Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa
File:                     ed2de4cf-740a-331f-a504-905188603ad1.roa (raw, json)
Hash identifier:          wHQbpMABWtNu+hFiOmvXmhknGxQlWNaPyw8yuR8OSYs=
Subject key identifier:   2B:CF:DD:5F:B3:87:A8:D5:47:3F:F7:E1:9C:5F:D8:93:E0:5F:66:0A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A963690BE56950B437499F200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     397630
IP address blocks:        130.254.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:90:be:56:95:0b:43:74:99:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=3e490398-1e22-455a-ae6d-08bd4329a8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:c7:97:b9:1d:16:47:8f:6e:d9:6b:29:8b:
                    03:95:78:42:db:71:0f:be:ba:77:04:ec:24:2d:01:
                    4e:e6:26:bb:ce:ad:fb:cd:77:35:37:ef:66:a9:20:
                    86:eb:1d:f6:d9:a0:3a:27:b7:de:61:97:04:4f:3a:
                    12:ef:a3:f6:c8:be:e3:c0:5d:77:a7:2a:0e:b0:ac:
                    4f:35:03:84:d6:9c:38:99:7e:6a:e7:f9:b4:ec:e6:
                    23:ac:a1:e7:bb:8c:5c:9d:e0:a6:30:6d:d7:15:b8:
                    86:22:ef:00:22:20:95:7f:49:d3:bb:80:87:4e:0d:
                    97:9b:a7:a2:9b:0b:e4:8b:38:7f:83:c7:f3:6f:dd:
                    b5:b1:aa:f1:cd:e1:18:5a:09:2c:69:ee:5e:30:f1:
                    5e:0c:80:c7:75:d3:e7:f4:d1:85:2e:c1:38:c7:c6:
                    19:e7:09:79:12:b1:fd:4e:fc:c1:5e:b9:05:53:1d:
                    f3:f2:0a:52:ec:a8:eb:de:0a:9b:75:69:c9:85:da:
                    c3:db:04:49:de:c4:2b:5c:42:e8:ea:00:ff:05:b9:
                    cc:93:d6:cd:37:1b:1c:83:80:af:c8:52:b1:38:00:
                    05:07:36:af:51:71:33:4a:ae:c9:66:f8:8a:20:d4:
                    71:c2:77:fa:3d:1e:58:cb:a5:bd:f3:0c:02:42:f3:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CF:DD:5F:B3:87:A8:D5:47:3F:F7:E1:9C:5F:D8:93:E0:5F:66:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7f:82:8f:b2:c0:5d:34:ab:d8:da:84:01:76:29:d3:b3:b0:
         f9:6d:30:f5:86:1f:a1:28:4c:fd:df:55:af:11:4f:ff:f7:f2:
         50:77:a0:7c:f7:80:53:3f:cb:07:89:26:ca:f7:d8:fd:c7:10:
         fc:96:06:de:ec:6c:19:5f:1d:bf:16:b3:90:41:22:ed:2c:09:
         38:84:38:88:38:9c:f3:83:e6:7c:3a:83:5c:60:83:ce:e2:fc:
         e0:20:f9:62:cc:53:2a:f8:b3:c4:f7:64:9f:0f:96:32:86:44:
         43:55:dc:84:d6:0c:9f:85:03:b9:64:c7:b0:8a:d2:13:8a:48:
         b3:8f:13:ec:7f:8b:11:28:0c:f4:4c:ed:ff:84:61:38:69:40:
         b9:32:64:a4:01:5a:41:82:c3:4e:cb:52:0f:86:0d:52:6f:9e:
         c8:32:42:ff:3e:03:0a:1f:82:4a:ee:3d:af:66:04:d3:8c:bf:
         d0:e2:25:97:83:2a:ca:64:56:68:7f:6b:b3:3c:cc:9f:88:b1:
         a8:a9:0e:10:84:70:dc:c5:9d:5c:fd:95:66:16:0a:17:85:84:
         8a:48:0e:ec:00:05:67:4f:0a:62:bf:7d:a4:4c:19:00:32:58:
         02:d7:68:61:b4:3d:8a:d9:cc:cc:51:01:a4:da:32:29:43:74:
         29:82:01:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:11 2025 by rpki-client