Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45b7f547-53d2-3dae-9493-53c0fa777cee.roa
File:                     45b7f547-53d2-3dae-9493-53c0fa777cee.roa (raw, json)
Hash identifier:          VO7tzZyReiqlrVmwf0BSdAoe5fMurwsizpDuLP+u2qs=
Subject key identifier:   BF:9D:1F:25:76:A3:91:73:34:DA:E6:6E:EF:99:B6:6D:28:4D:84:76
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B9A9FCFAD7824937A4ED4800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45b7f547-53d2-3dae-9493-53c0fa777cee.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        130.254.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fc:fa:d7:82:49:37:a4:ed:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=cb25a884-f711-4114-afae-243ddc74c91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:a2:6f:ff:c0:8d:d3:ae:15:53:34:df:34:
                    de:15:40:26:70:de:a0:61:ef:5d:8c:3c:30:d7:a0:
                    b2:ed:44:b6:83:93:c9:3e:ef:31:2e:90:50:95:59:
                    16:4e:ab:17:b5:3d:ff:d8:a1:af:ca:f2:3b:28:21:
                    3a:f5:0b:55:fe:cb:d8:b0:83:7e:1b:f0:c2:b2:ab:
                    78:18:ff:0c:28:0c:58:9c:0b:ad:11:b7:5f:6a:ee:
                    cd:1b:3a:bf:2b:bd:e2:56:9f:c9:78:1b:7d:38:4b:
                    27:d1:b5:1c:9a:4f:f5:8e:6f:52:32:1d:29:ae:bc:
                    63:c6:6c:ad:d3:2c:f6:3e:37:38:10:45:d4:c6:a5:
                    5f:6a:cd:ed:6f:db:45:4e:b6:17:04:b9:f4:71:c0:
                    5a:e1:a4:b6:40:91:0e:f4:c9:94:c8:2d:14:0f:f8:
                    3c:aa:e5:ba:f5:70:a8:58:1c:44:9b:17:b1:06:a4:
                    50:70:cb:ef:45:a8:64:36:df:02:4a:1a:39:09:2e:
                    94:9d:31:0e:dd:81:a2:8d:4e:16:a2:38:44:44:92:
                    47:8e:fa:5c:f8:e8:02:c2:a5:30:1f:18:6c:0f:d2:
                    38:27:41:79:7a:d4:1d:c6:8f:84:00:f7:ea:f4:6a:
                    76:28:8a:f3:cb:da:96:e9:8c:ba:0b:f9:50:3e:d8:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:1F:25:76:A3:91:73:34:DA:E6:6E:EF:99:B6:6D:28:4D:84:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45b7f547-53d2-3dae-9493-53c0fa777cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:4a:d0:db:2f:9c:7a:49:f6:b3:c7:99:67:bd:a1:a1:2e:54:
         e2:f2:72:2a:ba:f3:39:e7:57:97:0d:06:06:d1:bf:03:a3:38:
         d6:24:dd:42:ee:56:ec:13:b9:a4:a5:8e:99:83:6f:0a:95:c3:
         a4:19:48:44:73:92:a8:01:ba:55:10:b0:8f:0d:8c:77:0b:b1:
         05:75:38:c9:28:ec:0d:fe:93:20:96:81:9d:27:f8:04:42:b5:
         80:cb:5e:c6:75:3f:1d:07:f8:d9:50:2c:2f:38:19:e1:a7:de:
         56:89:1d:54:04:1e:87:78:a4:78:56:8a:a8:4d:88:79:9b:1c:
         28:c1:fd:92:39:b9:58:a3:bd:37:bb:39:a6:74:99:de:24:af:
         61:40:fa:0c:6c:86:85:79:ff:59:73:42:9a:19:fb:5c:33:7f:
         4d:1f:f8:ec:01:27:ff:dc:b9:8a:1e:87:80:79:4c:78:4b:44:
         cf:5c:38:ad:12:41:0f:c0:2b:a1:d5:b8:e1:b4:ac:b2:f3:5f:
         20:82:f0:a3:e0:4f:5d:b0:0d:82:1e:a8:27:85:d7:32:b0:87:
         c0:38:d1:8c:49:60:63:31:47:79:f1:eb:76:2e:de:0e:96:7d:
         90:b5:da:14:c7:44:2a:02:fa:21:da:43:35:11:e7:0d:d5:69:
         34:39:28:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfz614JJN6TtSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
Y2IyNWE4ODQtZjcxMS00MTE0LWFmYWUtMjQzZGRjNzRjOTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiauib//AjdOuFVM03zTeFUAmcN6gYe9djDww
16Cy7US2g5PJPu8xLpBQlVkWTqsXtT3/2KGvyvI7KCE69QtV/svYsIN+G/DCsqt4
GP8MKAxYnAutEbdfau7NGzq/K73iVp/JeBt9OEsn0bUcmk/1jm9SMh0prrxjxmyt
0yz2Pjc4EEXUxqVfas3tb9tFTrYXBLn0ccBa4aS2QJEO9MmUyC0UD/g8quW69XCo
WBxEmxexBqRQcMvvRahkNt8CSho5CS6UnTEO3YGijU4WojhERJJHjvpc+OgCwqUw
HxhsD9I4J0F5etQdxo+EAPfq9Gp2KIrzy9qW6Yy6C/lQPtiKBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+dHyV2o5FzNNrmbu+Ztm0oTYR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDViN2Y1NDctNTNkMi0z
ZGFlLTk0OTMtNTNjMGZhNzc3Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv58MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9K0NsvnHpJ9rPHmWe9oaEuVOLyciq68znnV5cNBgbRvwOjONYk3ULu
VuwTuaSljpmDbwqVw6QZSERzkqgBulUQsI8NjHcLsQV1OMko7A3+kyCWgZ0n+ARC
tYDLXsZ1Px0H+NlQLC84GeGn3laJHVQEHod4pHhWiqhNiHmbHCjB/ZI5uVijvTe7
OaZ0md4kr2FA+gxshoV5/1lzQpoZ+1wzf00f+OwBJ//cuYoeh4B5THhLRM9cOK0S
QQ/AK6HVuOG0rLLzXyCC8KPgT12wDYIeqCeF1zKwh8A40YxJYGMxR3nx63Yu3g6W
fZC12hTHRCoC+iHaQzUR5w3VaTQ5KNI=
-----END CERTIFICATE-----
Generated at Mon May 12 04:40:02 2025 by rpki-client