Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa
File:                     990b7095-64fc-3160-8b2f-b22cb9bfb782.roa (raw, json)
Hash identifier:          NXqZIRdcJE+M/NJBfCJljM5GPRE+AOT9gsLzm/m1XNo=
Subject key identifier:   0F:68:0C:90:ED:16:CC:EE:70:ED:64:20:74:88:80:61:45:48:87:07
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF52C0ABABB3A69A788A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        130.254.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:52:c0:ab:ab:b3:a6:9a:78:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=8cb01ae7-4762-4014-bd60-e43692368246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:98:60:c7:94:62:b9:1e:c0:bf:4f:93:21:
                    f4:2f:91:3b:80:e4:14:fc:1f:fb:a6:70:3d:07:ee:
                    75:a3:9f:12:87:d8:2d:3b:10:30:df:35:f1:63:63:
                    0e:0f:f9:2c:af:0c:3d:60:b0:6a:fe:c0:5f:08:d2:
                    08:db:0e:75:b2:de:24:b7:a5:fc:79:8c:7d:86:53:
                    8b:92:45:c4:07:f1:29:b2:8d:07:bb:80:96:0c:eb:
                    74:02:8b:79:40:4c:e3:95:22:da:ff:bb:9c:34:08:
                    70:1d:36:79:0a:bb:88:78:9c:7a:97:c9:c9:a1:bc:
                    6a:ad:8f:16:c2:87:d1:d4:19:53:04:01:93:a9:f1:
                    64:d4:de:ce:6c:4b:8f:55:24:59:c3:cd:be:c6:6c:
                    c8:00:c1:4e:e7:f7:d2:b1:e6:63:0a:9b:1e:4a:39:
                    24:e1:4d:47:7b:d5:69:96:c5:cb:96:d8:4e:18:ab:
                    78:98:e4:0f:4e:8e:16:63:36:96:0a:fe:27:04:a8:
                    38:32:cc:07:f3:7f:ca:d5:36:b0:43:8b:94:d7:8c:
                    ca:8a:e0:3f:65:d1:0f:0e:fe:78:42:16:07:1f:12:
                    6f:ff:24:ad:7d:dd:67:3a:3b:6f:66:30:e8:45:b4:
                    d1:59:d0:9c:cb:32:88:85:27:d6:d6:8a:5a:ef:29:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:68:0C:90:ED:16:CC:EE:70:ED:64:20:74:88:80:61:45:48:87:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/990b7095-64fc-3160-8b2f-b22cb9bfb782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:17:46:ab:c2:fd:b7:68:64:0e:02:f4:60:85:ea:6a:db:b4:
         3c:5d:73:0b:6e:0a:ef:21:ec:a2:93:6b:fe:80:1c:02:50:5e:
         43:10:c4:10:50:98:e5:31:0a:8a:bd:69:d7:41:3d:06:37:09:
         f8:5b:90:e3:29:48:33:60:9b:75:41:f8:40:85:df:d7:f8:a4:
         46:a0:90:a8:0b:89:01:c0:02:54:b3:00:ae:67:76:c7:13:45:
         70:20:96:29:9f:8a:b1:2d:24:db:87:33:0c:e4:b0:02:56:c4:
         3d:a7:b0:9d:5c:3b:3a:a0:47:3f:71:b0:e6:23:34:7b:e2:29:
         7a:11:f0:4b:96:03:77:30:45:27:84:3e:79:c5:fd:a2:8e:f3:
         92:f9:55:2f:3b:48:41:0f:91:79:36:10:c1:b7:69:95:58:be:
         f5:03:cc:d2:09:b6:42:4f:bc:32:1f:bb:2d:11:0a:ee:e9:1a:
         e1:9d:5b:ca:02:fc:11:6b:69:64:d5:49:0f:b5:02:56:d4:c5:
         0e:1c:25:66:b3:62:5c:88:8f:68:84:7d:4e:e5:3f:20:42:07:
         c2:2e:fe:9b:ca:a5:22:e4:7f:97:1e:84:1a:49:15:3e:48:d4:
         9a:aa:12:84:e0:c5:e1:35:1f:a1:48:06:d9:13:b7:c2:db:53:
         f4:01:12:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231LAq6uzppp4igAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
OGNiMDFhZTctNDc2Mi00MDE0LWJkNjAtZTQzNjkyMzY4MjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0+YYMeUYrkewL9PkyH0L5E7gOQU/B/7pnA9
B+51o58Sh9gtOxAw3zXxY2MOD/ksrww9YLBq/sBfCNII2w51st4kt6X8eYx9hlOL
kkXEB/Epso0Hu4CWDOt0Aot5QEzjlSLa/7ucNAhwHTZ5CruIeJx6l8nJobxqrY8W
wofR1BlTBAGTqfFk1N7ObEuPVSRZw82+xmzIAMFO5/fSseZjCpseSjkk4U1He9Vp
lsXLlthOGKt4mOQPTo4WYzaWCv4nBKg4MswH83/K1TawQ4uU14zKiuA/ZdEPDv54
QhYHHxJv/yStfd1nOjtvZjDoRbTRWdCcyzKIhSfW1opa7ynWpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9oDJDtFszucO1kIHSIgGFFSIcHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOTkwYjcwOTUtNjRmYy0z
MTYwLThiMmYtYjIyY2I5YmZiNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANAXRqvC/bdoZA4C9GCF6mrbtDxdcwtuCu8h7KKTa/6AHAJQXkMQxBBQ
mOUxCoq9addBPQY3CfhbkOMpSDNgm3VB+ECF39f4pEagkKgLiQHAAlSzAK5ndscT
RXAglimfirEtJNuHMwzksAJWxD2nsJ1cOzqgRz9xsOYjNHviKXoR8EuWA3cwRSeE
PnnF/aKO85L5VS87SEEPkXk2EMG3aZVYvvUDzNIJtkJPvDIfuy0RCu7pGuGdW8oC
/BFraWTVSQ+1AlbUxQ4cJWazYlyIj2iEfU7lPyBCB8Iu/pvKpSLkf5cehBpJFT5I
1JqqEoTgxeE1H6FIBtkTt8LbU/QBEkE=
-----END CERTIFICATE-----
Generated at Fri May 2 07:22:26 2025 by rpki-client