Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1dd10cac-effd-3701-adb9-d23de5feeb54.roa
File:                     1dd10cac-effd-3701-adb9-d23de5feeb54.roa (raw, json)
Hash identifier:          Y2p5VBMFpZXM7/PU9vcBMQCMiQbwIYQ2mq7/K2YFE5g=
Subject key identifier:   F5:E7:1E:CB:0A:2B:F6:D5:AC:78:6B:0D:12:84:F7:C2:FE:77:57:83
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858471775C2ECB44AEDAFC4B7C3C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1dd10cac-effd-3701-adb9-d23de5feeb54.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     397630
IP address blocks:        130.254.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c2:ec:b4:4a:ed:af:c4:b7:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=1d6456a5-c663-41d5-9521-aa8716b8e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:16:32:a6:94:ed:87:5d:ae:a1:4c:fe:88:
                    29:83:7c:ce:5e:30:06:b8:a9:1d:b8:15:d3:93:45:
                    a1:d9:a0:63:53:a5:08:18:4c:c3:3e:56:be:fe:d7:
                    99:8f:99:54:4a:6d:ea:43:58:15:40:19:3f:19:ef:
                    63:0c:d7:f7:a5:c7:8f:15:b3:0e:f2:11:a7:fe:99:
                    1c:97:10:54:06:5a:9b:24:3e:18:2b:ff:9e:cf:d5:
                    d8:fb:9d:19:3e:d6:9d:e1:59:9d:6e:3a:9a:33:57:
                    22:2a:c4:31:2e:ee:fc:76:6a:4c:be:74:90:fd:fb:
                    03:4e:69:eb:0a:81:ce:b7:f5:39:0b:f4:c0:d3:ab:
                    c1:84:81:ab:29:a1:f2:ab:e8:99:1f:a1:70:53:aa:
                    d4:2d:10:a3:20:41:de:4f:c0:20:d2:fd:08:6e:4d:
                    45:14:c7:78:11:cf:2f:db:6e:ba:90:88:69:3e:fd:
                    c4:71:4a:5a:b0:35:d5:9f:30:c7:14:dd:46:41:79:
                    9d:85:ef:11:8f:68:12:36:17:77:68:12:77:49:e4:
                    31:1d:cf:13:b5:9f:6c:2f:e2:96:8d:22:b6:8b:3e:
                    8f:3f:e4:7c:74:31:0c:64:93:f4:32:e2:77:6f:0e:
                    c2:f3:37:9e:8e:c9:23:d7:df:41:4a:7c:6f:e9:2e:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E7:1E:CB:0A:2B:F6:D5:AC:78:6B:0D:12:84:F7:C2:FE:77:57:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1dd10cac-effd-3701-adb9-d23de5feeb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:89:62:e7:6d:94:a5:32:dd:55:07:4c:7f:fa:77:07:3d:
         bd:ca:46:d8:01:d9:5f:46:8c:cb:e1:0e:b3:bc:c8:ed:69:95:
         a1:0c:23:e0:ca:43:1f:aa:46:91:43:f4:e8:b6:e1:b2:0f:ba:
         52:e5:10:17:5f:e1:24:d5:93:f9:ce:df:fa:ad:83:f6:eb:e9:
         c5:b4:06:db:e0:91:89:a0:ef:46:33:d4:22:c3:db:aa:7c:03:
         68:9f:c9:7e:81:64:15:fe:31:1c:44:f8:76:4c:b4:5a:87:1a:
         18:f9:92:4c:68:c4:81:31:a4:dc:f4:f8:a7:23:12:9a:dd:8b:
         90:1f:dc:b6:4b:3f:5d:75:42:d1:57:26:e9:0d:fe:39:cb:0d:
         32:51:15:34:f3:15:2e:86:29:d5:33:c3:71:aa:81:17:10:2f:
         e9:17:e5:d3:f5:0f:2a:2a:fb:34:b7:f1:23:5c:88:d8:2e:fe:
         02:1b:e0:ad:f5:59:c5:ec:1c:ba:ef:a2:cd:03:3a:a8:2f:ae:
         2a:ed:35:fc:ad:2a:02:fe:59:be:82:3b:9e:43:cb:3f:85:3f:
         b4:93:5a:ec:ac:62:10:a8:52:fd:7b:fe:1e:09:26:1d:51:7d:
         f7:ac:0f:fc:43:d9:32:6c:c4:a9:18:70:e4:df:e0:92:43:7d:
         08:bb:e9:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcXdcLstErtr8S3w8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk
MWQ2NDU2YTUtYzY2My00MWQ1LTk1MjEtYWE4NzE2YjhlNGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqgWMqaU7YddrqFM/ogpg3zOXjAGuKkduBXT
k0Wh2aBjU6UIGEzDPla+/teZj5lUSm3qQ1gVQBk/Ge9jDNf3pcePFbMO8hGn/pkc
lxBUBlqbJD4YK/+ez9XY+50ZPtad4VmdbjqaM1ciKsQxLu78dmpMvnSQ/fsDTmnr
CoHOt/U5C/TA06vBhIGrKaHyq+iZH6FwU6rULRCjIEHeT8Ag0v0Ibk1FFMd4Ec8v
2266kIhpPv3EcUpasDXVnzDHFN1GQXmdhe8Rj2gSNhd3aBJ3SeQxHc8TtZ9sL+KW
jSK2iz6PP+R8dDEMZJP0MuJ3bw7C8zeejskj199BSnxv6S5B1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXnHssKK/bVrHhrDRKE98L+d1eDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWRkMTBjYWMtZWZmZC0z
NzAxLWFkYjktZDIzZGU1ZmVlYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuEiWLnbZSlMt1VB0x/+ncHPb3KRtgB2V9GjMvhDrO8yO1plaEMI+DK
Qx+qRpFD9Oi24bIPulLlEBdf4STVk/nO3/qtg/br6cW0BtvgkYmg70Yz1CLD26p8
A2ifyX6BZBX+MRxE+HZMtFqHGhj5kkxoxIExpNz0+KcjEprdi5Af3LZLP111QtFX
JukN/jnLDTJRFTTzFS6GKdUzw3GqgRcQL+kX5dP1Dyoq+zS38SNciNgu/gIb4K31
WcXsHLrvos0DOqgvrirtNfytKgL+Wb6CO55Dyz+FP7STWuysYhCoUv17/h4JJh1R
ffesD/xD2TJsxKkYcOTf4JJDfQi76fU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org