Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ad3526db-4937-3761-af02-86ca3b102f05.roa
File:                     ad3526db-4937-3761-af02-86ca3b102f05.roa (raw, json)
Hash identifier:          5/VLbyW/nlVzHSJD49dKbg01VyOCYyKf3je8YSehZUM=
Subject key identifier:   2A:34:F5:A6:FE:75:15:C8:FC:C0:55:28:BA:98:30:A0:28:57:ED:B2
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858495ABEE44D3B84A58CBAD68D80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ad3526db-4937-3761-af02-86ca3b102f05.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     2914
IP address blocks:        130.254.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e4:4d:3b:84:a5:8c:ba:d6:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=00af1fce-465d-48c7-938d-f0b06dc10821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:ed:b1:22:cc:10:42:77:44:96:b0:9c:ce:
                    b9:77:41:bb:84:ba:62:1c:2a:f4:ec:e5:48:7d:fc:
                    d9:b1:16:ab:85:57:98:47:d7:d7:4c:6b:7f:e9:1f:
                    06:e5:d7:dc:25:14:83:24:4d:a4:5e:ef:0e:22:c4:
                    f8:ee:27:d3:3a:ca:db:d3:37:68:7b:63:24:07:65:
                    84:e4:5b:e4:78:bb:14:2d:7c:f0:de:f9:ae:0e:2d:
                    c9:5e:b1:aa:5b:93:33:49:df:14:1e:16:c5:e0:87:
                    95:42:09:b3:46:22:f5:9d:25:bb:81:9e:65:24:76:
                    40:2b:0f:e4:89:5d:83:a4:14:a0:ab:8a:d8:80:50:
                    86:4b:37:95:e5:8d:34:a1:54:98:41:f9:77:97:f7:
                    09:f2:d0:5e:cd:41:ad:37:ad:7d:cc:5d:ea:d8:a1:
                    cc:f7:4f:d5:30:c3:b8:19:b1:33:86:bf:e3:89:0f:
                    6f:87:85:e0:3c:cd:cd:9b:9a:b8:39:13:7f:71:3c:
                    0a:c9:82:65:f9:b1:7f:1a:ea:d1:54:01:06:87:87:
                    47:6f:a5:2c:45:ba:87:50:a2:79:69:2a:cf:62:fe:
                    d3:db:33:1e:4a:63:88:67:f2:61:43:53:65:37:e0:
                    00:cd:b2:24:09:12:eb:d5:1b:95:df:0c:3b:d0:ae:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:34:F5:A6:FE:75:15:C8:FC:C0:55:28:BA:98:30:A0:28:57:ED:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ad3526db-4937-3761-af02-86ca3b102f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:25:d5:37:37:c1:5f:22:08:df:6d:37:7e:63:69:f2:e9:f2:
         75:1c:4f:24:f7:de:92:c9:0f:ed:1f:0c:7c:bc:34:ed:31:df:
         c9:50:86:48:eb:53:29:41:3e:3c:89:b6:93:44:67:40:70:fe:
         b6:47:d3:24:09:2a:71:ec:3d:95:9e:e6:c1:5d:b7:e8:65:7c:
         89:5f:a5:27:37:59:4b:c9:a5:8d:0a:80:0e:13:2a:93:6d:63:
         24:b3:5a:d2:9f:31:b5:5c:15:98:aa:f7:27:fc:c5:a6:93:e8:
         7f:79:37:8e:a3:ec:47:67:d1:68:53:5c:b7:92:c0:f1:39:02:
         1c:56:a2:51:50:f0:67:77:c8:38:f3:03:a5:10:4d:c9:a9:14:
         40:48:35:a5:f3:6b:30:55:d8:33:3e:62:25:1a:b4:41:89:4b:
         a7:c7:7f:dd:f0:07:1e:5e:5e:31:b0:08:6a:cc:b9:2e:d6:ed:
         b8:52:c4:06:03:9c:69:8a:c1:d4:7d:51:ce:7c:6e:5e:52:78:
         67:fd:4d:5f:ea:07:6d:b0:57:f2:20:52:db:2d:66:99:9b:70:
         fb:dd:08:5d:cb:6f:1b:fb:78:89:c5:90:40:94:49:7c:79:4d:
         6a:0d:36:0f:3e:6e:41:c2:dd:8c:ab:37:cf:1a:73:ae:9f:fc:
         cf:5b:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:15 2025 by rpki-client