Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa
File:                     98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa (raw, json)
Hash identifier:          CO0LwItDwwNfy5Pgeo0fjh3fDmRwlg1921NE0b3jCDg=
Subject key identifier:   41:83:CB:83:B9:21:F8:4C:8F:76:91:8D:9B:7A:F2:E6:3E:5F:E7:41
Certificate issuer:       /CN=35fbc5b3-479b-405d-8578-f7c792a1f375
Certificate serial:       010D0C9F43285849C904EDADC72AB5B03FB1C2C0
Authority key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     397071
IP address blocks:        130.51.100.0/24 maxlen: 24
                          130.51.101.0/24 maxlen: 24
                          130.51.102.0/24 maxlen: 24
                          130.51.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ed:ad:c7:2a:b5:b0:3f:b1:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35fbc5b3-479b-405d-8578-f7c792a1f375
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=63f54c32-bb03-45b6-9b24-9c9958a9b3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:1c:b8:40:0d:40:80:f3:e7:72:85:f3:06:
                    db:d1:6d:0c:8c:f5:c5:4b:ea:d8:a1:64:41:4c:1d:
                    56:a4:2b:c6:b7:d2:f5:b6:f1:69:29:11:44:57:9b:
                    62:2e:8a:05:0e:4f:65:55:99:95:d0:8d:a4:11:e5:
                    fa:74:b0:86:03:9c:74:b4:4e:10:12:ca:06:f2:2c:
                    8f:74:3d:e3:45:34:40:98:b3:40:c8:37:8f:11:f6:
                    5f:75:74:70:4c:22:29:36:2c:05:9f:25:6e:23:92:
                    1c:f3:f2:8f:8f:70:4b:07:f2:8e:83:fd:83:d1:28:
                    f1:42:5f:57:33:60:ec:81:5f:ac:d0:b9:2a:73:ee:
                    e2:07:6f:e5:79:12:46:60:40:3b:04:7f:ad:d9:54:
                    3a:60:f7:40:0e:a0:17:78:3f:47:4b:22:80:b8:76:
                    f1:6a:8c:4f:4b:07:65:4d:7d:80:b2:88:71:cc:14:
                    04:02:98:3e:a0:cb:62:64:86:f3:0f:b3:82:a4:e3:
                    19:e9:cf:0c:d3:b2:0c:91:a3:f9:2b:02:0d:03:d5:
                    16:eb:08:af:d1:f6:34:23:e8:47:e8:e4:b1:77:c4:
                    7a:11:94:10:92:8d:5b:e5:e9:3e:3d:f0:30:91:4a:
                    34:ea:ad:55:3c:7f:d3:87:39:28:ba:08:af:17:c1:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:CB:83:B9:21:F8:4C:8F:76:91:8D:9B:7A:F2:E6:3E:5F:E7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/98d614dc-607e-3732-aa86-1eb4ea2f52a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.crl

            X509v3 Authority Key Identifier:
                keyid:0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:34:71:68:18:2b:31:36:96:31:41:0f:24:5f:8b:4b:71:25:
         8e:9d:71:60:08:e2:40:e6:b3:2d:b2:9f:a1:c7:ed:ab:67:bb:
         1c:0a:b0:69:3a:3c:ce:50:94:c1:1a:26:b5:c6:16:b0:88:f1:
         12:0e:4c:a7:44:93:89:51:3f:19:e7:af:be:45:3d:4f:9d:11:
         89:e3:f7:af:3f:0b:43:0f:1d:3e:98:e4:66:59:43:c9:e2:fe:
         28:78:29:24:1a:d3:55:07:38:16:9e:b3:24:10:67:ee:c2:49:
         ca:e0:10:4a:41:f9:c7:3c:b8:f2:6e:28:2d:22:52:5f:fa:2c:
         3a:09:fe:c2:95:71:3f:6a:2f:87:89:cc:d0:b0:79:4d:1b:d6:
         71:a8:bf:95:8b:b7:47:87:66:be:6f:d4:8c:61:20:12:44:5c:
         5a:c8:48:47:e8:80:d4:e8:17:6f:3a:6d:93:b7:f6:96:3c:ab:
         1b:d8:96:a9:ee:29:02:2c:77:b5:21:84:76:29:3d:43:a9:b7:
         e8:e6:b6:76:51:78:aa:85:74:3c:3f:55:36:f5:d9:34:57:ad:
         4e:d1:4a:c4:2a:65:e0:a0:0c:76:59:98:20:1e:9e:0d:3c:3a:
         e9:a7:85:ae:1b:87:82:85:9b:81:58:54:e9:0c:db:11:65:ed:
         28:1a:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:57:38 2025 by rpki-client