Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e82ab7cd-f99f-34f0-8c17-ac6e4c2ee87e.roa
File:                     e82ab7cd-f99f-34f0-8c17-ac6e4c2ee87e.roa (raw, json)
Hash identifier:          wj6Xxj7HT3JScmucYetdhSybFFaTxmG6sIUm33fhnsw=
Subject key identifier:   D7:72:FE:57:43:EF:65:FE:E3:03:42:DC:13:20:F7:FB:D7:85:60:2F
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584AD9392BE5934FDEB5E3C5AD80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e82ab7cd-f99f-34f0-8c17-ac6e4c2ee87e.roa
Signing time:             Thu 14 Aug 2025 01:06:22 +0000
ROA not before:           Thu 14 Aug 2025 01:06:22 +0000
ROA not after:            Wed 12 Nov 2025 02:06:22 +0000
asID:                     834
IP address blocks:        130.254.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:39:2b:e5:93:4f:de:b5:e3:c5:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 14 01:06:22 2025 GMT
            Not After : Nov 12 02:06:22 2025 GMT
        Subject: CN=c9ac8a4c-a784-47ff-aa89-0ffe9ae864b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:12:30:05:3b:7d:11:1f:58:5b:b1:e1:7b:
                    2d:3a:b3:5e:9f:17:8d:4b:7d:73:7d:a6:c2:e4:a4:
                    d8:f1:3a:1c:3e:e4:ae:cf:87:6a:22:80:e8:77:8b:
                    24:46:04:92:bd:d4:0b:8e:23:dc:cd:e9:c6:40:43:
                    45:64:f6:bf:b6:21:fb:a8:30:41:dc:c3:59:2d:99:
                    bf:63:56:d5:fd:53:72:f9:77:30:a2:9e:b7:84:80:
                    a7:1c:fa:eb:45:6d:07:9b:2e:6d:88:ac:1f:b4:e2:
                    a6:7f:7e:d2:d5:33:1e:08:a0:75:ca:78:da:41:9e:
                    57:4b:e7:93:22:17:60:76:62:8b:b5:1b:c1:90:6b:
                    92:a7:ac:a0:80:dc:6d:59:2e:b7:7b:9c:d1:74:2c:
                    a9:b6:78:6d:97:ec:a4:46:52:08:b9:e8:cb:aa:7c:
                    80:c1:24:cb:36:c0:56:01:50:26:69:35:31:8b:78:
                    97:18:ad:04:4c:6a:cc:b7:87:f3:29:7d:01:04:d0:
                    f2:d6:d7:b4:fa:4e:d9:29:79:e7:81:3d:9e:0b:48:
                    93:e4:46:66:c0:71:75:95:ff:ec:3c:87:fa:c4:06:
                    6c:44:a7:92:57:58:9d:04:f1:69:11:99:50:bc:eb:
                    42:0f:21:91:e7:99:97:43:75:9b:14:08:5c:3c:bc:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:72:FE:57:43:EF:65:FE:E3:03:42:DC:13:20:F7:FB:D7:85:60:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e82ab7cd-f99f-34f0-8c17-ac6e4c2ee87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:66:d8:f6:8c:a6:2b:bc:d2:91:5e:22:d5:dd:c6:38:66:
         a8:ba:1c:7a:df:fc:31:ca:6f:05:3e:9f:8c:8a:63:53:56:15:
         ae:a6:4a:9f:45:cb:74:c2:46:02:7e:96:d8:6b:d9:14:e4:31:
         00:76:e9:c8:e8:2c:0a:ac:45:fb:a9:51:40:4a:89:a6:9e:23:
         bd:fa:a4:0a:3a:20:0a:80:b2:64:d1:be:9a:5b:a9:1c:ae:2e:
         fc:1f:27:a7:77:04:c3:d3:16:8e:14:12:58:1d:17:0b:54:6e:
         0e:22:ca:02:d0:c1:7b:37:cc:9c:b8:26:c6:09:5c:23:e6:19:
         d1:94:67:8e:7c:a9:6c:c3:cf:97:bc:76:e9:85:84:58:ca:9c:
         a2:20:d5:b9:5b:55:5b:f8:3a:b0:5f:73:04:e7:7c:a9:97:2e:
         d6:4f:55:da:99:a0:51:5a:59:c4:e8:c4:c5:88:95:86:ef:dc:
         2d:41:6c:f6:2c:6a:9e:8f:7c:43:8a:e3:ec:47:ce:60:12:83:
         39:63:80:08:68:fa:53:42:e2:c6:3a:db:55:10:30:5d:f3:5d:
         f1:0c:d5:44:aa:ba:4b:6f:0f:cf:ce:49:6e:35:ac:59:94:ac:
         bf:d4:d7:8f:f1:f3:b5:86:c8:94:7b:8d:98:28:3e:5a:09:fa:
         45:b8:80:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZOSvlk0/etePFrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDgxNDAxMDYyMloXDTI1MTExMjAyMDYyMlowLzEtMCsGA1UEAxMk
YzlhYzhhNGMtYTc4NC00N2ZmLWFhODktMGZmZTlhZTg2NGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29wSMAU7fREfWFux4XstOrNenxeNS31zfabC
5KTY8TocPuSuz4dqIoDod4skRgSSvdQLjiPczenGQENFZPa/tiH7qDBB3MNZLZm/
Y1bV/VNy+Xcwop63hICnHPrrRW0Hmy5tiKwftOKmf37S1TMeCKB1ynjaQZ5XS+eT
IhdgdmKLtRvBkGuSp6yggNxtWS63e5zRdCyptnhtl+ykRlIIuejLqnyAwSTLNsBW
AVAmaTUxi3iXGK0ETGrMt4fzKX0BBNDy1te0+k7ZKXnngT2eC0iT5EZmwHF1lf/s
PIf6xAZsRKeSV1idBPFpEZlQvOtCDyGR55mXQ3WbFAhcPLwmOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdy/ldD72X+4wNC3BMg9/vXhWAvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZTgyYWI3Y2QtZjk5Zi0z
NGYwLThjMTctYWM2ZTRjMmVlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgv4uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbPZtj2jKYrvNKRXiLV3cY4Zqi6HHrf/DHKbwU+n4yKY1NWFa6mSp9F
y3TCRgJ+lthr2RTkMQB26cjoLAqsRfupUUBKiaaeI736pAo6IAqAsmTRvppbqRyu
LvwfJ6d3BMPTFo4UElgdFwtUbg4iygLQwXs3zJy4JsYJXCPmGdGUZ458qWzDz5e8
dumFhFjKnKIg1blbVVv4OrBfcwTnfKmXLtZPVdqZoFFaWcToxMWIlYbv3C1BbPYs
ap6PfEOK4+xHzmASgzljgAho+lNC4sY621UQMF3zXfEM1USquktvD8/OSW41rFmU
rL/U14/x87WGyJR7jZgoPloJ+kW4gKY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:07:06 2025 by rpki-client