Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71bb4f1e-9a5c-334c-a418-7af574c332aa.roa
File:                     71bb4f1e-9a5c-334c-a418-7af574c332aa.roa (raw, json)
Hash identifier:          tDt/AL2EoHyNDppLHmWoPWFAPe0HcsIGUSkB09nbTdU=
Subject key identifier:   D3:ED:81:D2:01:B9:79:B4:28:E1:CD:D4:41:9C:0C:B0:8C:55:DE:1F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F84F7DFC2015EF63757CEF40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71bb4f1e-9a5c-334c-a418-7af574c332aa.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     7018
IP address blocks:        130.254.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7d:fc:20:15:ef:63:75:7c:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=b9c0739d-4ea2-437b-b2d2-a620d7a51396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:5a:9b:39:de:0c:43:96:3e:1d:95:83:01:
                    ff:ad:d3:4c:be:86:11:7c:a8:d5:5d:79:b3:8d:23:
                    7b:71:10:65:01:e4:1c:c7:26:85:db:e3:49:5a:1e:
                    9d:cb:97:a9:18:4b:f5:37:b4:86:cd:dc:e7:44:24:
                    77:6d:8d:3b:9a:ab:1b:a4:fb:aa:97:ba:78:6d:e8:
                    b8:1b:63:54:ab:2d:52:00:cd:b2:93:e5:1e:b5:77:
                    e0:c8:8f:e9:54:2a:23:0b:b5:c0:ef:9d:24:08:ab:
                    cc:98:40:af:0c:41:49:8b:1d:ad:bc:e2:a1:e8:0d:
                    b3:60:08:6e:a5:b9:7e:d9:33:da:d9:e3:40:3e:12:
                    fb:83:54:5a:5a:4c:07:c8:df:0b:6e:ae:ce:dc:69:
                    7f:67:a8:41:90:38:a5:51:8c:86:97:6a:f4:93:84:
                    6e:61:99:e5:6f:8f:d3:cd:d3:bb:fe:f6:88:8b:f5:
                    82:77:8c:99:94:5e:c2:cd:09:95:41:cc:89:d9:bf:
                    35:74:70:d6:6e:d0:ff:df:fe:e3:e7:cd:87:52:28:
                    af:8a:68:ee:9c:83:2a:d2:9c:13:da:89:95:bb:31:
                    cb:b5:1f:c0:9d:76:0b:66:e1:b4:f0:ec:7a:06:93:
                    a9:09:89:09:e7:e2:a7:7b:54:ae:f1:73:8a:3f:f3:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:81:D2:01:B9:79:B4:28:E1:CD:D4:41:9C:0C:B0:8C:55:DE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71bb4f1e-9a5c-334c-a418-7af574c332aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:b3:90:65:59:43:d8:81:77:ad:e7:a9:b9:14:19:db:8f:
         1a:5d:73:b9:1b:73:06:37:98:39:87:87:80:fc:1f:dc:78:c3:
         24:c8:a3:60:64:30:fc:01:6b:fd:eb:4f:7a:23:c9:33:10:13:
         dd:00:05:78:08:98:bf:f0:af:40:35:ce:d9:98:bd:1d:20:36:
         c4:d9:53:ae:73:4c:71:b1:62:35:4f:7d:ae:77:3d:8f:ac:d9:
         bb:5c:06:32:66:a3:15:9f:3d:e0:2e:1e:2c:29:a8:83:e0:40:
         95:9e:2c:5f:7b:0e:06:6c:47:12:76:dc:df:4d:21:17:c7:c4:
         70:5c:76:f6:62:cf:3f:8a:78:53:e6:be:97:3d:e8:eb:5e:6c:
         ee:5e:b5:7f:77:a7:45:7d:2b:83:be:54:78:a5:c6:4e:a7:bf:
         9b:95:08:c1:45:28:46:c9:bc:31:00:e6:16:04:b8:83:f5:66:
         87:40:fa:93:1d:71:19:5f:5e:b6:ce:ae:d0:b4:8b:dd:98:b4:
         e2:af:2f:b1:73:48:f8:1b:d2:56:1a:82:16:10:5a:6d:f1:8e:
         1b:60:fe:7a:d8:71:71:f9:07:72:0c:c4:d4:d8:c5:90:46:65:
         43:01:30:88:39:97:7f:1a:5b:eb:d2:d0:0c:43:00:e9:62:32:
         fe:c2:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:45 2024 by rpki-client on console-fra.rpki-client.org