Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/458bed4f-88fc-360a-a3f1-0ac979147e02.roa
File:                     458bed4f-88fc-360a-a3f1-0ac979147e02.roa (raw, json)
Hash identifier:          ogF5OL5F6xu2QIzcp3D0rcdevrboa6EhLm7WRYdoOTE=
Subject key identifier:   24:B7:91:13:04:C3:F9:F3:BC:C7:B4:2F:D1:BF:FC:80:FC:D2:46:4F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF525E088B65A383827780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/458bed4f-88fc-360a-a3f1-0ac979147e02.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        130.254.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:52:5e:08:8b:65:a3:83:82:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=ce7dadcc-2ff9-44c0-96cd-8ff98055e7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:c5:3c:68:c1:0d:46:0d:f8:19:72:3f:9b:
                    43:b6:a2:58:2a:d7:50:9c:af:9c:ee:03:b9:92:4c:
                    e7:0b:88:54:b2:84:01:dd:c9:90:49:0e:03:d4:12:
                    7b:7b:19:17:29:c7:c5:32:0d:b7:70:00:02:98:46:
                    14:e1:2f:c5:ff:38:f1:c3:91:a6:0d:3f:c0:e9:e1:
                    ba:75:bf:5e:77:75:a6:d8:26:55:84:28:c2:b4:d6:
                    e2:d2:45:ba:e2:a7:9d:b4:19:3a:d7:5f:d2:02:9d:
                    a4:1e:26:d1:21:f7:8e:f1:6e:44:fb:85:e5:2f:79:
                    e4:c3:9e:0a:9f:e3:2a:c6:99:e0:da:c1:3d:11:b3:
                    e3:cd:61:a8:ca:92:15:84:1c:4d:dc:8c:72:82:51:
                    18:68:ed:93:f8:44:c0:a5:94:3b:32:04:98:59:54:
                    c2:82:58:17:e6:c8:8e:59:0e:17:51:72:86:a9:f0:
                    74:e7:0d:df:c2:f2:1b:e4:aa:71:a2:7d:fd:40:8a:
                    fd:84:34:89:85:03:d6:2a:57:a7:04:9f:0d:07:b1:
                    89:bc:c1:7e:61:c8:8c:9e:ff:a4:cc:c2:3f:e3:35:
                    15:79:96:29:90:ad:6b:f7:72:88:cd:ed:52:b1:19:
                    a6:78:6a:6a:31:bd:76:56:59:4f:1b:53:b3:04:85:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:91:13:04:C3:F9:F3:BC:C7:B4:2F:D1:BF:FC:80:FC:D2:46:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/458bed4f-88fc-360a-a3f1-0ac979147e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:a7:46:12:13:8a:ea:9c:1b:d4:75:02:fb:ea:47:55:ed:69:
         97:62:fa:8f:43:f0:b2:73:42:05:dd:66:0e:61:e8:62:0b:03:
         a7:17:76:97:39:6d:8f:8c:68:c4:3d:76:4f:63:0c:54:d8:6d:
         55:04:bf:b0:1c:b8:f7:74:db:b8:5c:70:01:0c:49:8b:75:49:
         93:9f:08:63:f5:35:6b:d3:44:5d:66:67:c8:80:f2:b5:3b:66:
         ea:3f:47:b4:ce:da:6c:35:a3:fe:e8:b2:a1:c5:59:35:4b:f1:
         4b:57:3d:06:7e:3e:f0:99:82:c6:73:a8:c1:54:de:80:3e:e6:
         bf:d1:94:44:7a:bf:ed:5b:43:35:2b:58:bd:1b:ac:b2:a1:ce:
         54:f6:ee:34:e6:39:bb:d7:96:7d:8b:ff:4f:6f:b2:53:91:2e:
         d9:76:5c:e1:7b:97:dc:47:a5:17:3f:51:d1:09:b6:cc:2e:d4:
         a3:d5:68:d8:51:d7:8f:ae:85:52:fc:17:0d:0d:af:d6:b9:97:
         bc:db:ae:d3:a8:64:c6:b1:14:f2:1f:3e:3e:67:65:df:a7:6a:
         5a:63:5f:75:e2:a7:c8:d7:de:10:24:91:e6:10:e4:68:4a:1d:
         d9:a5:03:f9:32:13:37:7e:cb:0d:27:f5:d8:d4:81:bf:f3:af:
         06:7e:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:06:15 2025 by rpki-client