Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/91849a97-769a-34c2-b6d9-dac17fe9851f.roa
File:                     91849a97-769a-34c2-b6d9-dac17fe9851f.roa (raw, json)
Hash identifier:          EKaStJ6lTiaabJzAlxEU42lNkJnxTcClrsEyuFQuAN0=
Subject key identifier:   29:49:17:BE:3A:47:F6:DD:0F:3D:D2:A3:E2:6B:EB:92:2F:A8:BB:5A
Certificate issuer:       /CN=eecc445c-064d-41ee-91f1-3ef708241983
Certificate serial:       010D0C9F4328584ACE0BACFA33ED00A06F462C00
Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/91849a97-769a-34c2-b6d9-dac17fe9851f.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     394270
IP address blocks:        130.51.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:ac:fa:33:ed:00:a0:6f:46:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=6df303b2-e6f4-440c-a373-8514c6fbebda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:d5:cc:af:21:17:e7:6f:e6:61:f8:66:03:
                    e8:24:6e:72:7c:37:07:57:d5:dc:e9:6e:e5:41:4f:
                    9a:1e:f6:a6:7e:c2:78:58:01:23:8d:6a:db:fd:62:
                    66:1c:96:59:a7:fd:d6:d5:cd:bb:cb:af:e0:2f:e4:
                    8c:22:47:6e:01:28:0c:3d:e4:74:8f:d9:dc:84:c1:
                    48:ea:6b:90:99:12:49:a2:ef:6e:31:82:24:fd:47:
                    8c:64:11:41:51:81:36:34:5e:81:f1:09:ea:67:98:
                    46:0b:b2:45:49:9e:b8:c5:82:f7:22:8b:dc:39:1a:
                    c8:d6:11:a7:86:3b:97:bc:ee:ea:53:1e:36:5d:26:
                    6f:e0:71:ca:a1:66:25:5e:ed:92:74:80:37:4d:c1:
                    a1:e0:e3:ca:87:1f:61:e8:63:42:34:6a:cf:2b:f7:
                    b4:8d:5f:ba:3d:7b:2e:07:cc:94:da:3b:1b:e7:5c:
                    fd:f6:5d:32:3b:46:6c:ce:5c:1d:e7:7a:e1:98:1f:
                    69:0a:17:00:ee:52:23:bf:8b:e4:b5:79:f2:a3:c4:
                    cd:3d:d8:29:65:48:29:89:db:de:7a:1f:c1:66:c7:
                    be:69:3e:d2:ff:41:50:36:a8:a9:3d:f3:3a:d7:ed:
                    c3:b7:8f:72:1d:5c:7c:c6:86:c7:1e:55:62:41:c9:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:49:17:BE:3A:47:F6:DD:0F:3D:D2:A3:E2:6B:EB:92:2F:A8:BB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/91849a97-769a-34c2-b6d9-dac17fe9851f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl

            X509v3 Authority Key Identifier:
                keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e9:77:12:df:35:1a:bf:ac:6c:5f:c2:90:8a:42:29:2b:42:
         30:e6:3f:6f:b6:33:f3:27:f4:04:0b:de:7f:f2:64:8b:ad:e5:
         b4:3e:28:0c:c5:33:fc:b2:d4:d1:5e:58:cd:02:5f:14:c0:0a:
         12:84:47:21:ca:4d:af:02:2b:11:94:98:03:b5:37:b9:81:e4:
         42:37:ce:d8:c7:82:bf:af:45:63:f9:d8:53:67:a4:b9:93:f6:
         df:be:4d:e4:4d:2c:50:b2:c3:eb:80:15:a1:85:4d:b7:a8:d2:
         55:64:8d:a1:09:48:e5:21:5f:32:6d:bf:d6:1b:98:aa:08:d8:
         ba:9e:56:47:62:42:74:b0:0a:73:76:76:6a:42:ea:b6:98:21:
         0b:dd:81:d9:06:81:2f:1a:4f:ec:5a:30:fe:7c:d0:05:76:3e:
         c7:b2:b4:26:7e:b0:18:4c:94:c8:e4:bd:8c:f1:d5:a9:b8:ec:
         9d:06:0b:6a:32:e7:a6:75:35:64:91:61:e9:06:3e:a5:f2:5f:
         84:aa:95:17:98:91:b5:62:e6:d7:5b:6a:32:2e:2a:7c:f2:4c:
         a2:5a:6b:42:f1:8f:7b:e9:eb:b9:18:fc:43:d6:13:c0:c1:e3:
         20:0e:81:c1:4e:08:3c:84:f8:7b:34:cb:db:3b:39:a5:91:e6:
         e0:5b:ef:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6z6M+0AoG9GLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVjYzQ0NWMtMDY0ZC00MWVlLTkxZjEtM2VmNzA4MjQx
OTgzMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
NmRmMzAzYjItZTZmNC00NDBjLWEzNzMtODUxNGM2ZmJlYmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE/VzK8hF+dv5mH4ZgPoJG5yfDcHV9Xc6W7l
QU+aHvamfsJ4WAEjjWrb/WJmHJZZp/3W1c27y6/gL+SMIkduASgMPeR0j9nchMFI
6muQmRJJou9uMYIk/UeMZBFBUYE2NF6B8QnqZ5hGC7JFSZ64xYL3IovcORrI1hGn
hjuXvO7qUx42XSZv4HHKoWYlXu2SdIA3TcGh4OPKhx9h6GNCNGrPK/e0jV+6PXsu
B8yU2jsb51z99l0yO0Zszlwd53rhmB9pChcA7lIjv4vktXnyo8TNPdgpZUgpidve
eh/BZse+aT7S/0FQNqipPfM61+3Dt49yHVx8xobHHlViQck0UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClJF746R/bdDz3So+Jr65IvqLtaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNj
NDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3MDgyNDE5ODMvOTE4NDlhOTctNzY5YS0z
NGMyLWI2ZDktZGFjMTdmZTk4NTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWVjYzQ0NWMtMDY0ZC00MWVlLTkx
ZjEtM2VmNzA4MjQxOTgzL2VlY2M0NDVjLTA2NGQtNDFlZS05MWYxLTNlZjcwODI0
MTk4My5jcmwwHwYDVR0jBBgwFoAUzUCROQ67xHz8aYwLu+ubI2atMYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNjNDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3
MDgyNDE5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjN5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzpdxLfNRq/rGxfwpCKQikrQjDmP2+2M/Mn9AQL3n/yZIut5bQ+KAzF
M/yy1NFeWM0CXxTAChKERyHKTa8CKxGUmAO1N7mB5EI3ztjHgr+vRWP52FNnpLmT
9t++TeRNLFCyw+uAFaGFTbeo0lVkjaEJSOUhXzJtv9YbmKoI2LqeVkdiQnSwCnN2
dmpC6raYIQvdgdkGgS8aT+xaMP580AV2PseytCZ+sBhMlMjkvYzx1am47J0GC2oy
56Z1NWSRYekGPqXyX4SqlReYkbVi5tdbajIuKnzyTKJaa0Lxj3vp67kY/EPWE8DB
4yAOgcFOCDyE+Hs0y9s7OaWR5uBb77g=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:42:55 2025 by rpki-client