Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/99e06c4c-99eb-3a24-8b1c-7d90d5fba041.roa
File:                     99e06c4c-99eb-3a24-8b1c-7d90d5fba041.roa (raw, json)
Hash identifier:          9n8sJMdenp5sX4Fb+ivxBhx4+C365l24hc0GUphIAiM=
Subject key identifier:   6B:83:DB:40:25:19:78:06:4B:95:22:AE:1B:04:4E:BF:0C:E5:7B:38
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848DA70F086D5BF90CBE10AD600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/99e06c4c-99eb-3a24-8b1c-7d90d5fba041.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     397630
IP address blocks:        130.254.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f0:86:d5:bf:90:cb:e1:0a:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=6d9b7354-2d3f-4b69-9c3e-0d89cd0cd179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:80:27:28:ab:57:25:12:d7:dc:6a:0e:a0:
                    c9:22:ab:38:35:db:12:2d:e0:ef:f8:73:23:10:31:
                    c7:59:47:e7:1f:b9:22:ec:2f:b7:c9:89:ba:04:da:
                    5f:f9:ce:49:b5:ba:56:10:97:4f:0e:fc:64:55:bc:
                    a1:b2:27:94:c3:74:05:c9:3e:a7:61:4f:89:53:52:
                    5c:76:32:f2:5d:f0:15:29:05:b9:03:e2:2f:76:46:
                    95:73:4d:51:7f:1a:5b:79:00:5f:fc:e3:c8:e5:85:
                    8f:fd:e9:68:fd:05:be:22:06:f3:f0:57:37:97:1d:
                    e3:9e:92:d7:50:77:98:39:9d:62:29:86:c2:91:56:
                    46:12:a4:58:4a:de:8a:c9:e7:0d:d3:34:fd:ab:42:
                    81:50:f2:25:04:9e:b3:be:b1:b2:ab:5e:7d:e2:1b:
                    9f:e2:3d:a1:e3:f2:4f:77:e8:52:50:23:0e:6d:3a:
                    5d:d4:79:80:79:51:07:62:c1:2d:79:73:a3:41:07:
                    76:d3:51:0b:fc:12:97:e3:d1:d9:af:fe:99:f0:a5:
                    3d:fc:23:ae:00:53:94:b4:b9:2f:78:1e:5f:bf:ba:
                    ec:21:60:70:d4:9d:17:03:f0:58:54:c2:48:f4:3d:
                    88:10:65:32:e6:ea:ed:26:4a:7b:dd:d3:40:4e:5a:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:83:DB:40:25:19:78:06:4B:95:22:AE:1B:04:4E:BF:0C:E5:7B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/99e06c4c-99eb-3a24-8b1c-7d90d5fba041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:48:92:71:54:bf:8a:27:42:01:0d:6d:91:af:7e:1b:a6:
         dd:8d:46:b9:bc:a0:ee:34:38:28:32:80:79:48:56:13:e8:07:
         07:bb:ef:74:7c:56:79:01:89:0a:57:80:42:3d:60:9b:35:89:
         f1:71:67:fa:7b:db:0f:df:e3:7f:f4:03:c5:47:65:f4:c7:2d:
         00:56:2f:ed:1c:70:38:a5:5c:3a:aa:ab:d4:00:32:bd:bd:af:
         cf:c7:21:d0:f4:f5:fd:1e:68:ca:53:7b:8b:d2:0a:25:90:e4:
         ea:a5:e1:78:fc:f0:44:84:cf:c6:bc:8d:fa:24:6a:fb:1c:a0:
         76:50:60:5c:b0:0d:71:7f:a2:8d:c4:72:75:8c:34:89:f3:94:
         cd:0b:39:58:11:bd:02:d0:55:61:bb:3a:4f:ce:1b:4a:0a:68:
         46:57:0a:78:49:59:9d:06:b4:13:06:31:20:8f:be:94:5b:06:
         a6:96:7f:44:21:42:55:34:49:e5:6c:1c:85:c8:ca:1c:c5:70:
         c6:d0:a7:6b:d5:86:38:7b:90:54:03:f8:81:b7:89:5c:4f:42:
         19:39:fe:47:94:ec:0b:5e:33:33:37:7e:9e:e8:2b:c3:c9:0f:
         7c:91:69:d3:cb:9c:bc:5e:3a:6f:63:a5:01:39:c1:47:51:2a:
         08:60:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:15 2025 by rpki-client