Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57e59771-11d8-39e4-a61c-77221eb33ff1.roa
File:                     57e59771-11d8-39e4-a61c-77221eb33ff1.roa (raw, json)
Hash identifier:          JITjlKPLQQSxyvuhH+ypYp9n7234EQ3ad/v7nm0c6HA=
Subject key identifier:   9E:2D:C4:CD:FD:1B:E5:06:4C:47:D9:F4:25:DB:71:71:34:FA:4A:A4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584863CB14DE1DB19E28EDA3A100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57e59771-11d8-39e4-a61c-77221eb33ff1.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     64267
IP address blocks:        130.254.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:14:de:1d:b1:9e:28:ed:a3:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=bfadc724-5ac8-487e-9942-157bf62ba547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:a4:56:5b:45:c7:33:ec:94:51:91:e7:f1:
                    e7:70:d1:9f:d7:15:58:36:45:1b:c7:de:39:f4:0c:
                    4b:49:65:04:50:9f:86:ff:65:69:31:e9:9f:be:30:
                    b2:33:db:96:3f:8d:3c:43:d1:ee:38:8b:1b:f3:28:
                    7a:01:0b:50:05:e7:99:bc:c0:57:77:28:31:91:e6:
                    c9:ce:30:ba:28:19:60:46:f4:87:6c:87:f0:80:77:
                    ff:e0:ff:60:b3:ee:0b:c3:60:50:ee:6f:f4:cb:c4:
                    23:a8:5f:83:fd:d3:3c:0d:45:66:8b:e9:a7:ed:d0:
                    45:70:58:17:19:fe:fd:fd:9c:36:26:9d:4b:c2:0c:
                    3e:5c:68:78:7f:f6:ef:75:b3:9a:c7:eb:c8:60:8c:
                    94:87:96:cb:c2:db:3a:58:26:3f:d3:c4:46:58:34:
                    fa:25:65:b1:59:35:dc:3d:99:58:c7:82:22:fd:52:
                    1c:d4:29:b6:67:bf:cc:76:d4:10:bb:67:16:ae:c3:
                    93:4b:60:a7:dc:a5:b0:f1:bb:c4:92:15:ae:c8:84:
                    33:d0:f2:2f:85:e0:3a:3c:e3:2e:73:20:65:94:af:
                    54:c4:86:30:4b:c9:67:49:e7:3b:bf:6d:04:f4:c2:
                    c7:d2:d5:4a:48:a8:1e:18:c4:02:c6:91:24:dd:13:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2D:C4:CD:FD:1B:E5:06:4C:47:D9:F4:25:DB:71:71:34:FA:4A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/57e59771-11d8-39e4-a61c-77221eb33ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:5f:1e:45:af:05:45:bf:8f:be:7c:b6:0a:cd:d5:56:fa:
         e4:b7:56:1e:b2:b4:b1:45:be:d8:dc:bc:65:4c:df:5c:66:76:
         bb:dc:55:9a:c8:96:6f:d2:ab:e7:16:c6:50:a2:97:65:10:f3:
         a4:a1:3d:20:29:75:0f:bc:b0:8e:df:fa:66:47:d2:b6:30:43:
         08:7e:77:66:a0:9c:b2:ca:45:b4:6a:c4:3c:d6:63:45:5d:c9:
         dd:96:00:14:9f:60:7b:77:3f:6c:88:47:ed:c9:a1:db:3d:9a:
         00:cd:64:1e:43:5c:1c:d9:63:3e:3d:e8:08:5a:ac:40:b8:5d:
         68:5d:65:cc:72:26:54:d2:27:17:db:4b:86:e7:5f:9a:21:03:
         d9:6a:dd:48:9a:1d:cf:cd:69:19:22:41:29:b3:40:12:8a:5c:
         9d:e1:83:ce:2e:8b:99:3a:4d:4b:bd:88:e6:58:de:40:10:10:
         a2:0e:ca:47:8a:06:2a:03:52:6f:f4:1c:8f:e9:70:69:cd:8f:
         18:dd:a0:3c:2c:87:59:3e:84:be:cb:2e:0b:c7:a5:5d:32:b3:
         11:2a:1f:f6:6a:19:b3:64:fe:d1:75:6e:96:84:e3:06:fa:f0:
         3e:91:7b:49:78:d8:ad:35:f1:14:cb:98:83:81:17:69:78:49:
         87:bd:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:14 2025 by rpki-client