Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa
File:                     4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa (raw, json)
Hash identifier:          lwGRbYLSk0Ua8u15K9yqjqlCZiMa69E9BAXwFT/XEdY=
Subject key identifier:   15:A2:0C:A4:AD:44:45:66:F5:57:E7:FF:AE:92:35:F1:4F:17:4B:0F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B79BCB2D74F22ECC39108C600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     7018
IP address blocks:        130.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b2:d7:4f:22:ec:c3:91:08:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=7687c8f9-ddd8-4c44-bc8c-a534ee1b66c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:33:87:e1:a5:a5:d6:ef:a8:3f:02:be:f2:
                    ac:bd:b7:bd:13:9c:dd:74:fe:83:6d:61:62:ab:72:
                    3a:54:0a:cc:5f:58:fc:01:60:1d:85:af:3a:a4:6f:
                    ee:e3:ac:ae:78:72:a4:b5:a2:d3:9a:f0:b1:e7:4e:
                    38:5a:65:c3:65:95:c6:b4:d4:a8:6d:29:a3:63:0e:
                    15:86:d5:a2:6b:ab:b6:51:41:95:11:42:4c:90:75:
                    d3:ce:15:9e:a7:67:80:c2:88:37:73:c4:73:f1:90:
                    8f:a1:88:d1:81:66:93:9b:fd:69:37:42:c9:d3:60:
                    f1:6b:fe:ce:39:57:ff:22:09:4b:86:7b:ce:9d:4f:
                    5f:e2:a1:a2:f0:b5:5f:16:59:9b:7e:f3:93:35:a5:
                    7c:25:90:69:05:47:61:43:85:b9:a2:8f:a2:6a:44:
                    63:fd:c9:b6:92:14:81:bb:29:92:c0:a0:9e:1d:92:
                    12:18:f2:86:98:24:87:d2:24:84:71:a4:8a:67:68:
                    42:7a:c3:d9:01:67:14:60:53:f6:b7:5d:ef:c3:c1:
                    41:a3:a1:66:29:b1:e7:cc:ac:27:db:b8:14:83:bd:
                    89:91:8e:2e:80:d1:38:da:7c:70:7c:2e:66:d1:b8:
                    a6:f5:08:52:3d:30:89:40:6e:58:0a:dc:c1:45:36:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A2:0C:A4:AD:44:45:66:F5:57:E7:FF:AE:92:35:F1:4F:17:4B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:e0:36:76:91:04:8f:d0:8f:fd:63:09:87:31:17:b3:c5:
         b2:12:34:e8:0b:38:fe:c1:1e:a2:bb:74:6a:da:59:d5:68:d8:
         dc:3e:0a:85:30:1a:7d:d9:90:dd:8f:76:9b:5a:68:39:55:90:
         b4:21:0a:c1:ad:ca:3a:51:2f:84:10:62:03:fd:f9:14:b9:85:
         f5:8b:46:9b:94:bb:2d:22:2b:f2:9f:a5:da:33:1f:d3:40:f7:
         fe:d1:d7:99:ee:b0:a4:07:09:09:9d:bc:af:a7:2c:19:d7:d0:
         d8:f3:39:ed:c0:35:42:e7:fe:66:5c:93:3a:a3:2d:be:ed:a1:
         f0:60:2d:e3:3b:2c:68:3e:b8:f4:de:08:c3:41:31:76:02:20:
         3e:c5:8d:8a:37:f9:f3:30:2c:eb:24:9f:9b:05:90:c7:4d:f1:
         2d:af:ed:ab:af:bd:0e:2c:96:ac:65:7b:61:8e:53:05:33:4a:
         4f:83:35:93:cd:b5:f1:85:e5:14:da:8e:f3:18:5c:3a:ad:e8:
         cc:29:d3:ce:11:45:dd:41:5b:48:33:c5:c6:60:4a:0b:2d:f4:
         89:13:6c:e1:9f:b1:db:07:b9:9f:03:56:da:35:d3:88:c8:e6:
         4e:4f:39:40:06:9c:e2:a5:b1:3d:54:59:0c:ff:0b:8b:c8:d8:
         9b:b8:e9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:45 2025 by rpki-client