Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87955ec5-4daf-37ed-8562-a2c2e0d8611e.roa
File:                     87955ec5-4daf-37ed-8562-a2c2e0d8611e.roa (raw, json)
Hash identifier:          lkpQqO9sFS9ijWLrtfedyBOtutPIyezw8KJvIFtgjZQ=
Subject key identifier:   29:C7:92:E2:01:BA:CF:35:DA:71:C0:D8:1F:A7:F1:5C:F4:8C:44:9B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584558C84187FE21406E21C4BEE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87955ec5-4daf-37ed-8562-a2c2e0d8611e.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     7018
IP address blocks:        130.254.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:41:87:fe:21:40:6e:21:c4:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=4404b309-de27-46ed-9e92-a03f91e75f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:7c:cb:0d:81:ae:f9:37:c4:ff:4c:46:0c:
                    ad:cc:43:c7:f4:10:55:c5:f4:30:f4:9b:35:88:4f:
                    96:54:83:34:c0:00:ea:31:ef:98:15:53:d5:1a:2c:
                    ea:e9:37:de:80:4a:d2:cf:83:77:b6:b5:2c:ac:1f:
                    37:50:47:fd:01:9d:27:6b:0c:72:c8:ec:2c:d7:df:
                    e0:bd:6e:cf:65:55:b6:cf:11:b1:12:51:33:37:dd:
                    c9:88:f3:83:cd:b8:f3:9d:2b:9a:75:63:e7:ec:c3:
                    16:0a:ed:e6:54:a7:b4:9a:b2:cb:72:ad:7d:55:e1:
                    2c:4b:68:1c:21:45:a9:ed:3b:c8:40:e1:26:08:27:
                    33:76:d7:7f:3e:df:da:86:3f:6b:7e:30:42:31:45:
                    a6:84:c6:29:f7:3b:19:ac:9d:14:33:9c:34:51:5f:
                    ed:97:48:a1:ee:f4:f7:c1:df:cb:3e:d5:25:11:bd:
                    6a:d6:10:60:e3:e2:af:f1:63:0f:f1:cd:2d:99:a4:
                    0b:0d:55:01:6c:83:8c:62:1d:6b:55:98:63:7c:68:
                    f3:20:0d:01:1a:67:c1:33:7b:3e:9d:8e:60:f2:a2:
                    1a:a5:c3:0e:43:06:c8:0e:b7:68:24:9f:44:7d:29:
                    0d:e2:22:0b:a3:6a:df:51:9e:a3:90:b4:82:8e:4e:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:92:E2:01:BA:CF:35:DA:71:C0:D8:1F:A7:F1:5C:F4:8C:44:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87955ec5-4daf-37ed-8562-a2c2e0d8611e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:31:d7:a5:ac:bb:67:ec:76:ec:54:b3:c4:92:51:77:ba:2f:
         7e:b4:3e:ea:5c:0c:10:88:f6:a9:47:1a:b7:2f:10:75:6b:9b:
         d3:28:8b:2b:55:3e:fc:16:26:b1:22:88:96:fc:dc:9c:4f:60:
         f6:8a:41:35:b4:59:be:9d:f1:c1:82:d8:0a:aa:a1:a3:ab:ad:
         3c:46:09:09:5f:e5:d3:ce:8f:a5:da:e5:55:c9:d1:4d:ea:68:
         17:af:be:5e:0c:e8:f5:5d:e2:5d:5f:ca:a1:49:fb:31:5a:c9:
         33:c8:bd:bb:d9:c5:ae:4a:31:69:42:ec:d0:9e:dc:28:d4:8c:
         8c:fd:0b:46:1b:16:28:b4:c6:f3:e8:2e:fb:e4:a3:a1:5b:90:
         ff:bc:b0:7e:df:ed:9d:e8:6d:f1:92:bf:ad:28:a6:08:20:b9:
         1c:a8:29:51:34:0e:a2:0a:ea:3a:96:0b:ba:be:37:b1:da:5b:
         57:9b:44:7b:ad:1e:82:aa:29:49:5a:06:ec:0a:35:be:c0:76:
         1a:b7:43:55:a8:d5:72:42:55:67:a2:68:6e:59:41:44:7a:63:
         3f:7e:dc:1e:3d:ee:f0:55:ea:c4:b0:eb:96:79:35:c9:47:e9:
         c7:61:03:42:65:e0:dd:14:a4:ba:52:5a:e1:f2:65:45:7e:48:
         b0:c3:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org