Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/153f18c2-1543-36e1-a1ab-524586f1e668.roa
File:                     153f18c2-1543-36e1-a1ab-524586f1e668.roa (raw, json)
Hash identifier:          IEri2DWNC5ILUgiR/Toq2GEpUU6bXXVUrvmPXo35hhs=
Subject key identifier:   2B:F7:95:30:79:DA:19:AE:A1:98:9D:1D:F5:07:3D:3C:9C:9B:16:A0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A495D8D26E398042291F7B260
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/153f18c2-1543-36e1-a1ab-524586f1e668.roa
Signing time:             Mon 23 Jun 2025 12:23:16 +0000
ROA not before:           Mon 23 Jun 2025 12:23:16 +0000
ROA not after:            Sun 21 Sep 2025 12:23:16 +0000
asID:                     20001
IP address blocks:        130.254.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:5d:8d:26:e3:98:04:22:91:f7:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:23:16 2025 GMT
            Not After : Sep 21 12:23:16 2025 GMT
        Subject: CN=73bbdeab-9802-4be7-9074-de4ee5bae5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:cf:f3:48:38:e3:d2:c5:c0:fa:c0:a3:4e:
                    fe:8a:90:6e:59:2f:cb:fd:9e:a2:ec:cf:72:07:a6:
                    a3:0e:e6:0c:f2:41:e3:e5:eb:89:22:ca:23:3b:05:
                    47:4a:27:2b:89:10:a0:cd:50:31:96:56:ad:b2:75:
                    c8:af:98:4f:f3:cb:07:08:de:56:25:b4:9d:f6:f7:
                    84:44:2b:b8:e4:24:d0:02:20:f4:10:db:34:a0:9c:
                    ce:95:f0:97:45:1c:7e:3e:4b:27:a3:3b:f0:db:d6:
                    e4:0c:3b:17:a7:e1:b9:7a:60:65:05:f6:b5:19:57:
                    a5:65:e7:52:75:6b:dd:bc:24:7b:8b:ac:e0:12:b2:
                    33:1b:ed:2c:26:42:cb:05:e9:4f:b6:00:41:ca:26:
                    1d:f9:8b:85:0f:b2:c2:e7:ea:11:00:5a:b6:81:ea:
                    b2:38:bc:bc:6e:c8:5b:c7:4c:98:3d:5a:6e:00:a6:
                    f7:69:89:61:e9:97:79:ff:22:c4:12:5b:46:fd:db:
                    68:de:91:0d:b2:85:35:6a:9f:d3:6a:35:28:33:06:
                    64:87:ae:73:e0:4f:e9:48:5e:56:40:b0:87:ac:f3:
                    1c:cf:ec:7d:a9:c3:d1:9c:eb:f9:f3:4a:7d:1d:3c:
                    db:c2:3d:6a:98:33:f4:5f:33:a0:f7:6e:2f:eb:d9:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F7:95:30:79:DA:19:AE:A1:98:9D:1D:F5:07:3D:3C:9C:9B:16:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/153f18c2-1543-36e1-a1ab-524586f1e668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:e3:74:4f:f7:99:7a:23:be:7f:01:e8:a5:3e:cc:e6:48:18:
         1c:a3:28:5c:6d:f1:23:56:75:58:29:20:53:c6:75:71:0a:84:
         51:83:85:f7:5e:c5:ca:f5:19:a3:e0:c1:fc:24:8f:5a:ed:99:
         b2:a5:fc:3a:fa:a1:9f:63:8c:a5:48:53:90:a2:b6:08:97:26:
         91:d8:21:6d:64:6a:73:c9:82:7b:38:ec:5e:4d:65:ef:90:d4:
         9e:d0:6e:19:6e:4a:9e:5d:89:0c:e7:2f:23:3b:fe:0f:8e:c1:
         b0:81:99:44:c4:3c:6d:86:4c:f3:37:6d:52:87:c1:cb:e3:b1:
         25:28:cd:45:26:3c:6b:00:c6:5f:83:89:e1:00:23:92:24:e9:
         76:b0:0a:ea:36:7f:2f:a1:68:5a:e6:f4:68:c3:36:f2:8d:a5:
         bb:7c:57:fa:34:5e:c9:c1:47:61:cf:b9:7c:e8:20:4e:8a:0a:
         af:f1:37:89:d5:f6:4b:94:b3:6f:90:cd:18:8e:91:6f:d2:03:
         15:35:4d:22:74:52:c1:e2:77:51:b9:4d:0c:ba:86:44:ae:05:
         55:da:54:ae:08:16:90:d8:fc:fd:76:5a:07:da:71:10:83:18:
         45:41:b6:75:ec:e7:28:a0:c7:12:c3:c3:ee:0a:fd:5a:3d:c3:
         58:5a:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:54:25 2025 by rpki-client