv
5lKcaIspdZN/Q4HEziFVX2ydGI73LDiLojm2GnI6li8h09yuV6UVCAFCXlIqpLdZ
u9o6NPIMYaf+438TFSU0JVcci3egZEISdD1Ug5k9fkmyysdcowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmlfjOk+7YKSHtoOMn5XEHtrecIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDRkMmQ1MmYtYTVkZC0z
ZmQ0LThmYjktZTE2MDBjZjNjZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYbjFyhFvKMw85IQpcg00e2DrIj8O6Wm8LgtXlvl7dR/NYzj/wT36GE
vYxG5UBIs5lZ8iJ0XzBN9IeTBxGVfHUlk8R0YSSZzLHzUv2h9tK7puTqnLlfeWZK
W8uU2adQVE1ehjnRlP4jfWv9sq1JwWtkfKehZFi63yYtblkiF8kBxLJeLAA560se
vRmbP+kmr/dI0NKQjnP8WrN+RZ7429G4XEl7tf/6yCA5BgDSeGqly3FZA8cmWWct
e6SycsWcwA32Y0+46nOKureGTsnzMY6Yam3iTbEZB4UY37x+gNmQ89vlK9glZ32J
+oilcr54KzarPppTtNInn3bDzFK5lsg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:36 2026 by rpki-client