Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa
File:                     a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa (raw, json)
Hash identifier:          FMoarVqT819C+wgEE+yc0Uw/tz08MadLxJ7O+yhRPa8=
Subject key identifier:   B8:1C:13:3C:C6:79:22:AB:DE:E1:AD:EE:F0:27:1E:A1:CC:36:AB:96
Certificate issuer:       /CN=eb7b8561-8852-40be-b540-5a3c275d2aeb
Certificate serial:       010D0C9F4328584A6C55D3A59C0FE7805ABB5D80
Authority key identifier: 6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     400817
IP address blocks:        130.250.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d3:a5:9c:0f:e7:80:5a:bb:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7b8561-8852-40be-b540-5a3c275d2aeb
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=afbdd257-6442-4052-bcf6-d34d7526fd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:6e:7a:f8:db:dc:09:e8:e2:73:47:41:cd:
                    35:a0:db:d6:50:a1:9f:7e:5b:79:42:ac:70:07:da:
                    be:6d:36:d4:3b:43:fc:31:be:ec:e5:d8:f5:92:fd:
                    d7:ee:4b:03:d2:f2:a1:b9:a8:fd:3f:d6:59:d5:38:
                    33:f6:62:fa:42:1a:59:8d:2d:6f:cb:cf:c4:32:3f:
                    ea:14:39:24:ae:35:82:73:c9:ed:6c:db:38:c5:35:
                    80:72:e0:72:d8:32:f9:6b:c5:24:52:0e:d0:e3:a6:
                    08:cf:d4:4c:ea:79:18:ef:6d:e8:93:3c:7c:47:7e:
                    ec:06:2c:9f:a4:3b:f5:c4:4e:89:41:3d:42:a5:2b:
                    41:86:ce:a5:cb:79:81:10:0c:84:1f:d9:38:98:38:
                    2c:d3:15:18:fc:e3:84:80:6d:eb:eb:29:e3:3a:8c:
                    b4:47:a9:9b:2b:c0:f7:7d:ed:cb:ee:d9:35:e5:d6:
                    4a:36:f7:18:2a:27:cd:1d:05:d5:05:43:b1:18:ff:
                    5a:7e:4d:23:f4:0c:99:09:b6:a3:8c:f1:e7:88:76:
                    8e:d6:a7:eb:56:33:c5:c6:31:60:56:ba:6e:0c:25:
                    20:8c:37:29:bb:52:dc:39:03:27:b5:e1:02:7b:f4:
                    3d:e8:cb:49:03:38:c6:25:6c:93:e9:25:d1:f8:82:
                    bc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:13:3C:C6:79:22:AB:DE:E1:AD:EE:F0:27:1E:A1:CC:36:AB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.crl

            X509v3 Authority Key Identifier:
                keyid:6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:c3:6c:60:02:57:10:d1:8d:94:6d:7e:61:3f:32:5b:a3:
         d0:44:74:dd:39:87:44:7f:42:31:82:e5:ce:5a:3f:2a:94:20:
         5a:91:39:a8:3d:25:14:85:ae:6c:d3:8d:41:b3:a6:b1:46:a2:
         a3:32:27:86:1e:55:ee:5d:e7:8a:ed:b8:53:a3:a4:2f:3d:d4:
         e8:10:3b:77:b0:78:33:24:3b:04:68:5c:31:cb:a5:02:96:d2:
         85:e0:e6:59:16:f8:22:45:6e:c1:80:30:c8:d1:16:5f:5a:e6:
         30:60:f2:e9:a0:07:bb:dc:9b:32:60:09:59:91:b4:e7:43:a2:
         fb:51:68:9a:2a:e0:c7:40:cd:de:f8:2f:6a:d6:7c:72:7d:be:
         4a:12:f4:db:a5:84:b6:b4:ea:e6:40:bb:3a:2b:cc:19:64:3c:
         59:f6:71:02:2f:99:a9:50:44:b9:9b:14:ff:68:11:0a:5f:e5:
         c5:16:40:c8:9f:54:9e:73:84:a7:6c:fb:d1:6c:75:90:2e:5b:
         ed:a0:b1:72:67:5e:01:38:f1:7c:e5:d2:c5:67:80:06:dd:03:
         d9:ac:0c:e4:51:6c:fd:ba:e3:d7:e1:d1:6c:cd:6d:d0:0b:b4:
         d7:f2:e9:c0:da:00:24:8c:7c:9d:b5:4c:81:4b:6a:d7:f1:96:
         8c:ce:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:19 2025 by rpki-client