Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3ec3c551-9141-3764-ac13-7b6cef5c5499.roa
File:                     3ec3c551-9141-3764-ac13-7b6cef5c5499.roa (raw, json)
Hash identifier:          5gkPtrNYCP8U5LW3647y9TMxf4MZME5kBjLFqfaRciE=
Subject key identifier:   0C:84:BC:62:B3:13:B2:A3:98:2B:C8:CC:3D:E7:D9:BE:16:CB:98:63
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A495FA9DCA15D0BDFFC0BF900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3ec3c551-9141-3764-ac13-7b6cef5c5499.roa
Signing time:             Mon 23 Jun 2025 12:27:31 +0000
ROA not before:           Mon 23 Jun 2025 12:27:31 +0000
ROA not after:            Sun 21 Sep 2025 12:27:31 +0000
asID:                     20001
IP address blocks:        130.254.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:5f:a9:dc:a1:5d:0b:df:fc:0b:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:27:31 2025 GMT
            Not After : Sep 21 12:27:31 2025 GMT
        Subject: CN=353ef78c-e930-4985-8822-09a1aaf9f4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:5f:e1:00:49:e0:75:3c:e4:13:91:e8:80:
                    0d:57:e7:8e:57:5b:28:b4:a7:8d:5a:ac:cc:fa:08:
                    66:96:6e:72:36:65:52:41:3d:56:00:c6:21:e4:3e:
                    5b:be:67:96:56:36:28:1a:dc:e0:c8:7a:9f:99:7b:
                    eb:e6:57:8b:8f:51:ee:5f:57:98:14:3b:98:62:17:
                    56:8e:2d:e7:9b:e0:4c:6d:2e:80:a6:07:dc:62:46:
                    a6:d3:32:40:4c:b4:e5:c8:73:c0:f7:fc:4c:e9:c2:
                    35:2d:f2:1a:e0:a1:d2:07:3a:3b:06:56:7d:bd:96:
                    3f:0f:91:e9:51:5a:0a:bc:f3:ec:4b:30:73:26:fb:
                    c9:81:16:a0:43:d4:b2:d3:14:ba:72:e5:2f:88:36:
                    b7:e4:ba:7a:a3:e6:df:1c:c9:b6:1f:bd:a9:de:fb:
                    d8:30:b6:f5:90:49:b7:4f:30:48:f8:53:c2:fa:76:
                    87:30:b1:6e:bc:e7:20:17:f8:7f:4c:aa:f2:6e:7f:
                    43:f9:94:fe:2d:c0:5c:04:8b:11:31:83:a2:d8:c6:
                    b0:c8:33:7c:61:b6:2d:92:76:28:40:ec:2e:a9:83:
                    44:81:0c:45:4c:00:63:d8:4a:59:5d:1e:3a:e5:92:
                    fc:99:64:98:44:09:f1:d7:47:9d:cf:49:f2:2d:43:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:BC:62:B3:13:B2:A3:98:2B:C8:CC:3D:E7:D9:BE:16:CB:98:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3ec3c551-9141-3764-ac13-7b6cef5c5499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:da:f3:eb:8b:4f:67:cc:f7:e3:6a:2e:d3:e9:63:2d:b2:e8:
         29:78:49:7b:55:55:a8:1d:7f:dc:46:1f:4d:98:46:bc:d2:35:
         d1:09:71:3e:2e:41:93:18:2d:8e:bf:06:fa:97:68:ef:6c:26:
         5a:5c:fd:07:30:9f:e9:9b:c6:e4:cc:c2:8a:16:c2:88:69:d8:
         87:61:02:91:36:c9:33:fe:6c:eb:21:85:9c:e2:29:28:9a:60:
         6a:7b:ad:d1:3b:ba:86:d2:6f:3b:35:5b:47:11:6d:9f:35:46:
         60:42:20:6f:28:4d:97:c2:2b:d8:fa:ec:15:43:e4:0c:23:9c:
         da:db:b5:9e:8c:0b:45:98:1d:ba:7c:f6:f0:17:a4:ff:9f:7c:
         41:1a:92:22:b4:40:cc:24:79:35:4c:c3:3d:f6:29:20:94:d9:
         ea:68:56:fc:85:4d:78:d2:08:b0:44:5d:b9:eb:49:0a:00:a7:
         20:9b:15:59:05:0d:74:9b:10:37:4b:c1:a9:36:dc:46:3f:74:
         07:53:ce:ba:a1:42:bc:f5:37:38:4c:8b:c1:ba:f8:b7:cf:ea:
         f7:c9:01:68:53:e2:ca:5c:0f:14:76:29:e3:87:70:aa:88:ae:
         7a:0d:a1:19:2b:55:78:1e:f1:bb:a7:c3:3a:4c:f8:7a:c1:46:
         dd:dc:50:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJX6ncoV0L3/wL+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDYyMzEyMjczMVoXDTI1MDkyMTEyMjczMVowLzEtMCsGA1UEAxMk
MzUzZWY3OGMtZTkzMC00OTg1LTg4MjItMDlhMWFhZjlmNGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5lf4QBJ4HU85BOR6IANV+eOV1sotKeNWqzM
+ghmlm5yNmVSQT1WAMYh5D5bvmeWVjYoGtzgyHqfmXvr5leLj1HuX1eYFDuYYhdW
ji3nm+BMbS6ApgfcYkam0zJATLTlyHPA9/xM6cI1LfIa4KHSBzo7BlZ9vZY/D5Hp
UVoKvPPsSzBzJvvJgRagQ9Sy0xS6cuUviDa35Lp6o+bfHMm2H72p3vvYMLb1kEm3
TzBI+FPC+naHMLFuvOcgF/h/TKrybn9D+ZT+LcBcBIsRMYOi2MawyDN8YbYtknYo
QOwuqYNEgQxFTABj2EpZXR465ZL8mWSYRAnx10edz0nyLUNbXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyEvGKzE7KjmCvIzD3n2b4Wy5hjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2VjM2M1NTEtOTE0MS0z
NzY0LWFjMTMtN2I2Y2VmNWM1NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ3a8+uLT2fM9+NqLtPpYy2y6Cl4SXtVVagdf9xGH02YRrzSNdEJcT4u
QZMYLY6/BvqXaO9sJlpc/Qcwn+mbxuTMwooWwohp2IdhApE2yTP+bOshhZziKSia
YGp7rdE7uobSbzs1W0cRbZ81RmBCIG8oTZfCK9j67BVD5AwjnNrbtZ6MC0WYHbp8
9vAXpP+ffEEakiK0QMwkeTVMwz32KSCU2epoVvyFTXjSCLBEXbnrSQoApyCbFVkF
DXSbEDdLwak23EY/dAdTzrqhQrz1NzhMi8G6+LfP6vfJAWhT4spcDxR2KeOHcKqI
rnoNoRkrVXge8bunwzpM+HrBRt3cUII=
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:39:50 2025 by rpki-client