Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
File:                     f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa (raw, json)
Hash identifier:          T178uoABnrUZLSo38VAYnoBSnpShO9CqwOMzb6WZml0=
Subject key identifier:   9A:30:C8:82:F7:04:FC:4C:4B:67:08:32:56:44:7D:15:59:99:C0:66
Certificate issuer:       /CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
Certificate serial:       010D0C9F4328584A10354DC2BA9FE16C1DD99E00
Authority key identifier: A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     557
IP address blocks:        130.111.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4d:c2:ba:9f:e1:6c:1d:d9:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=7fb82843-48d7-40c9-a5f8-ac3854acaaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:b9:46:9d:83:73:8e:5b:06:a5:47:ef:d3:
                    06:4c:0a:e0:d1:fb:b9:79:dd:71:d0:7d:e9:98:52:
                    f1:ac:8e:d9:fd:74:40:85:07:4c:e7:4b:5a:66:65:
                    b1:af:ca:41:47:a6:f3:24:d8:d2:41:d6:79:52:0f:
                    9c:99:56:01:30:67:33:9e:8a:94:c7:dc:e9:ca:cd:
                    69:89:17:fb:fa:fd:54:62:f1:bd:af:47:25:16:7f:
                    c7:c4:15:6a:2b:03:f1:45:9c:34:17:58:55:e3:1f:
                    3c:53:74:c4:c0:aa:f9:58:36:62:86:91:73:bf:37:
                    c1:2e:2e:a7:14:da:52:3d:60:98:98:78:85:42:37:
                    da:ca:1e:f0:5b:66:c7:c3:4a:5f:30:42:a8:08:d6:
                    21:b3:25:d5:6f:16:e9:f1:fc:ae:a0:7a:c2:e2:95:
                    07:97:5d:e5:f4:3e:3d:27:df:02:46:40:40:e8:52:
                    ce:5e:f2:26:f7:26:c0:ed:8e:0a:db:e4:e5:07:dc:
                    47:b3:f8:73:d3:81:6b:8c:ab:21:79:23:bb:a1:f4:
                    06:ed:1b:15:c1:88:f2:cb:3e:62:2d:70:e1:1e:0d:
                    fe:0a:33:2c:ae:2d:ca:9b:48:4f:13:f3:e0:11:69:
                    6b:bd:70:c7:07:f6:45:31:27:75:06:4e:b6:b6:3e:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:30:C8:82:F7:04:FC:4C:4B:67:08:32:56:44:7D:15:59:99:C0:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.crl

            X509v3 Authority Key Identifier:
                keyid:A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:96:79:7f:c4:b7:d7:c7:6b:66:8a:8d:1c:f1:6f:8e:65:2d:
         eb:5c:b4:bc:88:9d:25:68:5d:1d:1b:29:6a:0b:20:b6:59:5d:
         f6:85:89:cb:97:9a:67:4e:29:55:0c:0e:83:35:ec:26:3c:36:
         9e:dd:43:77:8d:9e:36:41:a9:87:63:9e:84:c2:6c:25:e6:ca:
         af:1b:bb:68:4b:96:0e:bc:4c:ed:87:04:d1:81:d8:88:e0:df:
         2f:18:fc:92:7b:46:7a:ba:3f:41:a9:8f:8f:15:d2:17:90:7a:
         60:47:55:15:94:97:37:9d:75:fe:06:9b:da:f7:89:b5:3c:3f:
         8d:ce:d1:5d:f3:68:23:35:a6:b3:81:02:59:63:53:95:59:e0:
         a3:84:28:2c:42:68:b5:83:84:ba:a4:01:5b:f3:05:18:02:bb:
         c0:d3:c2:02:a4:5b:d8:84:a7:cb:0d:59:0a:90:24:35:d4:db:
         54:87:4b:02:ba:71:2c:6a:ee:23:66:20:f3:42:b5:78:c2:f8:
         ec:4c:7a:87:58:bb:e2:7e:79:2d:81:5b:96:3e:87:5e:71:a1:
         20:37:b0:16:4c:79:39:87:c2:bf:04:eb:ee:ea:e3:94:3a:14:
         bf:0f:e3:90:c8:ef:51:3a:c1:8f:ef:58:7f:ec:72:76:90:f4:
         9b:a9:f7:00
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoQNU3Cup/hbB3ZngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzYjlkMTEtMTRiYi00ZjI0LThlYTQtMWQyY2FjMjRh
MmRkMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
N2ZiODI4NDMtNDhkNy00MGM5LWE1ZjgtYWMzODU0YWNhYWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu+5Rp2Dc45bBqVH79MGTArg0fu5ed1x0H3p
mFLxrI7Z/XRAhQdM50taZmWxr8pBR6bzJNjSQdZ5Ug+cmVYBMGcznoqUx9zpys1p
iRf7+v1UYvG9r0clFn/HxBVqKwPxRZw0F1hV4x88U3TEwKr5WDZihpFzvzfBLi6n
FNpSPWCYmHiFQjfayh7wW2bHw0pfMEKoCNYhsyXVbxbp8fyuoHrC4pUHl13l9D49
J98CRkBA6FLOXvIm9ybA7Y4K2+TlB9xHs/hz04FrjKsheSO7ofQG7RsVwYjyyz5i
LXDhHg3+CjMsri3Km0hPE/PgEWlrvXDHB/ZFMSd1Bk62tj6lOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJowyIL3BPxMS2cIMlZEfRVZmcBmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNTNi
OWQxMS0xNGJiLTRmMjQtOGVhNC0xZDJjYWMyNGEyZGQvZjc5OTEwN2MtYmU2Yy0z
ZGNkLTllNjQtYTZjYmI2ODRmYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDUzYjlkMTEtMTRiYi00ZjI0LThl
YTQtMWQyY2FjMjRhMmRkLzA1M2I5ZDExLTE0YmItNGYyNC04ZWE0LTFkMmNhYzI0
YTJkZC5jcmwwHwYDVR0jBBgwFoAUojgEez34FryqsK4zXZgEXBvfFHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNTNiOWQxMS0xNGJiLTRmMjQtOGVhNC0xZDJj
YWMyNGEyZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgm8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXZZ5f8S318drZoqNHPFvjmUt61y0vIidJWhdHRspagsgtlld9oWJy5ea
Z04pVQwOgzXsJjw2nt1Dd42eNkGph2OehMJsJebKrxu7aEuWDrxM7YcE0YHYiODf
Lxj8kntGero/QamPjxXSF5B6YEdVFZSXN511/gab2veJtTw/jc7RXfNoIzWms4EC
WWNTlVngo4QoLEJotYOEuqQBW/MFGAK7wNPCAqRb2ISnyw1ZCpAkNdTbVIdLArpx
LGruI2Yg80K1eML47Ex6h1i74n55LYFblj6HXnGhIDewFkx5OYfCvwTr7urjlDoU
vw/jkMjvUTrBj+9Yf+xydpD0m6n3AA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:19 2025 by rpki-client