Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/71876352-70ff-3dff-b393-76710fc0d98b.roa
File:                     71876352-70ff-3dff-b393-76710fc0d98b.roa (raw, json)
Hash identifier:          +RmEXYGL1cYS9gtk0Pdtyn4sYEu33btgxvt178sVOzs=
Subject key identifier:   DF:29:6A:29:08:E7:7D:FC:69:3C:69:53:12:2F:96:02:CE:39:4C:F5
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858498E647C2B8DE9186AA4EB9F60
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/71876352-70ff-3dff-b393-76710fc0d98b.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        130.41.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7c:2b:8d:e9:18:6a:a4:eb:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=661261ec-26e4-4693-8471-357c50068a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:8b:dc:75:a9:f8:ec:4b:fe:1b:72:61:5e:
                    ef:db:e7:8a:ed:48:0f:8f:d2:9e:ae:94:53:8c:14:
                    53:4d:b9:e5:9d:92:4e:52:27:e9:35:c1:8e:98:e4:
                    23:e9:41:89:a7:d4:d7:be:e5:e1:e8:b3:ae:5a:5e:
                    9c:6f:4a:8f:d0:81:db:3d:83:91:91:1a:16:df:f8:
                    f4:ce:55:d4:35:b2:a1:ac:e9:c9:06:f3:84:51:4f:
                    5a:bc:c4:53:0e:79:89:99:45:1d:9d:1f:5b:02:b1:
                    48:5a:30:74:3d:93:7f:34:d3:3f:b1:66:b1:dc:4e:
                    c9:5f:13:c7:c4:2c:15:be:27:f4:6e:c6:0c:41:34:
                    61:d2:f4:a7:d6:b4:e4:e2:c2:6a:5a:94:11:a2:1a:
                    b3:f6:be:d1:10:23:25:66:2c:ef:11:f6:09:ce:15:
                    74:e1:e5:e7:a1:b0:fb:a2:c2:47:f2:aa:84:b4:2d:
                    d8:cb:7c:e8:69:2d:ec:ac:d2:0e:1e:c4:9c:41:aa:
                    1a:6f:b1:9f:c4:29:12:00:ff:d9:fb:6c:20:07:af:
                    dc:7c:26:15:9c:d8:c7:77:f2:49:3b:99:9f:66:de:
                    e7:83:44:5b:12:1f:cb:6d:6d:04:aa:14:6d:79:8b:
                    29:34:a3:b6:8a:25:77:86:6f:60:69:74:f3:9d:19:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:6A:29:08:E7:7D:FC:69:3C:69:53:12:2F:96:02:CE:39:4C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/71876352-70ff-3dff-b393-76710fc0d98b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:24:e4:d6:30:75:dd:d3:aa:f9:e9:fe:1a:14:90:53:66:
         04:81:a9:69:ea:0b:d5:10:58:04:a1:11:48:51:95:e0:52:1d:
         d8:cb:f4:5b:ce:c9:be:6b:05:84:06:f9:d9:8b:28:8f:24:8c:
         ba:01:e2:d0:49:5b:24:85:50:ed:fd:fd:30:6d:64:ab:6f:56:
         64:c3:52:4b:8b:81:05:1e:61:0e:53:33:8e:a0:30:7a:6f:85:
         cb:89:84:34:50:aa:f6:77:b8:32:b1:20:08:30:25:00:39:d7:
         a2:ea:56:4e:42:85:18:6b:7a:a0:52:4e:0f:b3:60:7b:c9:ec:
         3c:68:c6:01:96:04:b3:24:2b:b1:96:d1:19:34:5c:57:72:f9:
         60:f7:6d:8f:fe:04:56:9f:db:8b:31:74:16:84:a9:ea:9c:7e:
         06:85:6d:b5:bc:ef:e5:17:5d:c2:d7:03:18:80:2b:19:fc:31:
         ee:3d:f1:07:87:a6:d4:de:b0:36:6e:02:86:2c:dd:11:a6:41:
         bf:b5:75:cf:d4:d5:cd:da:09:64:d4:13:1b:71:31:d1:15:a8:
         5c:31:40:d9:70:b5:7f:03:d5:f3:e1:93:52:20:7a:a5:2a:5c:
         5f:88:6e:d2:03:bf:f3:a8:f2:00:4d:ad:70:45:d1:d6:d1:95:
         ae:1d:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:39 2025 by rpki-client