Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa
File:                     4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa (raw, json)
Hash identifier:          OmQxUkktbfFcfz1KeCUZcjGfOApvKHsqUSSzfZTlX6M=
Subject key identifier:   F7:FB:03:0F:0A:3E:43:A2:97:0C:75:FB:4E:BE:63:28:82:31:DD:04
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B9A9FCEA8F04EBB959DAD180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        130.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a9:fc:ea:8f:04:eb:b9:59:da:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=5bb3b995-ec6c-4478-8677-285ea5a1b393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:de:27:75:83:c7:d5:b4:f7:e3:7f:45:8b:
                    75:7b:4b:6c:d0:b7:6d:b5:eb:b5:21:84:63:5f:fb:
                    b1:d3:19:e1:c6:11:f5:6a:6d:99:a8:47:66:96:21:
                    d1:ff:e3:14:9c:0a:56:2d:51:a0:6a:14:d9:ee:fd:
                    e5:65:f7:bd:27:ee:02:f1:97:d2:3b:3a:1e:2a:af:
                    43:57:0d:d2:f5:4e:3f:f2:ff:ca:5b:a9:a8:01:28:
                    e7:16:94:93:92:97:45:35:a0:0f:7d:a3:28:62:03:
                    83:0b:d0:af:f4:5b:59:60:c2:7c:8e:14:35:64:df:
                    c3:ac:eb:f7:59:a6:ed:1e:6f:b9:99:2f:ce:cd:82:
                    4c:a0:a6:6d:a6:10:95:97:3f:be:b8:d2:31:d7:2a:
                    e2:29:44:d0:a7:ec:35:9b:07:09:a6:d6:36:ea:59:
                    37:c3:51:24:14:b1:83:48:71:a6:c9:78:24:a1:40:
                    1f:d4:bc:26:d3:3c:b7:7f:68:89:3c:d1:fd:be:0c:
                    8e:cc:92:c3:68:c6:60:a1:a8:c4:da:39:23:fb:9a:
                    48:3d:27:90:70:bf:c1:b5:f3:9f:9f:25:47:11:17:
                    bf:58:14:7a:cb:1b:c5:7c:1b:0f:73:ae:54:77:f5:
                    b8:24:ef:e6:dd:17:47:a7:a1:7a:d5:30:64:dc:9b:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FB:03:0F:0A:3E:43:A2:97:0C:75:FB:4E:BE:63:28:82:31:DD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b70d72f-2d45-3ff1-8d2c-ee732c863c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:8e:e5:22:c6:f8:31:e3:9e:fd:8e:37:0c:a1:c1:9c:ca:
         24:d7:33:4c:4b:66:50:1c:a9:ea:b4:2b:72:ba:15:06:e9:0d:
         b7:b8:ef:22:6e:8c:fc:c9:ac:64:48:54:b6:8c:9e:30:d0:29:
         ec:bc:ba:69:c0:89:eb:39:e4:96:9f:af:5b:b0:f7:60:c5:5b:
         53:a3:0f:24:3b:e7:2c:a5:49:52:b0:31:4e:8e:f3:3c:a5:b3:
         eb:82:03:3a:b2:46:f6:e9:3c:c1:01:5e:84:f0:9b:a3:11:81:
         74:3d:81:b3:dd:9a:c3:7c:5e:94:2c:f1:32:86:4a:a6:08:fa:
         a0:4c:82:87:1a:ae:2d:0b:ed:d4:d2:b0:7c:cb:a1:04:15:d4:
         7d:3a:8a:18:be:2e:a7:05:25:d9:67:5c:fe:ab:99:72:13:1a:
         95:5b:3e:be:5c:e4:a9:d6:f8:aa:40:30:9c:f5:45:3b:72:57:
         2f:9c:b9:b3:5a:18:ac:00:33:07:9e:3c:3f:be:ee:15:42:71:
         d7:76:fb:cb:67:95:b6:19:90:03:1e:f2:6b:15:94:3d:b9:93:
         21:4a:cf:ee:9f:e7:2f:3e:ed:69:2e:44:c1:12:4c:66:f2:32:
         d1:e3:cd:38:5c:85:b5:f2:f9:75:95:3c:33:50:6c:86:69:e9:
         51:ed:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:03:50 2025 by rpki-client