Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45b7f547-53d2-3dae-9493-53c0fa777cee.roa
File:                     45b7f547-53d2-3dae-9493-53c0fa777cee.roa (raw, json)
Hash identifier:          LgZtDsv94MclI4TJ8ZCVn2DXDNBGXpLvHa0Ao5wgvOc=
Subject key identifier:   E2:23:3A:A9:CB:53:E0:D4:B6:A7:50:CA:F8:6F:40:CD:57:AB:E5:26
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB2F0CDA27A6630DC6080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45b7f547-53d2-3dae-9493-53c0fa777cee.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     7018
IP address blocks:        130.254.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b2:f0:cd:a2:7a:66:30:dc:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=731fce87-5d93-480d-84c8-0f42d1405194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:5c:a7:79:6e:6c:dd:dc:b2:dc:3a:27:a4:
                    62:8a:e7:ff:fd:a4:65:06:03:c7:2d:ba:eb:a5:59:
                    e6:c3:a8:a7:2f:de:04:be:ae:47:3b:e4:51:25:48:
                    6e:e4:b7:2a:a1:e6:06:c7:36:c6:0c:ce:5a:48:a4:
                    d0:28:3d:d4:87:41:53:35:73:d5:c4:fc:e3:1e:a8:
                    b4:b1:a9:93:ba:7c:df:34:92:37:48:2e:d2:c7:af:
                    2a:f0:26:67:b6:5b:e2:91:3d:c0:53:f0:13:fc:24:
                    0f:27:3b:fa:92:82:28:a3:de:97:0d:03:87:2e:ac:
                    32:c8:10:76:63:00:ee:fd:85:21:ea:fe:35:da:cb:
                    12:f5:4f:28:5d:01:d8:0d:3d:c8:34:a5:44:72:9d:
                    16:2d:cc:2b:19:ae:d6:9e:ab:b5:60:e1:85:3d:e5:
                    66:18:ab:5d:0f:82:28:4b:4f:93:35:d8:b1:c5:6f:
                    5e:94:e3:12:36:63:9e:1e:a7:35:c0:90:e8:3b:f0:
                    1e:f2:86:0b:94:d7:49:c5:af:9e:a4:fe:d7:45:f8:
                    83:25:54:b6:5b:d7:a4:6e:b7:b3:88:03:b2:e4:97:
                    77:f1:89:52:ee:ac:8f:19:c4:26:15:29:e5:82:4a:
                    39:d2:9a:6f:cd:c9:44:4b:dc:08:ce:7e:7d:4b:82:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:23:3A:A9:CB:53:E0:D4:B6:A7:50:CA:F8:6F:40:CD:57:AB:E5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45b7f547-53d2-3dae-9493-53c0fa777cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:55:45:f6:1c:bc:9e:94:a3:d5:e4:c6:bf:08:89:dc:f8:
         c1:7e:a6:35:a4:68:a5:87:f8:35:cf:7d:eb:e0:92:bb:cf:b7:
         91:1c:54:bc:1f:c3:30:16:43:e6:b5:c7:3d:ba:b2:97:fc:3c:
         36:ae:bf:22:72:1d:98:24:a3:c1:fb:7c:df:f9:42:d7:d5:6a:
         58:70:1b:b1:fd:87:a9:45:8e:71:dc:61:ca:2b:6a:8f:b1:39:
         cb:cd:ec:15:49:57:3c:69:78:be:f1:31:44:66:11:94:63:cc:
         e9:18:34:32:6d:9d:e5:da:f5:47:5a:e2:12:c8:c7:8c:87:45:
         46:c6:10:11:ef:7f:80:18:7b:e4:35:48:c7:40:e5:a8:c0:7c:
         3b:27:07:d9:ed:a0:54:89:76:24:00:61:b9:fb:16:d1:09:b8:
         91:96:d2:2b:1e:47:16:64:23:de:33:53:aa:1a:fd:3d:a1:81:
         39:a4:c4:e1:87:75:1c:cf:3c:0a:eb:5c:47:2a:61:f4:b9:86:
         5d:d0:38:f3:1a:b4:d1:f4:8c:69:0d:e0:45:12:4e:3f:12:c4:
         25:7f:61:2c:6f:36:cc:54:b5:f5:c5:5c:93:45:ee:12:28:a0:
         e9:06:7c:c4:72:f0:4b:4c:5e:29:f8:d1:ef:e5:55:30:8e:f6:
         4d:70:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:52:05 2025 by rpki-client