Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa
File:                     7255de94-c26e-30a0-a765-c429b196c862.roa (raw, json)
Hash identifier:          8JVximmz+ByeY31WKBH8/vsmmfkvN9rPLjqc1L/NIsY=
Subject key identifier:   4B:E2:A9:94:8E:58:F4:F2:AC:7B:8E:66:86:7A:7C:9C:8A:39:6E:FE
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F43285849C904F4958EB22BA541348200
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     55
IP address blocks:        158.130.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f4:95:8e:b2:2b:a5:41:34:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=dc3c6baa-8ae4-4468-b820-d765d8ed8941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ae:04:04:c9:20:89:1e:c8:0c:52:97:a9:8b:
                    c3:e8:55:23:c3:91:76:42:0c:23:3d:0f:19:79:cd:
                    9d:dc:d4:a0:79:14:a3:12:96:41:0b:83:fa:c8:de:
                    4b:15:8b:cd:b1:e3:82:0b:43:5d:1d:8a:de:7e:e8:
                    52:65:39:a6:d4:2e:7e:e5:b2:a3:9d:99:12:60:85:
                    8b:e5:41:f2:35:1e:7d:ac:fe:75:2e:d9:83:c8:c4:
                    89:bb:f6:67:89:89:43:46:88:3a:d3:04:a1:72:af:
                    44:aa:b1:e9:90:13:15:71:41:a8:7d:f8:e7:29:71:
                    d2:6d:2b:b0:1b:22:c3:31:2b:81:1b:59:d4:81:5f:
                    3a:bb:21:c0:35:7d:5f:c9:61:5c:21:f4:d9:94:a3:
                    01:c7:2e:dd:45:17:3e:82:85:97:84:3e:f2:c2:40:
                    f8:02:cd:57:58:84:73:95:3e:a4:c9:d7:24:79:f5:
                    2c:04:43:b4:dd:90:e4:5a:11:7d:51:c2:35:8b:17:
                    d8:3c:59:cd:98:cf:fb:9c:e8:3f:ad:97:6e:57:1e:
                    24:dc:0e:ea:18:43:7a:fe:56:e6:1f:43:ec:ed:25:
                    2d:b7:da:04:ba:24:4e:a1:bf:f9:03:21:8f:7a:3f:
                    f8:6e:8a:db:fd:b9:1b:8a:b9:70:de:50:07:73:86:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:A9:94:8E:58:F4:F2:AC:7B:8E:66:86:7A:7C:9C:8A:39:6E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7255de94-c26e-30a0-a765-c429b196c862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:26:ad:bf:04:ac:b3:97:90:37:21:ed:02:6a:95:5f:b1:
         e9:5b:99:f1:e8:ba:af:87:59:1f:10:d0:fc:54:b7:31:ad:c7:
         d4:94:5e:de:f2:7a:4e:0a:06:90:0b:6c:48:63:b9:d8:51:e7:
         88:cb:30:0a:6d:f2:04:0d:c9:e5:fb:6d:f9:52:3b:04:15:a3:
         11:52:68:1e:44:b1:dd:ae:c7:0f:96:b9:5b:15:fd:64:f0:e6:
         4e:5e:be:68:0c:9d:31:38:6d:b0:8e:95:07:c2:1b:04:1a:33:
         54:65:bf:df:57:01:92:82:2a:46:54:26:ee:38:c4:8a:53:72:
         21:b4:44:19:0c:a6:b1:40:66:b6:af:9e:55:4e:5b:4b:9f:ff:
         5a:21:33:87:13:f5:84:5a:ac:ba:3a:da:77:87:01:b8:a4:52:
         5f:81:01:4c:bf:e1:cb:c3:da:62:9d:3c:b5:92:8d:d7:64:1a:
         c8:18:c4:47:1a:dd:3f:42:5e:63:2d:ef:60:44:04:b5:33:17:
         a6:13:92:c0:95:ba:94:f2:52:ef:91:a9:e1:c2:e7:85:b5:c7:
         4d:e6:89:6c:5e:b8:b5:23:fe:38:2d:f0:de:03:0f:b2:fe:a4:
         87:69:56:02:67:05:33:76:10:8e:78:3e:94:89:14:c1:5e:e6:
         dc:ec:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:48:34 2025 by rpki-client