Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5e18674d-225a-320d-a1f0-0e697322be1b.roa
File:                     5e18674d-225a-320d-a1f0-0e697322be1b.roa (raw, json)
Hash identifier:          oY7qg0ehp+hLBZjVyuxmbyDNclpuVCv6Uh+pZ6QkjjA=
Subject key identifier:   70:DD:41:6D:40:61:69:8D:9C:50:21:7F:33:3B:99:42:DC:2F:0A:ED
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858498CFF07B69E1A8F5EA3484800
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5e18674d-225a-320d-a1f0-0e697322be1b.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     27560
IP address blocks:        207.54.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:07:b6:9e:1a:8f:5e:a3:48:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=960de738-19ec-48d1-9cca-158be58a5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:7d:1f:2e:e9:c4:b9:b9:6e:a0:d2:cc:53:
                    31:09:3a:0f:75:2a:ff:aa:64:56:ab:eb:99:c6:de:
                    2d:2d:73:9b:d3:02:47:11:3d:28:40:38:e6:12:59:
                    d4:3a:01:98:a4:6a:be:f3:ef:6e:7e:ba:50:ff:44:
                    e9:94:c1:22:3f:aa:bf:75:43:90:bb:1c:2d:00:a3:
                    b1:b7:30:5a:3b:a2:bf:4b:f7:7f:05:01:49:36:1b:
                    a0:a7:13:a3:71:33:60:38:79:58:29:41:5f:57:6a:
                    d7:c7:9d:f3:93:d9:a6:a0:42:fc:6b:b6:25:dc:ce:
                    46:9c:ed:0e:15:e6:ab:b4:4b:69:9d:91:29:57:22:
                    66:a2:4b:37:91:f6:19:7a:cd:8d:1e:0f:dc:a7:39:
                    85:f3:db:27:d7:a4:a4:1c:8f:a5:fd:f1:8a:62:81:
                    eb:7f:47:a6:73:96:f6:00:89:9b:17:b8:6c:47:28:
                    97:eb:4f:a3:3d:cb:a9:ae:e2:b3:64:20:5d:08:30:
                    14:39:74:b8:1a:e1:bc:d4:b9:de:50:41:9f:9c:71:
                    da:06:6f:84:bf:20:88:4f:fe:5c:60:ae:c4:d3:2b:
                    67:1d:41:d2:bd:5c:1c:33:11:9c:17:82:de:13:56:
                    31:ae:b8:7c:5c:fd:f5:6e:b4:05:14:98:3b:a1:a2:
                    01:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DD:41:6D:40:61:69:8D:9C:50:21:7F:33:3B:99:42:DC:2F:0A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5e18674d-225a-320d-a1f0-0e697322be1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fa:32:a6:67:39:e4:53:86:27:c7:c3:56:8b:33:b8:4b:16:
         dd:e1:b7:a3:be:4c:83:88:76:d1:97:ca:af:fe:6f:a6:44:7b:
         56:f6:e8:56:1a:fc:d0:27:fa:89:3a:0f:d0:e6:4c:00:c7:5b:
         b5:b0:4a:c2:da:6e:51:fd:59:52:4c:07:0a:6b:4d:09:48:7c:
         fd:dd:46:9d:ea:76:4c:7d:71:54:f6:f6:0e:46:7d:0e:d9:9f:
         65:06:c0:d4:54:9b:ca:4f:0b:bf:67:a2:41:e3:8e:ac:08:1d:
         e8:7e:9e:9e:46:ec:45:ad:c1:e0:7c:38:1d:69:d8:c1:4d:9d:
         13:41:2f:6c:08:32:31:c6:a4:56:76:c7:c9:37:b2:f1:d3:5c:
         28:14:36:a5:37:30:d6:e0:8f:3b:4c:af:81:91:3d:4b:c1:a3:
         f4:21:4a:4b:c4:60:10:bd:a6:ab:b6:bb:9c:2a:b3:5c:14:90:
         0a:b6:c7:f9:ff:2f:ad:b6:68:ea:9f:6d:bf:7e:30:75:34:28:
         22:d6:ca:df:07:04:ea:d3:18:81:52:2a:f3:96:2b:a0:da:bb:
         f6:eb:63:8d:6a:c8:5d:c0:2d:2b:30:2c:13:b6:de:af:8a:32:
         01:42:fa:83:67:d1:6e:6f:5d:9c:52:0f:d0:3c:e3:18:fd:4b:
         16:27:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:34:18 2025 by rpki-client