Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f837fe9-50be-3106-a11b-4e7940a01172.roa
File:                     1f837fe9-50be-3106-a11b-4e7940a01172.roa (raw, json)
Hash identifier:          Rb8Mytw9AvhAA3A37UsmBtxno9QrNDNvWQrdM0l6KZ8=
Subject key identifier:   91:79:9C:78:FB:94:6F:C0:F6:1D:D8:18:48:D9:75:51:9F:EC:4D:3F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584944694155B16C4B1B10784980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f837fe9-50be-3106-a11b-4e7940a01172.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     64267
IP address blocks:        130.254.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:41:55:b1:6c:4b:1b:10:78:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=c381ca97-5432-47be-8985-33bd75967a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:4a:5b:31:ea:ee:9b:e6:35:cc:56:71:88:
                    99:bb:7f:d2:aa:bb:5f:1f:53:c8:73:15:61:e7:d1:
                    6f:22:8f:2b:21:46:35:ea:ff:c0:29:3d:a6:a6:54:
                    be:ab:d1:19:a1:aa:94:b8:72:b6:65:25:70:13:0a:
                    9a:b6:ce:67:67:96:7e:30:51:81:06:a7:16:df:1c:
                    2b:48:f1:50:56:29:68:28:f0:0f:46:42:aa:26:72:
                    6c:3d:1f:10:49:8e:19:1a:ce:61:fd:25:9c:fd:28:
                    0c:a3:61:98:e1:5f:ea:eb:41:b7:fc:f2:34:b8:8f:
                    7a:f0:b7:e6:c1:e3:71:ff:a9:be:3e:11:1e:96:fc:
                    81:b6:f1:80:d7:1a:df:f6:5c:3b:5a:31:f0:93:d9:
                    7e:af:74:4b:f4:f3:1d:23:e4:e9:c5:f9:e7:b2:24:
                    95:60:7d:b0:b9:48:22:d8:14:13:e1:2c:e2:21:3d:
                    a3:49:89:89:44:b4:6e:94:b0:51:c7:a0:4e:06:49:
                    c6:03:07:73:90:9e:63:9f:4b:26:fd:9f:bf:04:5a:
                    6a:78:c9:62:65:5e:9a:55:89:11:36:ec:b6:4b:03:
                    54:54:f7:99:6c:d3:c8:c4:ac:67:13:ff:8c:f5:1d:
                    ad:20:1f:18:29:e8:94:d8:60:d1:32:34:6e:a5:61:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:9C:78:FB:94:6F:C0:F6:1D:D8:18:48:D9:75:51:9F:EC:4D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f837fe9-50be-3106-a11b-4e7940a01172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:3a:4c:9e:ad:d3:c0:13:74:40:41:90:bd:ed:97:58:35:c2:
         ba:d8:57:51:34:5a:28:19:8a:b8:17:cf:5c:e1:ef:35:74:94:
         82:02:bf:e3:f7:f8:2b:a7:ba:20:a6:fc:35:fa:23:c9:3b:43:
         c8:06:6d:a5:46:c0:cf:94:a1:f7:5f:e3:24:8d:11:25:95:0c:
         e8:0b:3a:70:6e:ad:18:75:53:34:6c:b7:42:6d:97:fb:f6:89:
         38:fa:40:6f:97:cd:07:df:90:c7:36:1f:3b:9e:0b:c0:6b:88:
         72:24:8b:5c:9d:aa:3b:4c:b7:9a:7f:fb:af:93:c4:7d:ac:36:
         dd:59:f0:07:b3:7f:2c:06:20:ee:0d:f5:e3:10:be:5d:fd:9e:
         23:fd:30:21:26:0c:76:cd:b4:35:0d:9e:1c:52:dd:37:81:ff:
         fe:53:b8:f6:c0:77:15:96:d8:5b:65:6b:b0:3f:ba:62:71:0b:
         8d:49:5f:e4:0d:6c:10:cc:ff:17:96:67:e5:7f:d2:ce:00:d8:
         e3:c7:cd:5b:92:c0:f9:b7:23:03:6b:bb:97:46:67:72:15:f4:
         c5:c2:2b:a7:db:bd:6d:28:67:c9:66:d1:3b:17:60:23:ec:12:
         00:01:b9:73:d0:ef:39:f8:f8:65:8f:78:e0:18:b0:5e:b8:37:
         36:01:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:52 2025 by rpki-client