Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa
File:                     9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa (raw, json)
Hash identifier:          KGHr7mH4tYM7i42Y7o+8ZVQuOaNUEaLrMF456g5179g=
Subject key identifier:   05:F2:34:98:4A:2C:38:1F:51:ED:D2:49:EE:21:FB:7F:A2:86:8F:5B
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584A391309946A9E6612616F3A40
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa
Signing time:             Tue 17 Jun 2025 16:20:12 +0000
ROA not before:           Tue 17 Jun 2025 16:20:12 +0000
ROA not after:            Mon 15 Sep 2025 16:20:12 +0000
asID:                     19905
IP address blocks:        130.254.54.0/24 maxlen: 24
                          130.254.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:13:09:94:6a:9e:66:12:61:6f:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Jun 17 16:20:12 2025 GMT
            Not After : Sep 15 16:20:12 2025 GMT
        Subject: CN=02740c08-2422-41a8-b1a9-a76b632f2869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:dc:b0:76:18:66:ae:d3:9b:da:d8:15:8f:
                    5a:89:4e:47:bf:1f:1f:4d:fd:94:66:e3:9b:1c:9a:
                    2f:27:78:ea:35:de:ac:24:3f:b0:61:08:48:45:da:
                    97:6c:6e:6c:f8:55:d3:d8:f4:9e:26:95:95:87:3a:
                    a6:20:e6:d8:04:f4:ea:36:19:83:26:c8:50:93:bb:
                    f4:60:46:f5:b8:06:5c:2c:c3:f9:17:96:aa:ae:3e:
                    fe:bf:ab:0e:09:c8:e8:d7:78:d6:de:ac:f6:41:54:
                    75:dd:98:93:3a:fd:a5:fc:3e:0f:cc:ce:cf:ef:db:
                    a4:4d:11:50:fa:13:71:03:08:18:da:d2:04:f9:47:
                    f7:9e:c3:ce:74:5d:95:a3:00:df:95:b5:3e:bf:41:
                    18:59:68:d9:85:81:61:54:ea:07:ea:ef:f9:23:6a:
                    11:dd:8a:75:3a:e3:4a:77:12:16:4f:83:b3:12:d9:
                    e0:5d:52:94:34:61:e7:95:dd:ca:f6:24:64:d8:7f:
                    0e:08:0e:e0:ad:6c:83:79:e0:3c:3c:6d:5b:7d:7c:
                    0a:e2:9a:eb:fb:0b:08:dd:d0:80:ee:37:bf:fa:07:
                    68:60:52:4a:53:67:79:2b:86:65:db:01:ac:90:65:
                    ca:c7:65:a3:46:61:0c:ed:5a:4a:51:ff:c7:c2:23:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F2:34:98:4A:2C:38:1F:51:ED:D2:49:EE:21:FB:7F:A2:86:8F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:04:31:ee:1b:44:c8:36:49:83:82:e5:86:2c:86:93:aa:
         32:6d:07:56:72:5e:0a:75:a4:fe:ff:33:62:c7:b8:3a:41:24:
         2a:e9:d2:46:78:6e:0c:0b:43:5d:06:a6:d5:8b:61:a4:08:7f:
         9f:4a:5e:6a:6d:21:df:09:dc:7f:59:c9:1f:42:cd:a0:cc:a0:
         62:af:49:c2:cc:69:0f:bf:79:70:24:c2:a6:a1:85:e0:32:33:
         02:77:a6:64:47:52:d3:26:90:1e:0e:a3:84:58:8e:be:65:0a:
         44:b2:50:59:fb:28:2a:21:77:ea:bd:75:8e:cf:4e:55:2c:c4:
         82:42:13:3c:56:13:59:b3:37:4b:8f:c4:37:ce:5a:74:54:ba:
         7a:67:64:d0:b3:9e:a5:c7:14:37:5a:ab:36:59:6b:18:fe:96:
         35:74:c7:88:d2:ba:87:5f:e2:d0:5e:47:6d:19:14:c5:15:d7:
         b0:cd:54:23:57:d3:95:9a:93:d3:ba:bd:e9:49:50:3c:47:ff:
         6b:96:34:4f:75:1b:22:02:ab:d2:e4:fd:94:41:8c:7c:1e:c4:
         3d:10:ec:d3:d9:f0:dd:82:f6:41:d9:23:6a:0d:55:69:08:fb:
         75:13:d1:26:97:09:55:c2:37:b0:7d:96:72:85:c6:ca:1e:a4:
         61:e0:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:06:45 2025 by rpki-client