Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71bb4f1e-9a5c-334c-a418-7af574c332aa.roa
File:                     71bb4f1e-9a5c-334c-a418-7af574c332aa.roa (raw, json)
Hash identifier:          DaP1hN4MOIdR3shz24lmiJeLXmlGraVA9N18zBbk1Ig=
Subject key identifier:   54:EC:F4:82:6E:F5:28:C0:1B:DD:29:64:FC:CF:39:E9:D3:36:29:0F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF523E0A31D9F259A921C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71bb4f1e-9a5c-334c-a418-7af574c332aa.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     7018
IP address blocks:        130.254.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:52:3e:0a:31:d9:f2:59:a9:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=c5c3b8d6-63d7-4d78-a6e1-88bc4a5fb73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:b6:17:6d:3c:24:9b:5c:43:07:a6:68:4c:
                    15:18:21:32:26:80:d2:b2:2e:47:a5:ac:18:e5:f1:
                    ee:e5:21:01:18:e2:31:cc:b0:bf:96:66:a5:82:4a:
                    d8:be:a6:80:e4:22:6d:ab:98:32:d3:27:d7:21:22:
                    1e:17:d8:b5:de:37:f9:d6:79:54:6e:ea:64:e3:50:
                    7d:ef:7d:af:83:9b:fb:61:44:64:33:e7:3e:4b:df:
                    e0:3f:ae:36:df:e3:ca:95:55:47:9c:e2:24:c3:9f:
                    54:27:db:bc:81:17:b2:07:09:a0:3c:3f:43:dc:75:
                    20:fb:12:bb:33:19:0c:57:d3:41:30:b2:41:40:24:
                    65:8b:81:01:4c:b2:79:ef:6d:72:8c:3c:3a:cb:1f:
                    50:b0:04:1f:18:1b:cf:ad:c7:9a:e5:55:95:27:79:
                    09:89:bc:e4:19:20:1a:26:27:d4:c5:29:ef:98:1e:
                    5b:75:f2:74:64:4a:75:0d:45:b8:cc:51:d1:07:b1:
                    5d:26:f3:f5:a1:f1:c2:2d:cb:fc:17:8b:9b:95:98:
                    f9:eb:05:99:1b:71:94:8a:93:59:f4:e0:18:87:9e:
                    0f:c6:d7:4f:b7:a6:7e:67:ea:fe:4d:49:02:32:da:
                    9d:88:74:5f:e8:f2:d9:d2:38:c0:aa:0b:87:7c:a9:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EC:F4:82:6E:F5:28:C0:1B:DD:29:64:FC:CF:39:E9:D3:36:29:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71bb4f1e-9a5c-334c-a418-7af574c332aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:1a:8f:d7:86:2f:fa:53:c4:47:27:b4:b4:b1:53:f2:35:
         5d:d1:19:c2:97:1d:ac:1d:b0:fd:79:e1:21:07:8d:95:08:f6:
         2f:8f:a7:52:15:f7:30:c5:5a:d8:f8:75:1a:c2:59:f5:ec:65:
         9f:97:3f:fe:fc:8b:f5:b0:8a:71:fa:67:53:e9:40:80:24:37:
         25:cc:d5:63:00:83:0c:80:f0:89:68:7e:2f:ce:30:61:75:3a:
         f5:81:8a:c9:07:b6:53:63:b7:30:37:28:7c:25:8c:dd:bc:e7:
         cc:11:53:ea:12:b8:2b:8c:5d:94:78:52:0e:43:81:a5:6d:94:
         fd:85:1a:64:12:a1:a2:5c:bd:36:ce:59:41:92:17:f6:39:91:
         c2:1e:e1:fc:66:a9:5a:bd:bc:24:cb:35:34:f4:c8:89:3b:0f:
         d8:da:58:00:e8:38:1f:80:35:87:ba:37:cb:d6:a5:2b:b9:aa:
         a1:67:ff:9f:7d:b2:07:15:80:6e:c2:ae:f0:d9:4c:6c:c2:7c:
         11:fb:ca:9b:b9:4d:98:d4:10:ab:c6:03:5c:5c:6a:3f:a3:f6:
         c9:29:c4:a6:02:35:13:3b:11:a5:ac:7b:3f:47:5f:c5:4a:94:
         b4:ed:9e:1a:51:9e:47:95:01:2b:89:63:ab:cb:75:44:06:48:
         b2:1f:40:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231I+CjHZ8lmpIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
YzVjM2I4ZDYtNjNkNy00ZDc4LWE2ZTEtODhiYzRhNWZiNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAG2F208JJtcQwemaEwVGCEyJoDSsi5HpawY
5fHu5SEBGOIxzLC/lmalgkrYvqaA5CJtq5gy0yfXISIeF9i13jf51nlUbupk41B9
732vg5v7YURkM+c+S9/gP6423+PKlVVHnOIkw59UJ9u8gReyBwmgPD9D3HUg+xK7
MxkMV9NBMLJBQCRli4EBTLJ5721yjDw6yx9QsAQfGBvPrcea5VWVJ3kJibzkGSAa
JifUxSnvmB5bdfJ0ZEp1DUW4zFHRB7FdJvP1ofHCLcv8F4ublZj56wWZG3GUipNZ
9OAYh54PxtdPt6Z+Z+r+TUkCMtqdiHRf6PLZ0jjAqguHfKl/qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTs9IJu9SjAG90pZPzPOenTNikPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzFiYjRmMWUtOWE1Yy0z
MzRjLWE0MTgtN2FmNTc0YzMzMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdLGo/Xhi/6U8RHJ7S0sVPyNV3RGcKXHawdsP154SEHjZUI9i+Pp1IV
9zDFWtj4dRrCWfXsZZ+XP/78i/WwinH6Z1PpQIAkNyXM1WMAgwyA8Ilofi/OMGF1
OvWBiskHtlNjtzA3KHwljN2858wRU+oSuCuMXZR4Ug5DgaVtlP2FGmQSoaJcvTbO
WUGSF/Y5kcIe4fxmqVq9vCTLNTT0yIk7D9jaWADoOB+ANYe6N8vWpSu5qqFn/599
sgcVgG7CrvDZTGzCfBH7ypu5TZjUEKvGA1xcaj+j9skpxKYCNRM7EaWsez9HX8VK
lLTtnhpRnkeVASuJY6vLdUQGSLIfQI8=
-----END CERTIFICATE-----
Generated at Sun May 11 15:26:33 2025 by rpki-client