Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa
File:                     4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa (raw, json)
Hash identifier:          uUIZD9tedxtvPaIDTtanLoONu8vZtHuZPn5+7vZHAPM=
Subject key identifier:   42:7A:B8:A9:DA:26:50:E7:75:32:CA:B4:BB:F2:52:AE:7D:29:D3:2A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A9900BD79F9DC1C17B1459700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     7018
IP address blocks:        130.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:bd:79:f9:dc:1c:17:b1:45:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=07c01cf9-658f-4149-94bc-7b5f8ae08e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:dd:e4:47:60:b9:8e:aa:e0:fc:f6:08:18:
                    1d:0f:04:b1:a4:cd:96:d8:1f:5d:a6:e9:e4:55:8d:
                    81:9e:75:ac:8b:e9:a6:8c:0d:78:03:d2:5c:77:38:
                    97:38:40:ce:63:ef:54:72:08:3e:21:ac:4a:a7:d4:
                    ad:30:80:52:4e:9c:d7:42:c2:c2:1e:a1:39:14:4e:
                    2a:7b:80:5c:1f:01:e8:9e:e5:75:f5:5e:fb:87:a3:
                    db:75:92:3a:47:dd:67:3c:92:f4:e2:6b:18:ca:32:
                    c1:c2:fa:a1:91:ae:77:bd:73:c6:d2:ba:76:ca:2d:
                    17:ea:67:50:9b:4c:75:bc:6e:9c:97:3a:7d:0a:d7:
                    89:65:2e:f8:10:70:60:61:d9:52:c5:35:f8:2f:b0:
                    2e:51:60:ab:13:75:86:e0:95:42:dd:39:de:b5:c1:
                    31:d8:09:41:57:f0:85:2f:6e:78:6c:d5:54:e4:71:
                    d3:6a:f8:67:27:fd:60:ba:91:4c:0b:0f:8f:00:df:
                    d6:8e:27:5b:78:a6:11:e7:c4:a7:94:c7:8d:73:90:
                    43:35:cc:84:c0:6c:ff:39:d1:76:f0:f8:0c:c8:c7:
                    f8:2d:63:e0:9e:12:40:aa:0f:81:81:15:46:bd:f3:
                    9f:50:6d:d5:a2:b4:29:7b:d3:92:37:a9:c6:13:b7:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7A:B8:A9:DA:26:50:E7:75:32:CA:B4:BB:F2:52:AE:7D:29:D3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:88:9c:0a:84:e6:c9:ef:89:a3:2f:87:bc:42:a9:82:c7:fd:
         61:33:c4:8d:24:b2:50:a1:c8:7e:bc:ca:37:5e:13:f2:b6:62:
         4e:bd:52:f4:64:94:4e:36:36:68:57:1a:cf:f9:b6:22:04:da:
         50:a9:cc:67:13:4e:58:d8:e3:12:67:96:b7:d1:cc:10:93:6b:
         69:dc:3a:f1:ac:e2:af:68:e9:44:38:01:be:8e:b0:94:55:bd:
         62:19:cf:26:af:be:82:da:b6:86:58:ab:e5:6d:12:c6:a9:1b:
         d6:0f:25:08:6b:c9:de:a6:57:be:0c:49:3e:45:92:0e:ef:da:
         86:e3:53:86:60:b2:3a:03:21:0a:f6:1b:60:ac:a4:74:62:89:
         84:de:7c:36:32:98:65:fe:9e:21:18:54:45:00:6f:1e:ad:82:
         d9:9c:89:fa:ec:ec:24:b3:1c:6b:95:58:33:ca:ad:83:6c:69:
         41:17:59:f1:09:6a:cb:96:6c:85:d9:41:41:58:35:32:bf:c4:
         39:80:29:ae:08:bc:69:17:5e:a4:90:43:79:bd:c5:d9:ff:5c:
         90:7c:a1:f3:14:dc:e5:b1:cc:d4:80:a7:6e:09:bd:55:33:1c:
         38:aa:7b:da:41:1e:2f:bf:59:cf:43:f8:a3:f8:98:26:04:f8:
         1c:b5:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:40 2025 by rpki-client