Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c7724514-24be-3dcc-b896-47170fa0e94b.roa
File:                     c7724514-24be-3dcc-b896-47170fa0e94b.roa (raw, json)
Hash identifier:          SdNsKjTv0YqFPKK5NdyRyZ+6B7CeGIOXSFQaNFbEUwk=
Subject key identifier:   0A:D5:5A:5B:8B:26:D8:89:81:D0:E8:6E:30:E5:A9:C8:12:95:4B:1F
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584AFC2247DEB6A08500E8B773A0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c7724514-24be-3dcc-b896-47170fa0e94b.roa
Signing time:             Tue 26 Aug 2025 13:13:32 +0000
ROA not before:           Tue 26 Aug 2025 13:13:32 +0000
ROA not after:            Mon 24 Nov 2025 14:13:32 +0000
asID:                     32181
IP address blocks:        130.254.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:22:47:de:b6:a0:85:00:e8:b7:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 26 13:13:32 2025 GMT
            Not After : Nov 24 14:13:32 2025 GMT
        Subject: CN=a31385c6-7d88-44a0-9fd9-f3438bd804a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:09:bb:44:63:31:22:6a:44:b0:a1:cb:24:
                    ba:90:b3:44:1d:79:f1:b8:a7:a5:4d:37:8c:06:75:
                    56:74:33:26:1c:4b:e4:cd:64:b4:7f:4a:9a:42:61:
                    64:70:3a:30:22:a7:6c:81:8f:29:b9:cd:e0:37:b5:
                    b5:c0:0a:c7:41:7f:3d:b3:d5:16:1a:d2:48:fc:46:
                    72:ff:b2:5a:9d:8e:0a:48:be:03:70:3d:e5:24:b4:
                    67:80:29:e1:8b:b5:7b:83:a2:34:43:34:57:24:2b:
                    16:0a:9a:00:df:3f:89:e2:84:4a:b3:3a:9b:1e:36:
                    50:d3:56:75:b0:98:5e:84:89:2b:23:9a:69:a4:21:
                    30:48:93:3e:29:5c:31:65:03:4f:66:42:42:75:08:
                    24:01:3e:77:21:72:8d:a4:74:0d:a6:26:a0:e3:95:
                    8b:8e:3c:b2:e0:11:36:63:e3:7d:85:af:30:8d:d9:
                    70:1c:c5:b4:1e:dc:80:fd:f0:49:e2:14:f6:2e:4c:
                    1d:40:32:87:c9:1c:80:35:08:91:e9:93:78:15:44:
                    3e:cc:ef:e1:cf:a1:53:3d:b4:20:fe:d0:03:3f:7d:
                    9d:02:6a:a9:88:c4:52:7a:31:12:cb:f6:20:f6:be:
                    30:32:cb:b3:00:1c:b1:b5:91:27:36:4a:23:64:02:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D5:5A:5B:8B:26:D8:89:81:D0:E8:6E:30:E5:A9:C8:12:95:4B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c7724514-24be-3dcc-b896-47170fa0e94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:8b:84:5f:d2:0d:5c:ba:2d:d8:87:74:14:ca:74:21:a4:7d:
         0f:d3:61:b8:95:a9:1e:96:21:ee:4b:1d:57:4d:0c:3e:52:48:
         b4:f2:9f:f9:e2:8d:65:e6:01:93:19:1a:67:58:c7:75:f6:71:
         ba:84:06:45:38:a4:e3:91:5f:d7:14:02:53:8a:7f:88:d1:d3:
         7f:3d:a7:6f:7a:75:fb:34:e2:f0:b3:f6:f0:34:33:81:f8:51:
         26:8b:3a:0a:62:43:8c:a3:ce:5b:71:40:2f:2b:48:e8:03:ea:
         8e:f4:6f:30:ad:bc:b6:55:0c:5f:b8:0f:dd:0a:56:e2:76:40:
         88:8e:53:42:45:fc:d1:aa:20:57:b0:33:b7:3f:68:3c:93:2e:
         96:e1:fa:5b:4e:8a:0b:9c:71:52:61:c6:de:d6:8a:2d:3a:e8:
         29:9b:96:44:9a:14:ec:4b:5f:e4:54:3b:3a:11:78:b2:00:05:
         2d:7e:9d:8b:8e:7f:e1:ee:d6:48:3c:c8:bb:9e:f0:5f:06:5a:
         ae:a8:52:0f:a1:cd:28:82:f0:28:35:2e:0a:07:26:8e:f6:02:
         27:19:f7:6e:fd:34:cb:d8:5f:08:04:b7:67:fd:89:63:d0:d0:
         5c:4f:c2:84:41:fe:98:b9:02:a8:ca:e1:55:b5:04:ea:99:d3:
         33:8f:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 15:46:57 2025 by rpki-client