Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa
File:                     990b7095-64fc-3160-8b2f-b22cb9bfb782.roa (raw, json)
Hash identifier:          w5YEh2JEcVkIPa45btB2n7woWcTZjbFIzJqWKG3GJXQ=
Subject key identifier:   50:01:53:C5:40:87:4E:22:B6:0D:CD:CB:E1:30:99:83:8D:93:1B:2C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A963690AE9F5548293220B280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     397630
IP address blocks:        130.254.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:90:ae:9f:55:48:29:32:20:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=95e5e149-75e9-4308-a15b-a1c3a6aafb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:af:6b:ec:ed:a4:76:b8:f9:4a:32:50:10:
                    4c:bc:d4:cd:70:ce:41:ef:5c:8b:94:9e:a6:cb:e6:
                    bc:c3:97:14:1f:0e:b4:14:9f:5e:d0:24:7d:90:aa:
                    e9:27:19:e6:55:5c:75:3b:9c:ec:03:c1:d9:76:ff:
                    ed:38:cc:fb:fd:d1:01:10:92:95:ca:5b:ac:90:9e:
                    bc:b8:96:7c:af:da:c6:17:e5:9a:a9:14:9a:9f:ae:
                    6a:75:7a:c0:34:69:b4:3a:28:70:06:93:ab:71:81:
                    fa:46:35:84:67:e7:a5:7b:d0:38:ea:f8:bc:f8:81:
                    9a:3d:30:50:ea:21:82:c3:2f:b8:48:c6:5b:a9:a6:
                    e5:6a:b7:1e:a7:6a:f9:45:04:fa:85:40:d3:95:63:
                    98:9c:38:42:fc:79:6e:0a:51:b0:a0:6c:fe:0b:10:
                    b7:b4:05:40:98:f2:c7:ee:de:b5:82:17:4e:dc:65:
                    32:7a:5d:bb:14:05:e1:69:27:f0:ab:cc:07:33:3a:
                    3e:cc:5b:02:39:bd:cf:d0:02:5f:ea:aa:9f:d2:de:
                    1a:fa:a4:09:ff:4f:d7:0a:b5:9e:8d:28:85:6a:5f:
                    63:f8:79:19:a6:a3:43:5d:25:6a:61:43:c8:c6:c1:
                    88:a0:4e:d5:97:4f:e2:96:0d:2c:11:7e:0f:85:3b:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:01:53:C5:40:87:4E:22:B6:0D:CD:CB:E1:30:99:83:8D:93:1B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:68:f7:e3:63:d2:21:21:73:9c:f5:60:d4:3d:ae:8f:74:d6:
         c3:aa:76:08:a2:8e:82:f6:43:da:bf:18:ec:8e:49:aa:4a:cd:
         f2:a6:a9:73:a0:22:fc:c7:9c:57:c5:91:05:4f:41:62:d3:92:
         2d:78:48:66:f1:e5:3a:0a:48:d1:8b:70:30:5d:6c:06:a8:44:
         54:97:49:71:41:b1:d0:57:7b:7f:b4:56:af:9c:7c:c4:31:45:
         aa:d0:f3:84:eb:5f:8e:2b:09:d6:29:d8:35:3c:68:43:6a:c0:
         1f:2b:6c:11:8d:f2:53:4c:8e:a0:63:85:09:39:13:d6:09:58:
         a8:82:35:7b:2a:ba:81:7d:db:87:d7:bd:87:da:ad:5c:70:f9:
         24:65:c5:fb:1b:77:65:5c:02:76:97:3a:a1:5a:f6:19:50:cd:
         41:ea:a5:25:53:ae:70:76:16:93:a6:fa:3d:b3:a8:b0:bd:ad:
         ef:1e:cd:7c:14:0a:f1:a5:bb:ef:ad:70:8e:c3:c2:23:9c:e9:
         95:0f:87:0c:a6:6e:3e:08:7e:a9:0b:5b:99:37:65:5b:c5:39:
         31:f2:44:6e:85:f3:04:f5:f4:7e:bd:6d:cd:12:1e:bc:4d:a6:
         fd:f7:73:d0:59:9e:6c:fc:6e:9f:93:60:da:b1:13:c6:78:f2:
         4f:9f:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:44 2025 by rpki-client