Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa
File:                     8eab7860-30e1-3df5-9c83-1583684e864c.roa (raw, json)
Hash identifier:          8uBTCe+ztzo9ymfUCV/NkCeiKYyw80KnLXv2TjbaHIA=
Subject key identifier:   22:D0:E1:3A:1E:58:9D:2C:95:44:19:1A:ED:AC:56:C0:31:A8:7A:C1
Certificate issuer:       /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial:       010D0C9F432858497AD9B3502878105CC479575C
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     11094
IP address blocks:        130.219.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:b3:50:28:78:10:5c:c4:79:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=57d5f6cb-c49f-45ec-8eef-5e6414d68cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:d1:53:c5:76:f3:4e:90:73:f3:48:dd:b6:
                    7a:aa:86:14:1c:07:b5:87:71:0e:51:53:98:c3:55:
                    af:20:a3:3f:b6:47:a4:67:a4:bc:cb:55:3e:91:34:
                    6d:02:b0:4f:38:d8:24:50:f0:dd:35:5d:62:3f:7a:
                    3d:26:50:11:aa:1b:35:4a:5d:2a:59:9a:22:09:a7:
                    54:94:31:6d:42:9c:2d:d1:32:ef:99:60:17:c1:57:
                    0e:fe:4c:e9:01:36:8e:74:1f:38:24:39:72:85:47:
                    56:c4:c0:ba:ea:54:72:0a:09:df:44:0c:39:bc:0d:
                    eb:10:44:a0:44:74:aa:3e:95:0b:b5:53:e9:92:6c:
                    af:e1:e8:68:bb:94:38:28:e4:ab:3f:f0:99:41:70:
                    ce:ce:af:5c:1a:3c:31:e5:58:53:6b:23:d8:19:2d:
                    e5:d5:7c:a2:da:7e:be:79:77:50:b0:81:d8:e0:9e:
                    92:00:48:e2:2b:20:3b:a6:91:97:31:7a:5e:50:8f:
                    04:24:38:e0:41:11:36:e0:01:58:fb:6c:93:39:81:
                    63:59:0b:f1:55:3c:6e:d7:6f:8c:e2:13:61:86:84:
                    77:ca:e8:e0:b6:1b:95:e5:50:bf:7a:68:3a:a9:41:
                    8b:a1:86:48:59:01:9f:c5:2a:8f:cd:4b:59:88:2a:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D0:E1:3A:1E:58:9D:2C:95:44:19:1A:ED:AC:56:C0:31:A8:7A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl

            X509v3 Authority Key Identifier:
                keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:96:c9:72:a8:71:01:a3:67:00:26:1f:63:d8:7c:7f:05:e5:
         7b:80:2a:f7:f2:80:b2:86:9c:6b:41:f1:7b:04:50:32:9f:3d:
         b8:5a:06:b0:cf:2b:8b:0d:c5:87:2b:66:60:0b:cf:22:88:a3:
         22:53:1d:1a:48:a4:24:96:31:d0:26:4c:0a:58:2e:72:e0:3c:
         3a:6c:27:45:96:b6:da:ec:83:19:10:42:ee:91:0a:63:85:07:
         b9:c4:96:b4:4f:ba:ae:6d:bd:9b:d2:e9:8f:ea:fe:72:c9:99:
         8c:aa:76:77:e1:51:a5:5b:44:53:9a:42:ba:ec:6e:26:ad:f2:
         4c:14:db:af:55:2d:d7:64:78:af:5b:ee:18:0c:6c:19:96:97:
         58:bc:1a:e3:e2:1e:cf:e3:09:e0:9b:1f:ab:8d:59:8e:6e:d6:
         d4:31:c6:32:2e:ac:a0:a3:36:57:f5:91:4b:ed:b5:9c:6a:61:
         52:6a:e9:34:db:ad:2f:b0:9b:40:13:c4:5b:d2:b6:8b:d1:c7:
         4d:2e:50:4c:b4:a0:58:45:35:e1:72:f9:73:ab:50:07:25:f7:
         ff:05:f0:78:ff:54:51:ae:53:6a:a2:81:5a:e9:f7:d7:6a:87:
         e3:76:88:f2:4c:4e:5c:52:ed:48:63:a0:7b:3d:06:e9:af:6d:
         b2:d4:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:39:28 2025 by rpki-client