Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/c45b22ad-43dc-324d-8596-98d6da9d5351.roa
File:                     c45b22ad-43dc-324d-8596-98d6da9d5351.roa (raw, json)
Hash identifier:          jdUl+YGy/SE6iFN4MHit9Yk4bqlw09wkqRzWHOmvHA8=
Subject key identifier:   00:6E:6B:0A:8C:5C:B4:68:67:A4:A4:CE:A6:C3:32:F5:21:58:84:05
Certificate issuer:       /CN=eecc445c-064d-41ee-91f1-3ef708241983
Certificate serial:       010D0C9F432858490CF873D6B56C343D2725E380
Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/c45b22ad-43dc-324d-8596-98d6da9d5351.roa
Signing time:             Sun 02 Mar 2025 04:24:08 +0000
ROA not before:           Sun 02 Mar 2025 04:24:08 +0000
ROA not after:            Sat 31 May 2025 03:24:08 +0000
asID:                     32524
IP address blocks:        130.51.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:f8:73:d6:b5:6c:34:3d:27:25:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983
        Validity
            Not Before: Mar  2 04:24:08 2025 GMT
            Not After : May 31 03:24:08 2025 GMT
        Subject: CN=8c5c5ef6-10ec-4884-912a-e9eb063e0ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:a7:22:fb:b7:82:06:e5:e4:96:36:0b:4d:
                    21:2f:a7:6a:82:ac:b8:06:e8:5d:99:9e:dc:88:63:
                    08:dd:77:5a:aa:f5:e3:da:2b:08:eb:d9:18:fb:91:
                    ae:4b:03:e2:e8:04:67:73:7b:dd:d7:63:ef:56:f5:
                    97:2b:23:15:53:d2:02:ae:f0:97:d7:bf:47:f8:67:
                    e6:0b:d5:58:52:b0:3f:bb:93:f4:9d:8d:05:e9:cf:
                    41:dd:c6:db:e4:43:f9:d1:db:3c:f0:3f:bd:d1:8f:
                    0d:0b:1e:01:d5:a9:50:85:b7:69:3e:85:6e:42:c9:
                    51:29:e9:88:d8:83:2f:58:b0:c6:28:34:a1:2c:01:
                    50:ea:fc:bd:72:33:7c:8a:a1:4b:22:7d:e2:40:2f:
                    dd:84:ab:cc:55:45:52:59:8e:d8:63:7d:68:b4:8a:
                    84:45:2a:41:16:00:8c:27:2d:52:1b:6d:f7:a1:57:
                    80:29:c8:90:29:14:74:96:9d:1e:42:ed:c6:f6:ee:
                    3a:73:6c:38:8d:bc:9d:3d:ea:58:25:0f:3f:37:73:
                    3d:d7:79:24:ea:6b:24:86:dd:89:8e:6a:eb:95:c0:
                    05:81:c7:56:9c:e9:cf:20:f9:74:46:98:60:0b:1b:
                    0f:b4:df:51:9c:24:d3:46:23:77:5b:f2:4d:c4:61:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:6B:0A:8C:5C:B4:68:67:A4:A4:CE:A6:C3:32:F5:21:58:84:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/c45b22ad-43dc-324d-8596-98d6da9d5351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl

            X509v3 Authority Key Identifier:
                keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:cb:f9:b4:30:e2:ed:77:61:aa:31:1c:65:90:69:41:42:
         8a:23:d1:08:df:32:68:5f:4d:70:25:58:ce:83:48:f5:f2:3a:
         e7:72:fe:6b:68:9d:25:3f:06:cd:7a:d6:c7:b4:96:99:a7:3e:
         91:ab:2c:01:16:e4:86:00:c6:f1:72:c0:a2:38:96:40:6c:92:
         cc:21:93:07:6e:6a:04:9e:ee:54:38:40:18:66:6c:be:f9:28:
         50:5b:c3:ef:b3:e0:9e:c5:34:e4:76:1e:e6:7f:76:70:54:45:
         f7:17:af:7b:91:b4:c0:a1:85:ba:16:5b:29:f1:1a:92:2c:30:
         40:ad:66:45:d7:6a:94:94:a0:2d:c7:23:ff:53:bb:55:c3:67:
         98:3e:9f:df:1d:b9:cf:13:e8:7a:5a:f0:9c:58:af:5b:d7:46:
         86:20:b7:2b:53:00:2d:00:fe:3d:1f:6f:13:fb:3c:e2:b2:34:
         01:e9:1b:3f:2f:9c:3d:96:47:4c:87:49:b1:8b:a8:b7:06:a5:
         fa:4d:c0:e6:ae:65:73:56:5f:3f:52:84:8b:df:31:2d:13:04:
         74:85:4f:e3:8f:64:5d:21:b6:3e:2c:60:12:7b:1e:8d:af:3f:
         16:30:f7:88:07:20:74:d6:74:8c:71:62:8d:dc:f5:85:16:bc:
         9f:29:0a:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkM+HPWtWw0PScl44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVjYzQ0NWMtMDY0ZC00MWVlLTkxZjEtM2VmNzA4MjQx
OTgzMB4XDTI1MDMwMjA0MjQwOFoXDTI1MDUzMTAzMjQwOFowLzEtMCsGA1UEAxMk
OGM1YzVlZjYtMTBlYy00ODg0LTkxMmEtZTllYjA2M2UwZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3+nIvu3ggbl5JY2C00hL6dqgqy4BuhdmZ7c
iGMI3XdaqvXj2isI69kY+5GuSwPi6ARnc3vd12PvVvWXKyMVU9ICrvCX179H+Gfm
C9VYUrA/u5P0nY0F6c9B3cbb5EP50ds88D+90Y8NCx4B1alQhbdpPoVuQslRKemI
2IMvWLDGKDShLAFQ6vy9cjN8iqFLIn3iQC/dhKvMVUVSWY7YY31otIqERSpBFgCM
Jy1SG233oVeAKciQKRR0lp0eQu3G9u46c2w4jbydPepYJQ8/N3M913kk6mskht2J
jmrrlcAFgcdWnOnPIPl0RphgCxsPtN9RnCTTRiN3W/JNxGHi2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABuawqMXLRoZ6SkzqbDMvUhWIQFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNj
NDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3MDgyNDE5ODMvYzQ1YjIyYWQtNDNkYy0z
MjRkLTg1OTYtOThkNmRhOWQ1MzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWVjYzQ0NWMtMDY0ZC00MWVlLTkx
ZjEtM2VmNzA4MjQxOTgzL2VlY2M0NDVjLTA2NGQtNDFlZS05MWYxLTNlZjcwODI0
MTk4My5jcmwwHwYDVR0jBBgwFoAUzUCROQ67xHz8aYwLu+ubI2atMYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNjNDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3
MDgyNDE5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjN5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC85y/m0MOLtd2GqMRxlkGlBQooj0QjfMmhfTXAlWM6DSPXyOudy/mto
nSU/Bs161se0lpmnPpGrLAEW5IYAxvFywKI4lkBskswhkwduagSe7lQ4QBhmbL75
KFBbw++z4J7FNOR2HuZ/dnBURfcXr3uRtMChhboWWynxGpIsMECtZkXXapSUoC3H
I/9Tu1XDZ5g+n98duc8T6Hpa8JxYr1vXRoYgtytTAC0A/j0fbxP7POKyNAHpGz8v
nD2WR0yHSbGLqLcGpfpNwOauZXNWXz9ShIvfMS0TBHSFT+OPZF0htj4sYBJ7Ho2v
PxYw94gHIHTWdIxxYo3c9YUWvJ8pCnY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:20 2025 by rpki-client