Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/c203d0b1-1587-3a29-a162-4f621e78c479.roa
File:                     c203d0b1-1587-3a29-a162-4f621e78c479.roa (raw, json)
Hash identifier:          K00nAKziX0aNWEXyv60s7K71u22I8n24duXkBvso0r0=
Subject key identifier:   28:4A:B4:5A:31:C0:93:63:8F:BC:FA:27:EE:68:72:FC:81:63:7C:71
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584A10353F18A202C0B2A5E23D1C
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/c203d0b1-1587-3a29-a162-4f621e78c479.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     21976
IP address blocks:        130.156.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3f:18:a2:02:c0:b2:a5:e2:3d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=d5c2b1be-01eb-479e-befb-bac9e775cbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:24:d9:b5:e8:3d:92:7f:8d:b7:c0:bd:2d:
                    9f:c2:ba:26:19:db:fd:62:b7:d8:b4:78:d0:50:22:
                    6a:13:3f:bb:c9:b8:14:0e:ca:99:91:d2:08:46:0e:
                    b1:9d:53:dd:62:19:90:39:50:3c:d0:a6:e1:82:6a:
                    4a:c9:17:1b:5c:ac:2d:94:25:ee:db:6e:93:09:50:
                    77:05:0a:77:39:81:61:ad:ae:26:ce:33:15:20:2e:
                    1b:2c:7a:04:8b:89:36:4c:7f:cd:c1:30:f1:20:81:
                    11:a7:10:b7:dd:49:2b:27:33:9a:48:c2:bb:a5:60:
                    f9:36:85:f3:43:52:60:50:b3:49:91:50:8e:e9:7f:
                    12:eb:43:6e:12:73:93:ab:19:77:2f:68:12:1a:dc:
                    d2:aa:06:4d:c6:91:f6:7d:6e:27:b1:80:88:aa:9d:
                    45:ff:ab:5e:5d:1c:b7:ec:41:8d:6c:e9:25:bb:35:
                    65:a2:fc:32:80:fc:5b:a5:42:5d:e1:23:c7:c2:4c:
                    35:2f:d1:15:d4:cd:36:65:1c:9d:13:b7:86:34:de:
                    2a:16:78:c7:82:7f:3f:38:bd:c1:b8:19:68:8e:0c:
                    fb:d8:15:40:c1:28:31:50:b1:d5:01:c4:0d:51:54:
                    bb:27:fa:5d:9a:39:e2:7d:13:4d:84:1d:43:46:be:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4A:B4:5A:31:C0:93:63:8F:BC:FA:27:EE:68:72:FC:81:63:7C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/c203d0b1-1587-3a29-a162-4f621e78c479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:b1:6d:09:11:fb:75:39:85:35:45:2d:16:92:00:0c:30:
         37:8e:0a:23:ee:43:af:24:62:2f:c8:c3:86:bc:a6:29:0a:51:
         99:c6:ce:00:89:ce:a6:f9:3e:8e:a1:81:a5:90:43:ad:8b:d4:
         83:05:a2:cb:2c:6b:c7:76:8c:3e:56:cb:a7:5a:3c:65:94:ec:
         c8:0a:67:c3:8e:24:65:26:8e:86:f3:26:3b:1c:6c:dc:e9:8a:
         ac:a3:e3:a6:b5:51:eb:44:8e:60:81:70:cb:e8:79:87:85:26:
         c0:7c:f2:c4:bd:b1:a2:6b:88:36:e3:95:cc:bc:8a:0d:f6:43:
         7a:e9:d1:ea:81:f4:ab:4b:b0:79:da:c5:9f:6e:ca:7e:27:f6:
         ab:6f:56:27:a2:97:72:0f:fe:bf:ea:89:88:98:55:6e:af:31:
         b5:6a:55:72:9f:71:1a:f3:9a:a5:80:1a:8b:43:50:1a:aa:75:
         d6:45:bf:12:a8:ad:94:d3:cc:6d:24:dc:40:e7:67:3c:f9:8b:
         13:4a:0c:e6:f2:92:dd:10:76:c9:46:84:e9:a4:41:15:25:58:
         0a:f5:9e:c6:cb:cf:39:3a:76:ab:17:2e:cb:39:36:2e:5e:ec:
         6b:ab:9f:ea:70:bb:c8:cb:d2:05:02:65:ab:97:dd:05:c5:f1:
         3e:1b:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:53:02 2025 by rpki-client