Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa
File:                     d42d81df-78cb-3705-9865-564dd4db794a.roa (raw, json)
Hash identifier:          w8P4xUZvCjRFE/4UJJDmhXY7oAKpBikFCfSoG21Pj4A=
Subject key identifier:   C7:0D:3E:CB:88:38:FF:11:41:7A:92:DD:92:66:B6:55:F2:E7:2C:CC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A495FD074664501EA334071C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa
Signing time:             Mon 23 Jun 2025 12:27:50 +0000
ROA not before:           Mon 23 Jun 2025 12:27:50 +0000
ROA not after:            Sun 21 Sep 2025 12:27:50 +0000
asID:                     20001
IP address blocks:        130.44.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:5f:d0:74:66:45:01:ea:33:40:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 12:27:50 2025 GMT
            Not After : Sep 21 12:27:50 2025 GMT
        Subject: CN=53fc90bd-e955-489b-b113-855c9ed0c6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:84:76:7b:0c:05:7e:ec:09:2c:58:1b:78:
                    fc:47:35:b7:55:79:75:61:59:22:64:2a:b9:07:5b:
                    cd:22:61:a3:65:c1:e3:0d:d1:7f:c8:95:75:f6:18:
                    99:58:8c:e0:d1:76:73:50:29:b3:e7:3f:3f:4d:86:
                    03:85:46:b9:78:5c:50:d1:bc:68:65:c4:1e:80:35:
                    05:ac:36:4f:fb:dd:d1:47:f8:f9:a6:a5:72:2c:61:
                    2b:63:f0:16:b8:3c:cf:5d:f5:6d:fb:ae:03:07:e0:
                    80:f4:9c:51:c5:cd:bd:c4:40:ab:22:e5:4b:c9:21:
                    6d:71:15:28:f1:e5:f4:1a:ca:07:0a:45:dc:5a:15:
                    4a:3e:34:07:87:68:df:f5:a2:47:e1:61:63:b4:d6:
                    69:7a:2c:ca:e4:f1:7e:a5:fb:71:be:48:73:4c:9c:
                    ff:ab:a3:c8:cf:80:25:a7:17:78:7a:25:51:53:b6:
                    14:c9:96:87:8c:98:a7:cd:78:13:46:73:5c:8e:2f:
                    a0:44:fb:a2:a5:dd:ea:15:2a:e8:72:63:f1:6d:a8:
                    00:28:1d:4c:cc:16:8e:8b:64:a0:38:d9:48:bb:ec:
                    d4:7e:b4:0e:eb:42:ef:75:47:53:9a:d3:84:48:62:
                    49:7d:99:54:47:5f:f6:bc:53:9b:e9:26:77:26:84:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0D:3E:CB:88:38:FF:11:41:7A:92:DD:92:66:B6:55:F2:E7:2C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d42d81df-78cb-3705-9865-564dd4db794a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.44.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:d7:60:14:73:58:98:33:ba:a0:8d:b0:a1:64:05:43:cb:
         84:62:02:f7:8f:8a:7d:2b:54:45:d2:97:12:9d:be:ff:1c:fc:
         95:28:06:1f:8d:e7:bd:bd:aa:59:d5:e5:da:4e:3b:77:31:e5:
         95:5d:a2:5f:f2:db:e2:30:44:40:b0:47:c4:c6:94:b4:0b:c4:
         5d:76:41:25:d5:b2:d6:e7:38:66:25:19:ad:82:fc:74:a4:8a:
         d3:07:e6:5a:15:4b:5e:c8:77:d2:e6:24:ed:19:ab:83:bc:07:
         38:99:39:f1:46:18:5d:64:f2:cb:c3:b8:ad:79:02:c0:f2:e1:
         a1:ee:be:75:08:e8:3f:fa:7b:0f:24:3e:09:4b:46:f2:8f:1d:
         27:3a:87:b5:ec:d1:af:c3:ce:be:64:33:b9:3e:b9:1d:55:e0:
         d2:a5:2f:57:ab:8c:94:6c:de:66:60:5f:9e:bf:e3:3e:38:02:
         cb:7a:ea:dd:12:3f:fd:c0:bf:98:85:1f:53:c8:c9:0e:4b:b4:
         56:a2:f0:50:07:27:37:72:d1:f4:25:b4:dd:80:59:11:db:a8:
         7c:21:41:41:f9:be:6a:e6:a7:96:91:01:07:e8:88:b1:3f:25:
         9a:05:83:39:60:ac:79:01:61:a8:04:32:86:70:ae:3f:9b:40:
         77:ac:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:12:52 2025 by rpki-client