Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/c1efe701-2c01-363b-86bd-799c8315eab8.roa
File:                     c1efe701-2c01-363b-86bd-799c8315eab8.roa (raw, json)
Hash identifier:          hDnbLDwujYi8Log/r5vbQVD/Eov8DYk9xafeUoJISRA=
Subject key identifier:   3D:E1:AC:7A:D8:17:52:5C:D6:35:EA:B7:98:7B:C6:49:C1:8F:B2:0C
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F432858490F7C011E7F1843481F90CE00
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/c1efe701-2c01-363b-86bd-799c8315eab8.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     398754
IP address blocks:        130.250.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7c:01:1e:7f:18:43:48:1f:90:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=b4f69cf1-d203-4a11-b35a-c2306c34646d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:3c:00:f4:76:ce:4c:8a:80:69:a2:b1:47:
                    d7:82:f3:79:3b:98:9a:14:7a:09:f5:4e:ad:f2:f3:
                    9a:30:39:75:ea:e0:b4:c7:fc:d4:ca:05:26:19:84:
                    0e:cc:62:b3:d0:0f:d0:5b:cf:62:8d:b5:41:71:98:
                    85:5d:e8:a9:d8:61:08:a2:e5:19:e4:66:f6:0f:ba:
                    9e:bd:3c:7d:3d:42:57:9b:18:31:93:21:a5:23:4d:
                    00:3f:d2:73:d8:09:7e:fe:f8:b2:97:f6:bc:cc:ed:
                    1d:ef:dd:9f:94:92:12:7b:6d:af:d9:d4:64:db:16:
                    30:14:16:dd:6e:02:98:d9:11:95:bc:b9:de:af:20:
                    a9:6e:b4:97:54:2d:5f:0d:6f:03:67:42:37:ff:f5:
                    4c:e5:44:f4:16:6e:71:1c:13:bf:69:44:1a:44:db:
                    5c:ad:c2:41:94:8e:d2:42:2f:ac:0c:1d:f5:23:c3:
                    2a:28:4d:68:46:88:2c:b1:f6:89:a0:64:8e:79:70:
                    84:15:e9:f4:fe:24:a1:d1:ac:06:03:87:93:88:89:
                    41:0d:65:b8:e5:d2:8e:38:5e:5f:15:86:c4:67:4d:
                    46:7b:2f:d2:9e:6c:d2:48:8c:82:e4:22:ce:36:fc:
                    e6:f0:89:25:1d:4d:be:aa:ca:c3:69:56:4c:1a:f3:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:AC:7A:D8:17:52:5C:D6:35:EA:B7:98:7B:C6:49:C1:8F:B2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/c1efe701-2c01-363b-86bd-799c8315eab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ce:80:db:54:48:6c:7c:e5:95:45:4d:55:18:c5:da:05:59:
         3d:00:fb:f2:cf:0a:32:f8:92:be:91:3f:bd:9c:e0:a8:6c:14:
         3a:bb:35:9d:c7:57:e8:bc:a0:43:f9:0e:44:b5:25:9e:0b:31:
         8a:8c:ad:ad:b6:75:ec:a9:fc:b2:33:d3:60:c6:2a:ee:d8:44:
         92:16:73:59:62:5b:8b:c1:10:ad:bf:b2:dd:33:02:ef:16:b6:
         e9:7e:93:fc:2d:df:c8:8e:f8:2c:f0:6a:61:46:d9:d2:06:52:
         2f:6e:ce:b1:f5:b4:ef:72:59:bf:33:f2:bc:66:5f:5b:e2:d4:
         48:df:11:c7:8b:39:ee:20:4d:eb:ad:cd:81:f6:bb:7c:0a:9b:
         48:ef:88:01:b8:23:e5:4a:a5:8a:e1:94:d2:b7:d7:e8:96:93:
         af:1b:52:f2:42:87:10:dd:77:15:1d:e9:6a:a9:2c:63:59:d4:
         98:29:bc:f3:0f:0e:dc:80:50:8c:41:4c:50:45:73:0b:be:17:
         a2:9e:82:94:1b:80:7a:ee:eb:8d:d7:b7:65:a9:60:ec:81:44:
         d9:f6:d2:5e:0a:e6:e2:34:b9:ed:c1:01:e3:9b:71:2c:fb:a6:
         3a:b1:0f:b3:82:aa:21:b2:a7:94:74:b9:e5:4d:b8:9b:71:2d:
         0e:ee:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:20 2025 by rpki-client