Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa
File:                     64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa (raw, json)
Hash identifier:          DowNjHq/vGufvjuR2ol9vZxzkv4vYQ2GraSLwDIbj5I=
Subject key identifier:   E8:54:E0:39:52:38:2F:A4:06:6F:43:95:3B:3A:20:90:6D:AF:7C:58
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F432858492CAE8D721CF31AD1FAE0BBD0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     26282
IP address blocks:        130.119.1.0/24 maxlen: 24
                          130.119.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8d:72:1c:f3:1a:d1:fa:e0:bb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=654013f6-48d5-4a28-94cf-20601ebba53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:b3:ed:f9:34:95:d3:78:45:c7:0b:7b:59:
                    75:d5:5d:09:b1:45:09:6a:b3:55:5d:4b:7f:77:1c:
                    14:c8:5c:ec:03:57:6f:73:a3:d6:af:1a:3f:53:bb:
                    0f:e1:d2:9b:7a:5f:59:c7:4c:b8:e5:df:10:f3:fa:
                    de:77:14:6f:1f:f1:7f:27:c4:e1:83:02:d7:20:8b:
                    00:d3:34:4e:f9:f5:ba:63:c0:19:cf:fb:67:fb:e4:
                    c9:3f:3c:49:9f:8a:d0:33:93:05:eb:75:2a:ab:d8:
                    34:ce:f7:b6:94:47:e0:99:8b:d4:2e:3c:3c:a3:e4:
                    ca:5a:5d:3f:86:e5:81:02:1c:5c:ec:67:3b:3a:cf:
                    df:fd:d3:21:5c:d7:38:50:54:3b:71:d6:0a:f3:dc:
                    2e:64:58:b2:2c:9d:9c:ec:9e:71:de:0b:6e:b1:e9:
                    cf:25:66:28:74:a7:35:ce:d5:c0:8b:17:11:31:c5:
                    39:54:ca:0b:ba:44:dd:9c:a2:05:a2:d3:5d:7c:6d:
                    74:7a:cb:94:2b:cc:64:6c:f4:fd:f2:d5:27:a4:9d:
                    10:33:a7:1b:e2:44:e0:6b:51:ae:d0:70:68:64:d6:
                    73:7b:32:a6:41:54:aa:8e:07:91:ff:1e:1e:6b:33:
                    98:20:19:bb:21:70:73:49:5b:a1:15:6e:99:95:09:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:54:E0:39:52:38:2F:A4:06:6F:43:95:3B:3A:20:90:6D:AF:7C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/64e02dcf-7a28-30ed-a910-b55ee71cce0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.119.1.0-130.119.2.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:10:e7:17:d9:38:23:3d:81:96:3c:b4:b9:fd:6f:56:0c:8f:
         35:1e:14:96:f3:99:91:f5:7c:97:e0:63:16:44:cd:40:1e:0f:
         e2:9d:c4:f9:35:3c:26:de:d9:23:9a:4c:05:77:04:9d:52:63:
         93:85:3e:7a:33:bd:23:d3:4c:87:18:99:94:b6:06:81:f5:74:
         6f:3d:00:ef:2e:02:36:bf:9c:a4:36:8b:ee:0b:f4:7e:fa:15:
         eb:57:d3:e2:9f:ff:62:a1:9f:22:5e:69:cc:89:b9:71:94:40:
         21:7a:1d:d0:16:83:17:b0:e1:8e:4a:df:e6:03:ed:4c:19:2d:
         92:80:c9:ec:bb:de:30:ac:1d:1f:82:35:e3:c3:b3:bf:97:0f:
         47:b1:b6:98:27:5a:02:8c:4d:6a:1f:de:8c:98:29:84:68:c4:
         af:ab:e8:e5:0a:a9:3c:92:f4:42:bf:07:d4:78:aa:d9:01:41:
         8c:20:fd:b1:f5:18:d7:ae:6d:db:2f:30:cb:c3:5e:5b:17:c4:
         26:9c:a6:fd:aa:73:43:9c:cc:5b:ba:7a:5d:82:79:8e:0d:d5:
         5e:53:2b:55:9f:a6:90:48:a8:36:b9:f9:03:6c:6a:d6:8f:4d:
         26:9c:62:d6:2e:80:f7:02:e8:63:bd:ed:ea:c3:91:79:09:69:
         91:bf:5a:25
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEksro1yHPMa0frgu9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjU0MDEzZjYtNDhkNS00YTI4LTk0Y2YtMjA2MDFlYmJhNTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyauz7fk0ldN4RccLe1l11V0JsUUJarNVXUt/
dxwUyFzsA1dvc6PWrxo/U7sP4dKbel9Zx0y45d8Q8/redxRvH/F/J8ThgwLXIIsA
0zRO+fW6Y8AZz/tn++TJPzxJn4rQM5MF63Uqq9g0zve2lEfgmYvULjw8o+TKWl0/
huWBAhxc7Gc7Os/f/dMhXNc4UFQ7cdYK89wuZFiyLJ2c7J5x3gtusenPJWYodKc1
ztXAixcRMcU5VMoLukTdnKIFotNdfG10esuUK8xkbPT98tUnpJ0QM6cb4kTga1Gu
0HBoZNZzezKmQVSqjgeR/x4eazOYIBm7IXBzSVuhFW6ZlQm79QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFOhU4DlSOC+kBm9DlTs6IJBtr3xYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNjRlMDJkY2YtN2EyOC0z
MGVkLWE5MTAtYjU1ZWU3MWNjZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACCdwED
BACCdwIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAGRDnF9k4Iz2Bljy0uf1vVgyPNR4UlvOZkfV8l+BjFkTN
QB4P4p3E+TU8Jt7ZI5pMBXcEnVJjk4U+ejO9I9NMhxiZlLYGgfV0bz0A7y4CNr+c
pDaL7gv0fvoV61fT4p//YqGfIl5pzIm5cZRAIXod0BaDF7Dhjkrf5gPtTBktkoDJ
7LveMKwdH4I148Ozv5cPR7G2mCdaAoxNah/ejJgphGjEr6vo5QqpPJL0Qr8H1Hiq
2QFBjCD9sfUY165t2y8wy8NeWxfEJpym/apzQ5zMW7p6XYJ5jg3VXlMrVZ+mkEio
Nrn5A2xq1o9NJpxi1i6A9wLoY73t6sOReQlpkb9aJQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:33:51 2025 by rpki-client