Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bfbb85c-98f6-3d75-8da5-112d8128855a.roa
File:                     2bfbb85c-98f6-3d75-8da5-112d8128855a.roa (raw, json)
Hash identifier:          cwc+d+/93cC5ZdutmnulCbgM1TTtXn6c/VRRulaj13M=
Subject key identifier:   27:58:FC:29:37:CE:A1:B0:37:99:D2:6E:EA:27:EF:5E:37:3C:E0:36
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A38384CB545C54E13CB82FA80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bfbb85c-98f6-3d75-8da5-112d8128855a.roa
Signing time:             Tue 17 Jun 2025 08:59:28 +0000
ROA not before:           Tue 17 Jun 2025 08:59:28 +0000
ROA not after:            Mon 15 Sep 2025 08:59:28 +0000
asID:                     7029
IP address blocks:        130.254.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:38:4c:b5:45:c5:4e:13:cb:82:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 08:59:28 2025 GMT
            Not After : Sep 15 08:59:28 2025 GMT
        Subject: CN=8e7dfbf3-611c-4bb3-b9a3-f2155c483271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:35:4d:ab:e5:71:12:c7:5d:a0:2c:0a:b4:
                    5c:04:09:5f:e3:df:a1:41:26:04:34:1e:47:eb:06:
                    ef:6b:62:15:12:13:8c:79:2c:68:27:db:ce:a9:b7:
                    00:96:5f:13:99:c2:df:7a:19:3a:35:a6:48:1f:15:
                    57:eb:ae:db:2a:97:aa:19:14:15:ae:e8:29:5b:c6:
                    1c:4e:61:5a:d0:89:9c:59:02:fa:3f:e8:4b:60:77:
                    09:fd:40:3d:a4:a6:d2:c3:a4:52:dd:b0:da:73:76:
                    27:c3:fc:1d:60:2b:36:4d:1c:9e:fe:ca:f2:fc:54:
                    03:6b:90:d0:67:94:71:9c:5c:d4:30:d2:f5:9a:68:
                    fd:1a:73:78:f1:63:b1:5f:f5:3c:5c:cf:5f:4e:e3:
                    ba:e6:57:5b:2d:ed:60:59:b6:70:ad:25:f2:cb:ee:
                    51:4e:73:73:4e:6b:d7:56:26:40:1f:5d:77:8a:02:
                    a0:0f:4a:1e:7b:60:d1:4a:0a:99:03:c8:32:e9:56:
                    80:31:2f:9c:e0:c2:5a:51:61:a8:9d:dc:c4:de:88:
                    ee:4c:d4:de:26:81:41:31:bd:9c:43:cc:01:d0:bd:
                    8a:e5:6f:b5:ff:5a:fe:4d:54:66:d3:2d:ef:7c:1f:
                    e8:a7:5c:10:fd:a7:b3:58:df:5f:6d:8c:9b:0f:d7:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:FC:29:37:CE:A1:B0:37:99:D2:6E:EA:27:EF:5E:37:3C:E0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bfbb85c-98f6-3d75-8da5-112d8128855a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:85:4b:1a:69:43:d1:9b:6b:76:97:67:f9:cf:64:5f:8f:
         7c:b1:d3:59:e9:50:38:21:47:95:8d:ae:e6:09:c9:31:fc:a2:
         f7:0f:8b:12:bf:e6:dc:3c:1e:ab:a0:df:a8:05:3e:4d:56:32:
         b0:5a:a5:44:0d:f1:b2:13:c1:21:bc:db:bb:ac:f6:94:a9:5e:
         79:66:3e:38:b6:bb:a1:d9:b3:4b:56:0f:68:95:0f:d4:8e:49:
         e0:8a:f9:fa:ff:3a:d1:a9:93:4e:11:1a:6a:31:6e:01:0d:f1:
         37:12:7f:ad:53:5c:24:e8:ed:ee:66:36:79:2f:6c:8a:f8:04:
         05:74:ac:9c:71:1c:76:55:2a:04:c5:61:ce:83:7c:80:84:4c:
         94:52:fa:e4:88:61:47:ad:cd:9d:69:91:c4:73:8e:a0:4a:1c:
         8c:12:30:99:71:90:72:81:eb:54:a5:91:6d:7e:89:56:5e:7b:
         85:85:26:40:b3:3a:4b:7d:14:e9:d6:0c:16:65:9c:71:3b:2c:
         c9:c6:a5:da:85:40:48:45:61:9e:aa:00:92:07:aa:8d:46:fd:
         c2:e1:3e:18:46:b2:a3:76:73:42:54:a0:49:3d:b6:81:62:43:
         85:a3:93:8b:f1:a7:d2:32:1c:b7:80:d4:2c:63:44:35:b7:79:
         07:18:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:12:33 2025 by rpki-client