Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa
File:                     a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa (raw, json)
Hash identifier:          brwl7T11DMYVUYHmT1+9JsvJQtcos/d13fdLVAIxErc=
Subject key identifier:   DD:70:28:7B:C7:F2:79:31:46:28:B9:F1:22:83:99:23:FF:6A:19:21
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF539393E7FF5393059A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        130.254.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:53:93:93:e7:ff:53:93:05:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=ca493062-9de5-4fa9-8aa7-57ef1afce69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:b2:f9:17:86:3f:be:cb:e9:11:87:98:26:
                    5a:b9:5d:f0:52:28:55:8b:53:1a:d9:02:0f:12:c0:
                    f1:e8:9d:97:41:1c:8f:0c:d0:c2:d4:44:8c:aa:7e:
                    aa:a4:44:12:57:5c:33:29:b5:97:47:d1:07:43:8e:
                    92:eb:ba:02:d5:3a:cf:98:11:8c:62:b3:8c:d6:bc:
                    09:22:8c:8d:46:19:65:61:62:c7:7a:0f:76:8d:df:
                    64:96:cf:f9:71:47:94:35:31:b5:a5:63:f6:f6:b3:
                    e3:66:8f:94:7d:e6:ee:a3:d0:ae:48:23:1d:f5:c3:
                    0f:ee:59:b7:2b:36:e8:58:d8:1b:d9:f3:10:58:d8:
                    d4:55:3f:49:7a:d6:de:63:cd:4e:26:60:98:d3:d2:
                    f1:ba:97:85:bb:f8:88:be:42:cd:fc:b3:bd:6f:01:
                    7c:c6:e5:09:ed:bc:21:2b:6a:e0:1c:e6:04:2e:d7:
                    ac:b8:5d:8c:07:9a:da:b1:e6:a5:19:c4:d7:60:92:
                    38:eb:60:8c:08:c8:7a:54:d9:82:46:56:5b:89:8f:
                    1c:b9:d2:3d:fd:57:ad:9e:80:5c:22:f9:60:b9:bc:
                    7b:65:57:a9:b7:3c:dd:2a:b7:a9:82:6b:a3:70:57:
                    14:7a:6e:fa:ba:24:d5:fc:37:a1:3a:c9:96:e8:01:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:28:7B:C7:F2:79:31:46:28:B9:F1:22:83:99:23:FF:6A:19:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a665fa5d-070b-3b52-a2b8-06eb8d4b5714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:4b:98:00:09:64:a3:e1:69:70:fe:c0:70:df:10:5f:55:a3:
         be:90:b5:04:98:ba:70:fb:d2:7e:a7:88:93:fc:7d:8d:fe:b6:
         96:ac:28:9d:53:19:9b:6c:3d:fd:e9:34:9e:d8:79:e8:df:9c:
         08:83:16:1f:c0:47:54:cc:42:b4:7d:c7:ac:9a:28:e3:86:43:
         92:3a:94:ce:86:42:c9:02:3d:3f:91:d4:19:8b:70:9e:b7:a5:
         37:a4:9e:ac:20:da:05:ed:36:e1:b9:79:03:c7:c8:4a:e3:87:
         98:af:e4:c2:5a:4d:24:c1:46:db:f0:b5:3e:01:f3:2d:28:6a:
         d9:8a:95:65:71:f7:33:13:74:37:8d:c0:2b:a8:87:ca:6d:74:
         3e:c9:bd:16:f0:09:05:e4:dd:87:75:2d:99:00:94:39:8e:e7:
         1f:2f:3e:6e:ce:db:5f:53:b0:11:d5:59:d5:f6:99:24:cb:28:
         3c:b8:56:14:5e:5c:65:db:c4:fd:9d:28:f1:1d:e0:44:bc:23:
         d6:0e:a1:75:78:b6:bc:8b:c9:98:ee:d9:32:74:aa:3b:e5:87:
         e9:bc:30:cb:38:88:3a:3d:b4:02:6c:e9:f7:6f:b8:df:f0:0d:
         2c:8e:48:eb:6e:05:42:f3:f6:93:99:05:1e:9f:a3:54:33:07:
         d6:0c:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:35:12 2025 by rpki-client