Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/4b5192ba-2c46-3797-ade3-04c90cf6f4ba.roa
File:                     4b5192ba-2c46-3797-ade3-04c90cf6f4ba.roa (raw, json)
Hash identifier:          sG9wnRhuau+OpGG2Nd8jYb07/Czl0Urb8jJZhSWFatw=
Subject key identifier:   36:62:AD:33:40:07:18:A9:36:D9:92:B8:48:6C:F5:98:85:DD:12:D4
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F4328584900216705DA40AD2369F95600
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/4b5192ba-2c46-3797-ade3-04c90cf6f4ba.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     5719
IP address blocks:        130.245.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:67:05:da:40:ad:23:69:f9:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=f1e88406-d5f1-4bcd-a4b0-0af982058237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:f3:6c:41:43:9b:e9:9d:48:fb:71:f6:36:
                    1f:d7:3f:48:5c:8f:d4:ac:d2:03:cd:8a:b4:ef:f7:
                    e6:c7:31:d6:e8:19:30:db:d2:32:15:1b:f2:c5:91:
                    69:5c:ee:b7:59:6c:a2:d2:fa:d3:0e:b5:b9:e5:05:
                    fe:0a:88:f6:c6:0c:97:11:f6:37:f7:77:28:e6:24:
                    87:c1:30:41:b7:11:a5:9f:de:32:6e:e3:47:41:fe:
                    29:e5:59:50:34:33:29:76:4d:c0:90:76:97:ca:79:
                    f3:3d:02:f1:29:a7:49:da:b2:a6:cc:69:c0:01:2b:
                    16:9c:40:37:b6:14:2a:00:d7:5e:8b:4e:97:93:6a:
                    79:8c:a2:d6:66:ee:fb:ef:7c:c5:4e:07:09:46:4e:
                    6a:27:f7:05:c4:05:54:8b:b2:6d:b0:18:bc:ea:40:
                    2e:3a:9c:75:f0:69:5f:e1:65:6e:4d:c5:5b:44:a4:
                    33:e1:14:d7:48:5a:0c:3e:81:96:d8:a9:1a:4a:a2:
                    a7:44:6c:32:a9:d5:47:6f:85:e7:31:fd:cf:0a:6f:
                    6d:be:36:64:33:c7:45:75:45:7e:2f:2a:b1:80:5e:
                    5d:ce:97:d9:ea:b4:fd:6e:15:b7:36:a8:f5:b5:b5:
                    13:8c:74:5b:b7:00:50:24:f7:21:25:e4:32:3d:32:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:62:AD:33:40:07:18:A9:36:D9:92:B8:48:6C:F5:98:85:DD:12:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/4b5192ba-2c46-3797-ade3-04c90cf6f4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:ae:45:7c:fc:08:99:34:1c:71:07:8e:db:20:bf:b4:ae:
         ec:d5:7b:c7:0c:0f:71:2d:d8:f6:91:78:44:d7:ce:8e:21:01:
         48:dc:d8:17:6c:0f:6a:8b:ec:2d:68:b7:a1:06:00:d9:a5:42:
         a6:5a:9f:bc:52:29:0b:95:e5:ff:c4:62:bc:50:93:96:05:c6:
         bb:80:c7:80:cf:2e:30:7f:2d:f8:bc:fc:48:a2:a7:fd:f4:37:
         b8:05:34:5d:8e:d1:bb:43:73:58:d0:6a:7a:95:31:78:e5:51:
         66:e3:e0:07:14:c0:7c:e9:1b:96:0b:fa:85:e0:06:5b:03:d8:
         2c:45:ed:b5:7e:3a:65:b6:a1:d7:0b:d5:1c:04:81:37:4f:6a:
         9c:be:b3:1a:6c:a9:51:16:69:f8:af:5e:5a:5c:b3:f8:89:87:
         83:15:9e:7e:ac:3c:29:51:78:cf:82:cd:35:23:9e:d0:7b:f9:
         1d:03:5b:9a:8f:94:4a:ce:47:ea:e9:a6:30:10:00:86:b9:9c:
         98:61:7e:3a:67:8e:2b:bf:30:5e:3f:09:9e:6c:fe:9d:11:2c:
         cf:82:23:92:af:41:fa:2e:4b:5b:d2:5f:a2:6c:57:7d:7b:32:
         8f:e2:40:45:e9:74:4c:66:a7:7b:a3:a8:ad:a7:8c:fe:dc:1e:
         af:61:44:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkAIWcF2kCtI2n5VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc5NjBhNDEtMzU5Ny00YjlhLThlNzktODBhZTYzNWNl
OGZmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZjFlODg0MDYtZDVmMS00YmNkLWE0YjAtMGFmOTgyMDU4MjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbfzbEFDm+mdSPtx9jYf1z9IXI/UrNIDzYq0
7/fmxzHW6Bkw29IyFRvyxZFpXO63WWyi0vrTDrW55QX+Coj2xgyXEfY393co5iSH
wTBBtxGln94ybuNHQf4p5VlQNDMpdk3AkHaXynnzPQLxKadJ2rKmzGnAASsWnEA3
thQqANdei06Xk2p5jKLWZu7773zFTgcJRk5qJ/cFxAVUi7JtsBi86kAuOpx18Glf
4WVuTcVbRKQz4RTXSFoMPoGW2KkaSqKnRGwyqdVHb4XnMf3PCm9tvjZkM8dFdUV+
LyqxgF5dzpfZ6rT9bhW3Nqj1tbUTjHRbtwBQJPchJeQyPTKMqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDZirTNABxipNtmSuEhs9ZiF3RLUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2
MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFlNjM1Y2U4ZmYvNGI1MTkyYmEtMmM0Ni0z
Nzk3LWFkZTMtMDRjOTBjZjZmNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjc5NjBhNDEtMzU5Ny00YjlhLThl
NzktODBhZTYzNWNlOGZmLzI3OTYwYTQxLTM1OTctNGI5YS04ZTc5LTgwYWU2MzVj
ZThmZi5jcmwwHwYDVR0jBBgwFoAUKAx+lTalpqo5qdUE5Y0qI6zJIXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFl
NjM1Y2U4ZmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgvUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYZquRXz8CJk0HHEHjtsgv7Su7NV7xwwPcS3Y9pF4RNfOjiEBSNzYF2wP
aovsLWi3oQYA2aVCplqfvFIpC5Xl/8RivFCTlgXGu4DHgM8uMH8t+Lz8SKKn/fQ3
uAU0XY7Ru0NzWNBqepUxeOVRZuPgBxTAfOkblgv6heAGWwPYLEXttX46Zbah1wvV
HASBN09qnL6zGmypURZp+K9eWlyz+ImHgxWefqw8KVF4z4LNNSOe0Hv5HQNbmo+U
Ss5H6ummMBAAhrmcmGF+OmeOK78wXj8Jnmz+nREsz4Ijkq9B+i5LW9JfomxXfXsy
j+JARel0TGane6OoraeM/twer2FECw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:15 2025 by rpki-client