Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
File:                     b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa (raw, json)
Hash identifier:          p9c7h57MO8gkjnw0UWLMDddfm+mGGHbdHBc0ZsDMIBY=
Subject key identifier:   DB:83:CC:F2:BA:93:34:AA:F2:1C:75:2F:71:0D:07:00:18:8E:5D:E4
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584B0746C082635854262E1C1080
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        204.8.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c0:82:63:58:54:26:2e:1c:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=e1376485-4383-4026-b70b-68b3987ce754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:49:6d:08:52:53:a1:a4:d4:42:8f:06:ad:
                    f1:6f:f6:ce:18:12:91:0d:0a:53:7f:d2:f0:bf:62:
                    15:39:4b:2c:2b:64:0a:c7:f5:27:e2:a3:00:32:d0:
                    69:91:7d:c5:f2:68:78:73:92:7b:38:e9:ff:f6:2c:
                    b4:8b:b1:bc:51:cd:70:86:46:4a:35:5d:07:f4:4d:
                    b7:3d:d0:67:de:18:7f:be:bb:14:6e:dc:6b:f3:eb:
                    c5:78:25:d1:92:44:2a:a4:c4:81:a4:55:74:d2:f5:
                    3b:7a:de:12:72:b9:9b:c7:fc:2a:05:60:06:4b:37:
                    97:24:21:3e:11:bd:fe:74:5d:79:e7:0c:27:70:bc:
                    b1:ce:be:56:1b:c7:33:57:49:7f:28:59:10:d4:99:
                    ff:ba:a1:47:00:00:a8:e0:1d:38:d0:91:d6:9c:35:
                    25:b8:3b:29:2d:c0:97:8d:3c:59:82:37:aa:91:81:
                    d3:0f:2a:77:8f:56:7b:c8:86:89:87:57:e0:c0:8c:
                    6d:b9:ad:d4:8c:f9:e3:58:72:c0:79:28:85:15:9a:
                    7b:81:8e:62:e3:2b:9f:52:51:f9:63:8f:55:d4:80:
                    55:b0:ae:4f:c2:6c:f2:d9:ee:a8:8b:ac:eb:ef:f8:
                    2e:e9:72:e5:a7:eb:ce:1a:e4:2a:d0:1b:a4:80:62:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:CC:F2:BA:93:34:AA:F2:1C:75:2F:71:0D:07:00:18:8E:5D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b3b4ef0e-57a7-35df-83c3-ca728b7c007e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:c3:a5:16:1c:48:0a:d6:53:93:74:42:fe:1d:71:46:1e:
         99:3e:b2:ff:b2:a2:93:0b:55:2d:04:6a:90:ed:47:17:69:9d:
         5c:f7:32:8d:24:48:25:ac:48:2e:86:d2:f7:f9:d6:72:b8:45:
         6b:7d:30:de:b2:76:47:0c:65:c5:80:bf:bf:ba:1d:0c:80:b3:
         d8:ef:5b:23:f0:ae:77:04:2f:3b:6a:78:36:27:30:f6:6b:6e:
         7b:78:cc:7f:8d:cb:f7:ff:e1:b6:69:4a:e6:37:17:aa:f8:e9:
         f8:5f:67:76:7a:af:64:1a:f4:b5:cb:e2:97:5b:6f:06:ea:19:
         a7:e9:4f:ae:19:e3:24:ab:13:c0:2d:a7:94:f6:1a:33:39:a5:
         63:10:69:30:8d:b3:ca:96:4d:91:a5:8f:ad:63:4a:45:81:f6:
         90:88:b2:9f:fe:f5:ae:1a:d6:ee:81:cd:b3:ec:23:d2:50:e0:
         e1:fc:9e:ad:86:56:68:43:33:d5:53:78:14:ef:f7:0b:c5:bf:
         78:c4:ae:53:78:b5:60:cc:bc:8c:27:f0:b9:14:88:d9:9b:4e:
         36:2c:8d:e4:90:e4:59:36:35:15:9a:2f:a9:59:1b:65:c1:09:
         bf:69:c6:44:93:94:ae:4c:d1:70:66:14:8a:e3:23:d7:b5:31:
         cd:be:15:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsCCY1hUJi4cEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj
ZGExMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
ZTEzNzY0ODUtNDM4My00MDI2LWI3MGItNjhiMzk4N2NlNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutNJbQhSU6Gk1EKPBq3xb/bOGBKRDQpTf9Lw
v2IVOUssK2QKx/Un4qMAMtBpkX3F8mh4c5J7OOn/9iy0i7G8Uc1whkZKNV0H9E23
PdBn3hh/vrsUbtxr8+vFeCXRkkQqpMSBpFV00vU7et4Scrmbx/wqBWAGSzeXJCE+
Eb3+dF155wwncLyxzr5WG8czV0l/KFkQ1Jn/uqFHAACo4B040JHWnDUluDspLcCX
jTxZgjeqkYHTDyp3j1Z7yIaJh1fgwIxtua3UjPnjWHLAeSiFFZp7gY5i4yufUlH5
Y49V1IBVsK5Pwmzy2e6oi6zr7/gu6XLlp+vOGuQq0BukgGIgkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuDzPK6kzSq8hx1L3ENBwAYjl3kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm
Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvYjNiNGVmMGUtNTdhNy0z
NWRmLTgzYzMtY2E3MjhiN2MwMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw
YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw
Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy
YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACV9w6UWHEgK1lOTdEL+HXFGHpk+sv+yopMLVS0EapDtRxdpnVz3Mo0k
SCWsSC6G0vf51nK4RWt9MN6ydkcMZcWAv7+6HQyAs9jvWyPwrncELztqeDYnMPZr
bnt4zH+Ny/f/4bZpSuY3F6r46fhfZ3Z6r2Qa9LXL4pdbbwbqGafpT64Z4ySrE8At
p5T2GjM5pWMQaTCNs8qWTZGlj61jSkWB9pCIsp/+9a4a1u6BzbPsI9JQ4OH8nq2G
VmhDM9VTeBTv9wvFv3jErlN4tWDMvIwn8LkUiNmbTjYsjeSQ5Fk2NRWaL6lZG2XB
Cb9pxkSTlK5M0XBmFIrjI9e1Mc2+FT4=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:08 2025 by rpki-client