Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/10be62e9-28d1-3850-82c7-7ec81651d656.roa
File:                     10be62e9-28d1-3850-82c7-7ec81651d656.roa (raw, json)
Hash identifier:          Pp6VAlN4YoB2Ehw5BSTl1wV4whxCD/oqxeSwlWz7W5s=
Subject key identifier:   5F:DC:81:13:50:CB:44:0B:ED:40:0E:FE:78:82:B7:4B:E8:81:E0:7F
Certificate issuer:       /CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
Certificate serial:       010D0C9F43285849F71505C72F9F077F047B6980
Authority key identifier: 58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/10be62e9-28d1-3850-82c7-7ec81651d656.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     400133
IP address blocks:        130.250.170.0/24 maxlen: 24
                          130.250.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:05:c7:2f:9f:07:7f:04:7b:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=bc34e988-8a37-4e63-869f-f94c306e1b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:7c:91:8a:c1:00:11:d3:6e:cd:c7:6a:63:
                    ca:e4:88:72:fb:80:69:60:a6:b9:fe:ec:42:33:7b:
                    bf:13:52:61:80:00:fd:87:a7:d5:03:db:0f:4e:a6:
                    91:d6:80:a9:bc:d2:71:fe:72:0a:32:af:f4:c4:26:
                    55:49:49:e3:55:f5:de:42:8b:76:f5:2e:b7:14:9a:
                    58:70:4c:41:a6:4f:ce:ba:a8:01:44:00:f4:c7:5c:
                    ad:a5:78:56:1e:ef:df:a9:85:f7:4c:0c:80:56:e2:
                    40:a4:56:2e:47:fb:15:4c:aa:c9:09:16:a5:3d:2c:
                    24:d0:82:f4:e2:8c:15:f7:f8:c7:f5:e1:2e:75:6b:
                    59:c9:9e:c0:70:92:e1:2f:21:d5:cb:5d:5b:b5:ab:
                    7f:06:14:b4:f7:9a:b9:a3:26:0b:05:51:08:2f:7c:
                    37:14:9d:25:71:89:b9:29:89:12:a9:0c:10:bd:d6:
                    09:87:7b:53:21:8a:0f:2e:e7:0c:e0:45:de:1c:d7:
                    bd:eb:62:df:1f:86:ae:29:40:4e:fb:a2:18:8b:dd:
                    95:66:b1:a2:77:79:ee:f2:87:b5:2f:57:4b:2c:64:
                    ca:ba:9d:ad:ae:0e:71:c7:9f:9c:43:1a:70:b9:ee:
                    0f:c1:ba:1d:5f:6a:82:aa:f7:cc:e1:19:60:ba:ff:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DC:81:13:50:CB:44:0B:ED:40:0E:FE:78:82:B7:4B:E8:81:E0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/10be62e9-28d1-3850-82c7-7ec81651d656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl

            X509v3 Authority Key Identifier:
                keyid:58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:89:d7:b1:65:51:ce:d5:18:5f:3a:20:c2:73:55:83:9e:59:
         f7:70:e4:d6:cf:27:41:3b:3d:81:e3:08:bd:d7:8c:79:ff:28:
         91:1b:82:25:b8:18:65:ba:86:8c:3a:a5:b6:3f:31:da:1a:a4:
         aa:b1:8c:e9:e4:f6:a0:cd:1c:03:78:c1:b5:60:90:b1:9c:e0:
         8f:31:4a:db:b7:91:b1:40:2d:c4:d3:8a:d2:bf:83:8e:6d:d5:
         f6:52:06:37:42:f8:65:35:59:b3:e9:bc:bf:23:03:b8:05:70:
         67:e0:50:a0:6f:53:7b:39:c3:b8:8a:27:d7:32:50:13:6b:97:
         1d:38:f7:f4:80:80:9a:50:a4:3b:bb:eb:d6:8d:99:e9:1c:c9:
         15:6a:11:e6:ed:2e:97:40:c7:51:3c:50:0c:1f:cf:37:ed:0c:
         16:11:b5:d0:5c:1f:eb:ff:30:10:00:01:bc:50:90:d4:de:0e:
         2b:16:68:61:31:01:e8:1f:f7:fb:d2:8d:01:a8:4e:ef:42:6f:
         8f:94:77:3d:a4:2e:d2:1f:d0:72:9f:bf:74:a9:eb:81:26:70:
         90:b3:94:83:3b:bf:6d:82:34:12:43:0c:0f:94:9a:63:e8:24:
         8e:3a:38:30:e7:4c:24:f8:0f:67:9b:d3:c1:ef:ca:9f:20:10:
         6d:d9:21:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FQXHL58HfwR7aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGExODQ2ZWQtZWY4NC00ZWFiLWJmYmItMWU5NGI2MzAy
Y2EwMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
YmMzNGU5ODgtOGEzNy00ZTYzLTg2OWYtZjk0YzMwNmUxYjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaR8kYrBABHTbs3HamPK5Ihy+4BpYKa5/uxC
M3u/E1JhgAD9h6fVA9sPTqaR1oCpvNJx/nIKMq/0xCZVSUnjVfXeQot29S63FJpY
cExBpk/OuqgBRAD0x1ytpXhWHu/fqYX3TAyAVuJApFYuR/sVTKrJCRalPSwk0IL0
4owV9/jH9eEudWtZyZ7AcJLhLyHVy11btat/BhS095q5oyYLBVEIL3w3FJ0lcYm5
KYkSqQwQvdYJh3tTIYoPLucM4EXeHNe962LfH4auKUBO+6IYi92VZrGid3nu8oe1
L1dLLGTKup2trg5xx5+cQxpwue4PwbodX2qCqvfM4Rlguv+H4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/cgRNQy0QL7UAO/niCt0vogeB/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTE4
NDZlZC1lZjg0LTRlYWItYmZiYi0xZTk0YjYzMDJjYTAvMTBiZTYyZTktMjhkMS0z
ODUwLTgyYzctN2VjODE2NTFkNjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGExODQ2ZWQtZWY4NC00ZWFiLWJm
YmItMWU5NGI2MzAyY2EwLzBhMTg0NmVkLWVmODQtNGVhYi1iZmJiLTFlOTRiNjMw
MmNhMC5jcmwwHwYDVR0jBBgwFoAUWLdnJaxOOUf4VE9sLyDBBmhmIYYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTE4NDZlZC1lZjg0LTRlYWItYmZiYi0xZTk0
YjYzMDJjYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2J17FlUc7VGF86IMJzVYOeWfdw5NbPJ0E7PYHjCL3XjHn/KJEbgiW4
GGW6how6pbY/MdoapKqxjOnk9qDNHAN4wbVgkLGc4I8xStu3kbFALcTTitK/g45t
1fZSBjdC+GU1WbPpvL8jA7gFcGfgUKBvU3s5w7iKJ9cyUBNrlx049/SAgJpQpDu7
69aNmekcyRVqEebtLpdAx1E8UAwfzzftDBYRtdBcH+v/MBAAAbxQkNTeDisWaGEx
Aegf9/vSjQGoTu9Cb4+Udz2kLtIf0HKfv3Sp64EmcJCzlIM7v22CNBJDDA+UmmPo
JI46ODDnTCT4D2eb08Hvyp8gEG3ZIeI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:33 2025 by rpki-client