Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dda4e217-07b8-367a-befc-cdc023880281.roa
File:                     dda4e217-07b8-367a-befc-cdc023880281.roa (raw, json)
Hash identifier:          +T2D74KoiCJa/AfuX8Eym5Zet5caNQBUynSayTnRjgo=
Subject key identifier:   ED:7C:D7:91:FF:A4:8A:3D:4C:F1:BE:19:3E:9E:1B:9C:43:EC:3E:F4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848D7A650AA4302247DFC515760
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dda4e217-07b8-367a-befc-cdc023880281.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        130.254.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:50:aa:43:02:24:7d:fc:51:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=cc8cf652-b823-4ef2-8b7d-1fa4815403ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:8e:27:01:bf:ac:22:e6:30:bc:97:20:d0:
                    c3:62:f6:e6:89:df:69:b4:25:db:4e:24:a8:56:da:
                    3e:29:0b:4a:80:ab:4e:0e:64:38:ac:f5:81:e3:a4:
                    f8:e7:b8:50:b8:19:a9:4a:1c:c4:ec:41:79:72:dc:
                    a1:3a:da:66:1a:e4:b8:6d:44:de:cb:67:c1:12:b7:
                    01:e4:cd:24:c0:95:ca:f1:41:ab:48:3b:a1:08:23:
                    08:2b:f5:90:38:5a:91:a9:eb:83:11:57:f7:9b:e6:
                    68:6e:06:9e:c2:80:fb:0d:c1:b2:a2:8b:16:fe:ad:
                    fb:72:cd:65:0c:33:3c:03:b0:f5:82:ff:0f:2f:b0:
                    6c:01:18:58:10:a0:28:1e:68:75:81:ba:29:71:02:
                    a3:17:93:b4:9a:8b:73:b9:ef:51:35:98:2c:61:85:
                    01:6e:5f:ea:eb:c6:0d:b4:82:64:d1:d3:76:b1:27:
                    51:f7:6e:93:87:1b:28:4d:e1:f1:b8:2f:4b:7b:49:
                    53:07:1e:b7:1c:02:d4:fd:9e:3c:c5:b3:da:3f:10:
                    f5:87:7a:a7:f5:36:8e:cb:58:2d:c1:70:2e:50:7e:
                    9d:13:af:ba:ce:99:89:aa:c9:ec:76:9d:c0:bf:e2:
                    8f:45:a5:e3:2e:1d:70:1d:56:fe:28:b5:2a:e5:55:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7C:D7:91:FF:A4:8A:3D:4C:F1:BE:19:3E:9E:1B:9C:43:EC:3E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dda4e217-07b8-367a-befc-cdc023880281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:55:33:4c:5d:41:f5:17:ad:56:b0:cf:2b:d7:f4:75:b5:
         e6:78:5e:89:07:ab:d5:0d:b1:48:db:fe:57:e2:29:ee:74:53:
         5d:29:ac:38:35:ed:b7:5b:a2:26:9a:9e:75:2e:69:17:97:44:
         63:22:79:20:9f:38:a8:a1:f9:44:0f:84:40:e4:7e:2f:cc:56:
         54:a6:fa:63:61:c5:4a:5a:5f:b5:e7:ab:1a:13:7b:13:c8:ef:
         1e:b6:a7:a6:53:49:16:db:8d:11:e1:e4:a4:12:41:14:dd:96:
         8e:e2:48:a4:45:8e:a7:ea:d3:53:43:c8:97:d6:d5:26:12:9d:
         ea:70:7b:30:57:85:76:1e:6d:73:d3:fa:2b:b5:f2:28:a2:1a:
         20:21:0a:bc:b6:b3:6a:01:af:20:7d:48:ad:ee:19:d1:5d:e2:
         73:41:c7:5b:49:88:59:d0:42:90:30:d5:a5:b5:1d:3d:e8:a9:
         77:c9:58:f5:ee:7b:38:04:ec:ff:54:74:e0:a8:b7:05:ba:bd:
         07:fa:58:ae:5c:9e:b5:8b:d8:df:46:46:60:bb:db:ca:f0:d3:
         03:75:02:af:9c:b9:5d:2e:bc:d8:7e:c4:e9:2f:3b:91:45:9d:
         9d:8c:67:b7:e6:47:1f:d5:0d:9a:66:67:00:41:c7:13:af:ab:
         0f:3a:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:49 2025 by rpki-client