Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1dd10cac-effd-3701-adb9-d23de5feeb54.roa
File:                     1dd10cac-effd-3701-adb9-d23de5feeb54.roa (raw, json)
Hash identifier:          3RKFXJq0yheYr6RvUrz5RH0ocuELl+84Bd/eRVxxroQ=
Subject key identifier:   58:50:CE:50:3E:D5:75:72:96:22:80:77:96:CF:F7:51:1E:7F:6C:AC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9636912D74B5D4EEE2D90350
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1dd10cac-effd-3701-adb9-d23de5feeb54.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     397630
IP address blocks:        130.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:91:2d:74:b5:d4:ee:e2:d9:03:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=fde58486-9f61-483f-9324-5dda835f279b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:21:83:9d:88:3b:1e:09:86:45:69:d0:19:
                    7d:3c:a9:51:fd:d3:98:f6:7f:ea:cd:88:ed:38:31:
                    a5:a9:fd:ce:68:96:bf:7c:a2:41:1a:a7:7f:69:a3:
                    b1:94:c6:4a:8e:c6:6c:8f:d7:38:19:2d:a0:09:09:
                    e6:0a:65:f7:21:b1:1f:e0:6f:ac:07:28:87:b8:dc:
                    13:5d:0d:34:9b:20:84:8a:a2:ff:92:70:ef:37:7e:
                    42:a5:89:d6:c3:d8:a9:df:9b:26:a4:4f:96:85:a0:
                    dc:bd:e4:39:d5:ba:36:4b:f8:a1:c1:5e:14:1b:ad:
                    0d:e0:70:a1:e4:f7:5b:8e:c0:ef:0a:af:e9:21:2e:
                    d6:d8:66:4d:4e:3e:8a:ea:8e:70:b1:35:69:9d:33:
                    7b:21:b4:d1:33:8b:95:12:ce:52:a9:9e:6f:68:60:
                    20:fd:62:c9:78:b2:c7:66:70:e1:5e:f2:f2:69:5c:
                    b5:9e:dd:f1:90:c2:3d:6b:ed:6b:2a:1d:70:8e:d0:
                    84:d7:d3:7a:11:30:57:6b:84:bc:78:64:8b:b7:65:
                    aa:7a:c7:8d:96:42:f1:89:c8:eb:12:b2:50:77:11:
                    a9:40:19:a1:8f:1b:dc:b9:28:d4:b1:fb:73:4e:13:
                    0d:8e:99:e3:1e:8d:5f:55:c8:01:30:79:c4:0c:75:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:CE:50:3E:D5:75:72:96:22:80:77:96:CF:F7:51:1E:7F:6C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1dd10cac-effd-3701-adb9-d23de5feeb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f2:40:5d:1d:b5:a3:03:dc:a4:7b:dc:b9:f2:64:dc:b2:9a:
         5c:bb:2b:8e:5d:f1:2d:3d:d7:dc:ca:f4:b3:2c:a2:0d:67:35:
         8d:41:25:e5:3a:bc:1f:fe:f2:0e:1e:52:93:81:7a:bd:74:3b:
         a1:1a:66:63:e5:7b:a7:06:11:41:86:da:f3:9d:1f:72:ea:ec:
         53:b8:76:b6:21:c3:94:da:43:c1:61:15:59:34:ea:b3:ef:f8:
         7d:a5:ae:b7:6d:7a:a3:b7:f1:49:ee:f5:71:76:6b:3b:2c:b1:
         32:fa:ff:39:e7:d3:95:b9:e3:4a:5b:fd:0b:a4:f8:ff:78:46:
         16:ab:c4:db:1f:a7:c2:c6:5a:2c:0a:1d:d0:a4:88:56:2d:90:
         da:83:41:8e:78:0d:2e:e0:dc:5d:b6:89:d2:11:e8:f9:e1:51:
         ba:bd:4b:f1:ad:54:a9:f4:07:b9:e0:fb:f1:db:3f:eb:57:4f:
         c3:37:b4:fc:f6:27:0d:6b:e9:35:03:ed:7d:b4:5e:4b:04:52:
         f0:c6:73:d5:58:c1:a5:dd:f8:45:51:2d:21:c1:b7:7b:d2:0d:
         06:e6:14:77:27:8f:ec:14:43:14:ef:49:3f:c7:a6:ac:fb:76:
         aa:54:73:df:35:b3:81:4a:ee:3e:20:7c:a0:68:52:7c:81:95:
         f1:16:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:29 2025 by rpki-client