Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/897917cb-101d-36b0-b8df-ab1a69185df6.roa
File:                     897917cb-101d-36b0-b8df-ab1a69185df6.roa (raw, json)
Hash identifier:          VvVOy57Gm0HZS1GcoSb1dMk7TTfvInxhhhb8a5FU/jE=
Subject key identifier:   53:A0:09:5F:61:FE:3A:BF:12:33:93:98:DB:7B:E0:EC:3A:4A:E8:08
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A3836D413B98452C15D129900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/897917cb-101d-36b0-b8df-ab1a69185df6.roa
Signing time:             Tue 17 Jun 2025 08:56:30 +0000
ROA not before:           Tue 17 Jun 2025 08:56:30 +0000
ROA not after:            Mon 15 Sep 2025 08:56:30 +0000
asID:                     22516
IP address blocks:        130.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:36:d4:13:b9:84:52:c1:5d:12:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 17 08:56:30 2025 GMT
            Not After : Sep 15 08:56:30 2025 GMT
        Subject: CN=e7c5262b-9650-4eb5-a54a-d3427bd49bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:e7:3c:b7:95:6a:98:e8:d9:07:67:8d:04:
                    81:c8:ee:26:46:5a:5f:37:c4:f2:7c:52:a9:48:73:
                    38:09:83:74:dc:c2:ee:50:0e:43:5d:ca:b3:cb:5b:
                    71:7a:9a:6d:cd:22:2e:1b:8e:24:12:8d:a1:c5:30:
                    3b:44:ea:9a:a7:4f:5f:8b:bf:a3:fd:cc:9f:8b:87:
                    5d:f7:98:d9:f3:cf:26:9d:d0:6e:21:8e:17:7c:dd:
                    99:9d:a3:be:b0:1a:83:c4:df:25:fa:79:68:7f:86:
                    64:72:8d:00:55:8a:e3:cd:be:31:28:22:ff:fd:8f:
                    a4:74:b4:81:9b:42:0b:6f:d5:f9:32:7b:6f:fc:23:
                    be:fc:43:01:23:69:b6:fe:8b:07:a0:a5:a4:46:08:
                    81:89:7e:9a:6d:f1:6a:b7:39:aa:08:72:a8:77:b5:
                    0f:e5:5d:2b:d6:ac:cf:eb:f7:e3:52:df:4f:1e:27:
                    19:2c:29:7e:bd:98:c1:0f:1a:bd:66:6c:45:0e:8a:
                    7e:f9:53:da:20:24:50:d7:61:ed:95:6f:23:f9:9e:
                    e2:58:0a:87:06:2e:dd:8d:84:9d:6b:37:1b:08:c4:
                    a4:42:e0:63:eb:08:4d:3b:6c:e2:d0:ab:1e:a0:5a:
                    d0:c4:cc:9e:1f:db:8a:d9:b2:5a:4d:4e:21:b9:6d:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A0:09:5F:61:FE:3A:BF:12:33:93:98:DB:7B:E0:EC:3A:4A:E8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/897917cb-101d-36b0-b8df-ab1a69185df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:36:e4:21:87:35:72:90:ed:90:a3:d0:04:ae:a0:8f:0d:c7:
         d7:50:ab:9e:b5:56:f3:bb:5d:1c:74:f5:f9:4c:65:65:82:70:
         87:34:6e:c9:99:7c:cd:38:19:25:45:0d:b7:e6:77:b6:54:15:
         99:77:b7:2d:15:71:38:1b:74:4e:6c:83:c1:bc:f4:16:7e:49:
         df:08:f5:dc:23:da:fa:51:8f:e6:cb:b8:aa:26:8b:6f:da:64:
         a7:6c:80:73:6b:67:9b:df:4e:ba:a1:74:e2:b9:bb:26:e8:a6:
         38:c9:49:1f:c7:c7:3a:44:97:46:f9:99:78:c7:6d:3f:1f:6a:
         0d:a6:3d:2d:22:5c:fb:4c:6b:5b:fb:77:f5:04:8c:4b:a4:a8:
         75:56:b3:c9:55:d7:61:af:a7:27:f2:15:c9:e6:2d:13:1b:b6:
         44:46:2e:23:cf:56:df:8c:35:fb:c8:85:c8:c5:56:24:56:df:
         d8:c3:32:65:84:7d:2b:a5:ae:7b:90:7f:02:00:c8:4f:52:e5:
         69:dc:80:ba:67:cf:e2:6e:e3:92:29:09:de:a1:72:89:da:73:
         07:83:ab:e6:0f:09:5b:c8:0f:3f:fd:9d:73:a5:70:c6:d3:d6:
         ff:13:8b:42:92:6b:89:95:0b:ed:bd:06:ea:00:a2:93:b6:5e:
         2b:47:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:46:38 2025 by rpki-client