Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e635814a-13ec-335b-bb42-0f8176f765df.roa
File:                     e635814a-13ec-335b-bb42-0f8176f765df.roa (raw, json)
Hash identifier:          Xa0udtW77MtmvhrMaFxWefrML3yuCc40Mdu60cZM/3M=
Subject key identifier:   8C:7B:E7:D7:1B:BB:3F:77:34:D6:8A:AC:0B:53:16:15:61:68:AA:0C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EA47DAD73CBC77EF8E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e635814a-13ec-335b-bb42-0f8176f765df.roa
Signing time:             Mon 07 Apr 2025 16:33:11 +0000
ROA not before:           Mon 07 Apr 2025 16:33:11 +0000
ROA not after:            Sun 06 Jul 2025 16:33:11 +0000
asID:                     81
IP address blocks:        128.109.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ea:47:da:d7:3c:bc:77:ef:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:11 2025 GMT
            Not After : Jul  6 16:33:11 2025 GMT
        Subject: CN=68e37419-57e4-4d6a-a171-55e0acf970ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b5:29:13:4d:84:a0:eb:ea:8c:05:9e:89:50:
                    6b:2d:7a:ed:15:58:a3:8e:43:1b:1c:1e:0e:13:7b:
                    2c:e1:82:cb:6f:a0:1e:9c:ec:7a:8a:f3:1b:81:87:
                    31:52:21:d8:e3:41:3b:ad:d0:96:ad:dc:61:37:e8:
                    9e:6c:50:10:68:78:b1:6b:13:8e:75:42:ff:75:cc:
                    5b:43:e6:be:19:42:ce:b0:87:d7:e6:b8:10:c0:d0:
                    f8:6d:77:fa:96:c2:91:3c:64:10:3d:96:dd:96:6c:
                    5c:c0:06:c0:b5:37:60:32:da:43:fb:28:09:21:dd:
                    33:48:a7:f9:e5:41:6e:d1:d1:d5:f7:99:e9:67:7d:
                    cc:05:33:10:4e:41:c1:f6:4a:d2:59:74:3b:72:1f:
                    08:32:58:d4:2a:a4:1d:a4:bf:cf:7b:9e:ff:5c:bd:
                    7c:3c:88:06:5b:21:f2:c0:7f:bb:20:83:66:91:66:
                    ec:fa:83:1d:45:d6:03:d6:96:9b:23:97:98:11:cb:
                    d4:d5:b5:49:36:2d:3a:c9:05:e2:6f:cb:9d:4c:d6:
                    62:8d:44:79:e6:ad:00:ad:da:0a:ca:d7:0a:11:38:
                    16:67:3c:77:f8:b7:8a:e3:b5:d6:05:6f:e6:9d:6f:
                    64:cf:59:35:ef:1d:52:a6:14:f9:06:3f:35:cf:3f:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7B:E7:D7:1B:BB:3F:77:34:D6:8A:AC:0B:53:16:15:61:68:AA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e635814a-13ec-335b-bb42-0f8176f765df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b4:32:52:e6:1b:39:50:1b:a4:48:8f:e3:3f:e8:1e:14:2c:
         57:77:b8:ee:4f:2d:d8:ae:32:87:ef:84:df:9a:2c:0a:f4:db:
         a8:cd:97:a1:35:79:78:d8:35:0a:92:1b:f9:ab:f4:f9:71:f0:
         74:8c:1d:0c:80:4a:10:c8:39:8b:59:34:52:2a:db:e0:0c:8a:
         da:e2:3b:f6:c8:75:56:11:02:46:e3:a7:44:89:4b:e8:7f:a9:
         ef:15:b0:e4:61:2d:70:24:d7:c2:33:ce:09:4a:52:f3:ae:ab:
         00:fe:19:05:fe:9c:aa:bd:7d:f6:ea:99:53:66:ec:4f:18:61:
         e2:d8:91:6f:4f:9b:75:53:77:94:95:a1:a3:fb:6f:da:b5:56:
         33:71:f4:6b:7e:01:0b:43:5e:5c:95:c0:c0:a7:12:da:6b:bf:
         f6:ed:ea:32:eb:a0:74:b0:50:5c:91:f1:18:d7:db:e8:90:86:
         84:a5:ba:9f:da:4c:2f:eb:84:4f:b0:b0:b2:35:3e:91:3f:00:
         e9:7a:a4:02:8a:2f:4e:89:c3:36:3f:be:83:59:41:1a:18:05:
         f7:00:ed:5d:de:12:a8:83:7a:e0:66:02:68:64:1c:d7:5f:73:
         27:b7:d8:bd:77:43:61:37:a1:ce:0d:0e:19:98:a6:5d:08:6a:
         33:73:ab:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4upH2tc8vHfvjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxMVoXDTI1MDcwNjE2MzMxMVowLzEtMCsGA1UEAxMk
NjhlMzc0MTktNTdlNC00ZDZhLWExNzEtNTVlMGFjZjk3MGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrUpE02EoOvqjAWeiVBrLXrtFVijjkMbHB4O
E3ss4YLLb6AenOx6ivMbgYcxUiHY40E7rdCWrdxhN+iebFAQaHixaxOOdUL/dcxb
Q+a+GULOsIfX5rgQwND4bXf6lsKRPGQQPZbdlmxcwAbAtTdgMtpD+ygJId0zSKf5
5UFu0dHV95npZ33MBTMQTkHB9krSWXQ7ch8IMljUKqQdpL/Pe57/XL18PIgGWyHy
wH+7IINmkWbs+oMdRdYD1pabI5eYEcvU1bVJNi06yQXib8udTNZijUR55q0ArdoK
ytcKETgWZzx3+LeK47XWBW/mnW9kz1k17x1SphT5Bj81zz/AHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIx759cbuz93NNaKrAtTFhVhaKoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTYzNTgxNGEtMTNlYy0z
MzViLWJiNDItMGY4MTc2Zjc2NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+0MlLmGzlQG6RIj+M/6B4ULFd3uO5PLdiuMofvhN+aLAr026jNl6E1
eXjYNQqSG/mr9Plx8HSMHQyAShDIOYtZNFIq2+AMitriO/bIdVYRAkbjp0SJS+h/
qe8VsORhLXAk18IzzglKUvOuqwD+GQX+nKq9ffbqmVNm7E8YYeLYkW9Pm3VTd5SV
oaP7b9q1VjNx9Gt+AQtDXlyVwMCnEtprv/bt6jLroHSwUFyR8RjX2+iQhoSlup/a
TC/rhE+wsLI1PpE/AOl6pAKKL06JwzY/voNZQRoYBfcA7V3eEqiDeuBmAmhkHNdf
cye32L13Q2E3oc4NDhmYpl0IajNzq7g=
-----END CERTIFICATE-----
Generated at Sat May 10 19:20:55 2025 by rpki-client