Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/96bfc844-844b-39e4-8f24-7cf8f4a52288.roa
File:                     96bfc844-844b-39e4-8f24-7cf8f4a52288.roa (raw, json)
Hash identifier:          Dyd1opgFeQhnPDAgovbZglfH+OqGAYhbIpbpydgGqus=
Subject key identifier:   D5:41:D3:0E:F6:52:07:93:35:EB:2F:2A:5A:3F:75:9F:2C:30:C3:C1
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584A388765CC148C4AFD661D1BA0
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/96bfc844-844b-39e4-8f24-7cf8f4a52288.roa
Signing time:             Tue 17 Jun 2025 11:38:50 +0000
ROA not before:           Tue 17 Jun 2025 11:38:50 +0000
ROA not after:            Mon 15 Sep 2025 11:38:50 +0000
asID:                     397688
IP address blocks:        130.254.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:87:65:cc:14:8c:4a:fd:66:1d:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Jun 17 11:38:50 2025 GMT
            Not After : Sep 15 11:38:50 2025 GMT
        Subject: CN=e851aa3d-87ce-4a59-b8f5-47a911d23dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:6d:78:09:d1:ce:11:91:65:50:42:9c:68:
                    1f:c4:45:87:b5:4a:e4:97:68:10:0d:25:34:3d:aa:
                    5a:7a:9e:ef:9a:6e:1d:7e:1c:2d:31:64:d0:68:7a:
                    ba:24:69:4b:0a:fd:b0:f8:ce:f2:35:54:97:86:b4:
                    e8:3a:7d:82:df:08:6f:ab:15:97:2c:d1:93:1c:b4:
                    11:97:b8:d3:f9:a5:4e:c2:86:eb:eb:47:ec:a7:12:
                    63:34:94:1e:01:61:51:e0:76:9a:61:56:7e:23:8e:
                    ab:82:f3:fc:d1:45:5b:21:ed:e8:5d:a0:e2:06:a0:
                    89:ef:82:17:9c:35:de:8e:14:d2:aa:33:a8:9a:5b:
                    e5:5d:7b:57:ab:71:5b:8f:21:0e:3d:14:4d:a8:ff:
                    94:6a:7f:33:35:59:1c:5c:c0:49:de:9b:d4:be:d9:
                    e1:a7:16:7f:c0:1c:6c:52:80:a2:74:5a:0e:62:2f:
                    b3:89:97:8b:0a:e4:81:9f:c7:64:c4:22:22:52:c7:
                    e1:49:cd:e0:88:73:91:44:54:7a:11:f6:2f:ba:86:
                    e6:fb:59:ab:20:fa:5b:21:be:78:83:a3:5d:3b:c9:
                    cb:16:54:63:04:b4:ca:d8:13:09:1e:a7:aa:b6:56:
                    9b:67:b5:3a:f6:b4:b8:ed:5e:94:58:ce:77:0c:e0:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:41:D3:0E:F6:52:07:93:35:EB:2F:2A:5A:3F:75:9F:2C:30:C3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/96bfc844-844b-39e4-8f24-7cf8f4a52288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:44:99:84:7e:8e:e7:21:94:85:4e:e1:4e:80:81:19:3a:d1:
         ad:21:2f:11:9f:74:d2:83:53:91:11:3f:4b:c8:89:07:9f:31:
         eb:73:7d:d0:7a:30:f8:a9:f7:f6:6c:4d:50:81:69:b6:3e:7e:
         92:77:40:11:e5:50:3f:d0:48:ac:19:6b:0f:4e:87:48:79:d7:
         a6:32:ad:92:58:58:e4:78:9c:8c:8a:ee:dd:bc:73:1a:ef:5d:
         3f:dc:34:fb:14:84:d8:ac:5f:af:ff:f6:30:71:b3:b8:79:46:
         c3:a8:8f:76:89:29:12:88:97:a6:35:f0:41:9c:01:9f:db:51:
         48:4e:af:ab:8e:8e:1b:bc:08:15:bf:6e:b3:f0:be:1e:f2:97:
         b4:d3:91:8a:68:42:fc:98:ba:89:38:3e:e2:85:d0:a6:a9:52:
         6e:1d:96:0c:d1:90:39:c7:43:d9:cd:a5:92:a0:08:9b:60:39:
         5e:e7:7b:0b:ba:ad:d7:1a:e3:ce:dc:a2:f0:1d:a9:a7:c2:07:
         ac:11:83:cb:ff:a7:6a:ac:f2:76:63:8a:97:9f:62:5e:96:09:
         3d:8d:f5:3a:41:bc:1e:6b:9a:ee:bf:22:63:6e:34:0b:4f:32:
         60:8e:1c:17:fe:24:c1:df:7d:e7:ab:87:fe:97:ef:a0:59:99:
         1d:ea:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:35 2025 by rpki-client