Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa
File:                     ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa (raw, json)
Hash identifier:          qBN45jie1o1sJIWEBo99Jld9gQgpG74D5AG65KFS47M=
Subject key identifier:   DB:77:1C:ED:B2:43:B6:20:9F:77:D5:9E:45:1D:B5:D7:07:7A:70:2D
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584B0746C09809FEBE3047491EC0
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        204.8.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c0:98:09:fe:be:30:47:49:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=20d6eac8-a5d7-4280-883f-ee4c3dbf2f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:02:66:86:a5:86:19:da:aa:24:de:80:13:e7:
                    e3:f6:f7:37:d3:b7:62:37:8c:3c:9e:a5:42:2d:23:
                    5b:a1:6d:59:22:1c:d9:8e:a6:41:eb:d7:58:c2:58:
                    c5:87:9c:a2:0b:bd:a9:ea:4d:d8:77:4d:cc:54:9e:
                    c0:57:b9:22:60:1b:a8:8d:87:88:3d:9b:4a:3b:87:
                    03:12:a7:02:a8:64:d4:8b:20:1f:89:d2:76:ca:34:
                    df:fe:54:f5:ee:9d:be:4e:02:fc:3a:64:ff:4f:5d:
                    19:53:5f:a8:88:d3:96:3e:64:98:a2:40:96:ca:d2:
                    77:63:67:3a:9d:f4:34:2f:28:81:bb:00:6b:23:b2:
                    ab:97:e2:f3:a2:fe:43:f0:fc:7d:7a:18:67:e9:cb:
                    0a:1c:bc:f0:99:c3:ff:1a:99:3f:44:44:05:68:73:
                    1d:11:39:75:51:14:06:5a:53:54:1e:d0:35:18:0e:
                    2a:08:14:02:c4:a4:c7:87:1c:14:45:f1:08:61:67:
                    cb:11:87:22:47:a6:c8:74:65:79:4d:4f:5e:93:fc:
                    c8:51:e3:d5:6c:49:59:02:3c:ef:fb:3c:d2:33:95:
                    a6:9f:59:99:9c:fd:96:cf:ec:4b:a2:2f:eb:65:ed:
                    81:64:33:12:ea:09:63:25:be:3b:d6:29:c7:42:39:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:1C:ED:B2:43:B6:20:9F:77:D5:9E:45:1D:B5:D7:07:7A:70:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ef62c5ea-bb5b-31b4-9c11-8673babcb0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:c8:5f:17:f3:ef:8c:c1:bd:11:c3:07:df:9b:14:53:8e:
         c6:c1:45:44:8d:cb:15:47:2b:ff:ab:3a:34:4b:9f:a7:66:95:
         56:96:6f:04:26:f2:c6:26:bb:25:ec:8d:f6:12:d0:cf:56:51:
         55:73:d8:e7:83:b8:7f:c4:07:38:a1:7a:91:cf:3c:0e:7a:f6:
         56:a4:29:88:5c:28:88:40:0e:58:eb:5a:fd:4a:16:5d:0c:36:
         50:57:94:ca:8a:36:1c:2d:47:14:1c:65:c9:ea:37:46:80:ee:
         cb:17:57:55:fb:20:39:a6:03:2c:d3:c1:c9:d9:4f:b8:d4:e0:
         24:dc:18:cc:6a:c0:e4:65:ea:31:49:71:ae:2e:b6:a0:5c:7c:
         64:7d:35:9c:1e:74:bb:d8:e1:45:c0:19:19:62:cf:89:60:56:
         17:1a:63:bd:ea:7e:91:0d:e4:cc:63:6e:66:69:7a:ae:fc:1d:
         d7:0a:21:2d:00:b9:4f:45:84:3c:e1:e8:af:65:6f:07:da:96:
         20:e9:33:a6:b6:d2:ae:72:dc:71:9d:c5:ce:82:cd:6d:98:d0:
         97:93:49:86:b1:cc:d2:d1:d6:7b:dc:45:5f:6c:44:60:2b:57:
         dd:95:67:30:1c:8d:bd:72:8c:a5:87:4f:78:01:2a:c6:ab:90:
         04:af:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:38 2025 by rpki-client