Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e020ce3d-c43f-3372-96bf-ac384287d3be.roa
File:                     e020ce3d-c43f-3372-96bf-ac384287d3be.roa (raw, json)
Hash identifier:          s90bfgDTVMlFt32DhW4rscysGUKvl45sZ50CA/EfvBI=
Subject key identifier:   8B:FF:3A:5F:FD:92:1B:94:61:B6:21:16:E6:C7:7B:63:C0:F0:0C:95
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B047C15B88E9C59C6705A8280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e020ce3d-c43f-3372-96bf-ac384287d3be.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     64267
IP address blocks:        130.254.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:15:b8:8e:9c:59:c6:70:5a:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=fc1baa19-31bd-4767-8b36-9af90c40c95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:8c:2b:23:16:18:fd:83:85:c3:0b:70:3d:
                    dd:b0:15:43:ad:b1:61:12:02:f6:e2:5e:24:1a:0a:
                    21:81:e9:ac:1f:2d:92:50:25:42:61:16:6b:f9:dd:
                    7f:11:0a:22:79:3e:30:ee:89:e5:7a:6d:41:19:78:
                    04:c7:d2:6a:f8:06:96:7c:d1:5f:2a:0f:39:1e:64:
                    6d:42:fc:ee:5c:2e:40:02:32:1f:fc:4e:83:0c:5b:
                    5e:da:c0:dc:06:0d:07:0d:dd:a2:4f:0a:4b:6f:cf:
                    f9:8a:73:57:85:15:fb:9f:2f:c7:6a:6a:ea:e5:b6:
                    cc:86:90:df:ef:57:e8:6e:cc:f9:65:8d:b3:6e:c0:
                    64:10:5e:bb:1b:27:98:2e:5c:7c:f7:55:36:d5:c2:
                    29:82:a6:48:33:09:c3:a6:47:cf:2e:cf:9a:de:de:
                    49:03:e4:4c:60:15:5d:d9:b8:55:ce:12:ca:0b:65:
                    6f:cd:3b:67:1d:0a:aa:64:b3:d0:24:71:90:c2:f3:
                    67:80:20:b7:d6:80:3e:fa:af:f0:12:15:01:24:27:
                    17:aa:16:dd:76:56:df:3b:76:e7:10:67:fb:39:2c:
                    13:16:e2:0e:7e:36:9c:24:ea:8a:bc:c9:ed:81:22:
                    87:06:41:00:e8:72:b8:6f:2f:1c:e0:4d:92:a6:37:
                    54:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FF:3A:5F:FD:92:1B:94:61:B6:21:16:E6:C7:7B:63:C0:F0:0C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e020ce3d-c43f-3372-96bf-ac384287d3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:86:38:82:6a:8e:90:96:6a:80:5c:03:b6:a3:0d:64:16:
         eb:13:79:2a:12:e3:12:61:a3:11:64:50:b1:cf:16:d3:a0:29:
         b8:e6:36:29:0c:92:4a:2d:7e:ca:7f:2d:27:76:c7:d6:0c:ae:
         2d:56:b3:7f:16:f4:8d:99:7f:dc:b0:37:b4:83:d3:4f:91:a7:
         47:03:07:1d:a5:d3:d0:c9:5f:93:59:52:c1:67:6f:5d:34:72:
         6e:95:e9:e1:0b:d4:d5:b3:80:ee:03:ac:b4:15:2e:1c:ad:f8:
         11:6d:08:0e:24:a3:50:9e:87:f2:3f:30:2c:2b:1c:90:9d:53:
         16:ad:7d:da:80:8c:17:47:c8:99:2a:6e:55:5f:b2:19:a2:b8:
         1d:d4:d3:5e:71:5e:43:55:95:e3:83:f3:52:7d:5c:6a:0a:ab:
         17:b8:11:b9:bc:50:d5:99:49:ae:c4:1c:33:04:40:64:09:12:
         f3:95:83:95:d2:35:98:42:b0:66:c0:85:7a:0e:59:b0:74:cc:
         39:b3:59:94:d5:13:4b:02:6d:b9:95:66:98:2e:42:12:a3:64:
         98:14:e2:14:08:a0:67:35:41:80:d2:7c:83:b0:b0:82:97:0e:
         ac:59:21:dd:a5:cd:f3:1c:60:af:c0:20:e2:f9:e7:58:b6:e1:
         51:45:11:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBW4jpxZxnBagoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZmMxYmFhMTktMzFiZC00NzY3LThiMzYtOWFmOTBjNDBjOTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAGMKyMWGP2DhcMLcD3dsBVDrbFhEgL24l4k
GgohgemsHy2SUCVCYRZr+d1/EQoieT4w7onlem1BGXgEx9Jq+AaWfNFfKg85HmRt
QvzuXC5AAjIf/E6DDFte2sDcBg0HDd2iTwpLb8/5inNXhRX7ny/Hamrq5bbMhpDf
71fobsz5ZY2zbsBkEF67GyeYLlx891U21cIpgqZIMwnDpkfPLs+a3t5JA+RMYBVd
2bhVzhLKC2VvzTtnHQqqZLPQJHGQwvNngCC31oA++q/wEhUBJCcXqhbddlbfO3bn
EGf7OSwTFuIOfjacJOqKvMntgSKHBkEA6HK4by8c4E2SpjdUGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIv/Ol/9khuUYbYhFubHe2PA8AyVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTAyMGNlM2QtYzQzZi0z
MzcyLTk2YmYtYWMzODQyODdkM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv58MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvvhjiCao6QlmqAXAO2ow1kFusTeSoS4xJhoxFkULHPFtOgKbjmNikM
kkotfsp/LSd2x9YMri1Ws38W9I2Zf9ywN7SD00+Rp0cDBx2l09DJX5NZUsFnb100
cm6V6eEL1NWzgO4DrLQVLhyt+BFtCA4ko1Ceh/I/MCwrHJCdUxatfdqAjBdHyJkq
blVfshmiuB3U015xXkNVleOD81J9XGoKqxe4Ebm8UNWZSa7EHDMEQGQJEvOVg5XS
NZhCsGbAhXoOWbB0zDmzWZTVE0sCbbmVZpguQhKjZJgU4hQIoGc1QYDSfIOwsIKX
DqxZId2lzfMcYK/AIOL551i24VFFEVQ=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:35 2025 by rpki-client