Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa
File:                     bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa (raw, json)
Hash identifier:          VSsniAcklX1YF+SNXtVyOCTLrltoJHfI7cKniW9Y10g=
Subject key identifier:   7C:4C:38:47:EC:BA:92:9E:1C:0D:16:CC:87:95:E3:BD:94:80:A4:90
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584930DE67582C2C5489B660D300
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     21976
IP address blocks:        130.156.5.0/24 maxlen: 24
                          130.156.6.0/24 maxlen: 24
                          130.156.7.0/24 maxlen: 24
                          130.156.8.0/24 maxlen: 24
                          130.156.9.0/24 maxlen: 24
                          130.156.10.0/24 maxlen: 24
                          130.156.11.0/24 maxlen: 24
                          130.156.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:67:58:2c:2c:54:89:b6:60:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=6a0001f1-6926-486a-a375-47993c3d65cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:b3:f8:c2:62:bd:9b:c1:6b:e6:78:4b:c0:
                    83:c5:d5:d0:ac:7c:33:45:29:80:0f:dd:c4:92:3d:
                    ae:55:9c:8e:12:03:9b:fc:4c:5f:3d:1e:ff:e9:d9:
                    7b:a9:a4:a8:91:cf:c9:1c:48:b5:65:66:16:7c:89:
                    83:3b:02:46:c1:a0:63:92:19:f4:f5:f3:89:e4:3c:
                    39:a4:36:09:62:5d:ee:04:9c:7f:50:77:9e:75:94:
                    93:27:68:66:e7:ce:e2:44:45:96:aa:54:2f:e8:af:
                    40:68:51:78:bd:39:2e:87:2d:c1:2c:d2:c9:4b:55:
                    c7:35:f5:9c:41:4d:88:4c:5d:42:3e:4a:a1:36:49:
                    15:81:5b:7b:2f:2e:15:bf:cb:72:51:43:07:be:ac:
                    ff:04:27:35:79:ba:df:d0:9d:3a:f9:5e:52:21:d7:
                    70:f7:83:1a:e6:39:6a:96:c3:a6:5b:27:7f:73:cf:
                    ba:fe:83:f7:dc:02:36:dc:9d:5f:7f:1d:98:03:2a:
                    1b:7b:ff:6f:4c:17:0d:80:39:9b:6b:e8:e4:d5:29:
                    f9:37:45:43:68:50:4b:98:ff:01:b5:64:31:79:0c:
                    a3:17:5e:f8:8b:d9:bb:53:64:54:f3:a9:8f:08:7e:
                    b4:bd:76:5f:71:34:55:66:13:d2:1d:aa:1c:4e:5b:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:38:47:EC:BA:92:9E:1C:0D:16:CC:87:95:E3:BD:94:80:A4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.5.0-130.156.12.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4c:74:c2:fc:18:76:c8:7e:e9:72:71:29:02:59:4a:1c:a4:
         51:fd:ee:b8:fa:02:51:fc:3c:7f:5e:c3:29:41:ba:b4:29:0c:
         22:01:3e:d7:24:1e:bf:0c:7a:d6:24:c7:91:08:99:b3:36:e7:
         af:f7:c3:97:68:17:6b:f9:c8:74:40:c9:23:e4:11:9b:bb:8a:
         38:47:aa:12:92:ac:0b:45:55:38:6f:07:32:98:e6:24:f9:c7:
         4b:2f:ba:4f:a0:23:59:db:e8:27:e1:ab:f9:7b:29:95:c3:4c:
         37:a5:e3:ee:3e:e2:e5:fa:22:c0:bd:69:66:aa:b3:14:05:ef:
         5f:ad:0e:9f:91:0f:1e:27:d6:58:05:e9:43:8c:33:84:e1:b0:
         8e:3f:02:de:92:c5:37:95:05:ed:88:16:1f:e6:4d:0e:3c:a4:
         fc:dd:94:67:3f:df:bc:74:83:36:cd:79:c6:ed:42:4d:af:04:
         22:a6:ff:cd:f9:8a:ae:7d:45:94:d3:8c:fd:00:a9:81:b8:55:
         51:f0:08:67:09:2a:70:b5:43:4e:58:b7:c7:bd:9e:b6:8a:77:
         34:f4:6e:24:36:8d:7a:60:e7:c0:03:a1:70:5d:cd:2c:7a:89:
         1e:a9:8f:7e:79:ed:41:a7:7b:0c:9c:0c:11:cd:c5:93:f5:0d:
         f1:29:58:eb
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkw3mdYLCxUibZg0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1
NzE1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NmEwMDAxZjEtNjkyNi00ODZhLWEzNzUtNDc5OTNjM2Q2NWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFCz+MJivZvBa+Z4S8CDxdXQrHwzRSmAD93E
kj2uVZyOEgOb/ExfPR7/6dl7qaSokc/JHEi1ZWYWfImDOwJGwaBjkhn09fOJ5Dw5
pDYJYl3uBJx/UHeedZSTJ2hm587iREWWqlQv6K9AaFF4vTkuhy3BLNLJS1XHNfWc
QU2ITF1CPkqhNkkVgVt7Ly4Vv8tyUUMHvqz/BCc1ebrf0J06+V5SIddw94Ma5jlq
lsOmWyd/c8+6/oP33AI23J1ffx2YAyobe/9vTBcNgDmba+jk1Sn5N0VDaFBLmP8B
tWQxeQyjF174i9m7U2RU86mPCH60vXZfcTRVZhPSHaocTlvgCQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHxMOEfsupKeHA0WzIeV472UgKSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2
NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvYmRiNDY4NWItYmRiYS0z
OWMwLWE4OGItZWU1OTRkOGJmOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx
ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx
NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj
ZjVlMTU3MTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACCnAUD
BACCnAwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAMkx0wvwYdsh+6XJxKQJZShykUf3uuPoCUfw8f17DKUG6
tCkMIgE+1yQevwx61iTHkQiZszbnr/fDl2gXa/nIdEDJI+QRm7uKOEeqEpKsC0VV
OG8HMpjmJPnHSy+6T6AjWdvoJ+Gr+XsplcNMN6Xj7j7i5foiwL1pZqqzFAXvX60O
n5EPHifWWAXpQ4wzhOGwjj8C3pLFN5UF7YgWH+ZNDjyk/N2UZz/fvHSDNs15xu1C
Ta8EIqb/zfmKrn1FlNOM/QCpgbhVUfAIZwkqcLVDTli3x72etop3NPRuJDaNemDn
wAOhcF3NLHqJHqmPfnntQad7DJwMEc3Fk/UN8SlY6w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:45:47 2025 by rpki-client