Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/0242e3bb-d361-314e-9397-022ca2fba7a8.roa
File:                     0242e3bb-d361-314e-9397-022ca2fba7a8.roa (raw, json)
Hash identifier:          KAboHbohE3zKmGK3g+W1CZcZk8OBPcd311Enn57Aq/Q=
Subject key identifier:   5D:67:7E:94:88:47:ED:F4:62:49:22:A5:8E:E4:88:00:9D:EF:D4:6E
Certificate issuer:       /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial:       010D0C9F4328584A936B60511BE769CC7345A800
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/0242e3bb-d361-314e-9397-022ca2fba7a8.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     81
IP address blocks:        152.30.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:60:51:1b:e7:69:cc:73:45:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=ab8078a4-5be3-490f-b711-0a065e34e345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:04:dd:41:58:b0:66:f4:dd:82:f4:80:5d:
                    35:af:dd:49:dc:54:1a:2c:28:40:bf:c2:78:3e:d3:
                    b2:bb:05:3d:f9:d8:e7:f1:91:50:38:1b:b7:3e:05:
                    06:56:92:15:df:10:c3:c7:3d:c3:5e:8f:ef:74:31:
                    a9:5c:2f:2e:4a:ac:c1:3d:aa:0d:dc:a8:69:7f:95:
                    35:c6:fb:dc:9f:57:5c:a2:43:6b:8f:f0:15:da:af:
                    98:7a:22:07:7d:50:bd:37:01:37:cd:7d:f1:f8:2d:
                    47:67:89:00:60:af:6b:2a:1d:b9:a9:60:9a:ee:6b:
                    61:15:8a:65:4c:3a:0c:14:83:82:35:63:e9:40:09:
                    e2:c0:c8:43:bc:69:00:fd:0d:26:4a:cc:ec:1c:8d:
                    42:2c:a4:d4:43:4d:2a:9d:5f:42:0e:61:c6:3a:57:
                    66:0b:cc:5b:bd:86:fb:8d:af:f1:f0:61:de:55:79:
                    35:54:cf:1e:0e:e6:2e:b9:51:21:ab:24:6f:f1:fc:
                    9a:c4:66:43:65:b1:f8:eb:94:50:03:da:57:2c:88:
                    e9:0c:46:f9:df:a8:8e:b4:1b:e1:dd:08:45:fe:2a:
                    73:c4:52:43:97:83:a7:70:c4:f0:2e:98:b0:54:1c:
                    b9:39:22:4b:c7:9a:8a:58:b1:18:36:d0:97:66:b9:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:67:7E:94:88:47:ED:F4:62:49:22:A5:8E:E4:88:00:9D:EF:D4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/0242e3bb-d361-314e-9397-022ca2fba7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl

            X509v3 Authority Key Identifier:
                keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.30.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:fd:73:00:70:c2:bf:6e:b7:f5:a1:2f:2a:e4:91:0a:ec:
         b5:a1:30:84:8b:08:5a:bc:38:7c:56:22:07:2b:f5:7a:5d:2c:
         85:5d:4f:d2:40:d2:78:2a:38:3c:d9:f0:be:32:7e:80:39:76:
         11:f7:5c:50:74:f4:20:87:0b:43:fe:7d:6b:46:a9:6e:14:09:
         19:e6:fa:96:36:76:d4:0c:a7:81:25:ee:cb:eb:03:92:d3:14:
         2c:87:b2:9c:d2:57:ae:c7:64:b5:4e:76:b2:0b:dd:ae:5c:43:
         b8:11:17:08:23:22:35:6d:0e:35:b6:6d:75:bf:ca:6c:36:f8:
         72:76:4d:a0:31:be:a0:ff:d9:f9:27:ae:21:4f:c1:7b:2e:f2:
         85:0d:61:84:72:6f:08:97:44:2f:ca:3f:fe:15:72:7b:a9:e3:
         b3:3d:20:a2:9b:f4:13:b4:58:a9:31:67:f2:7f:3e:48:bf:33:
         9f:54:49:2f:d7:25:c0:49:5f:d1:1a:c4:73:ad:a6:eb:00:23:
         62:7f:eb:ed:2c:30:a1:17:8e:6f:1b:bb:88:8b:7a:bb:ae:1a:
         d9:7c:f6:0c:ef:89:68:1f:41:a8:51:65:b8:17:f9:69:bd:37:
         ec:4b:89:37:9c:8e:13:20:24:89:61:87:c9:ef:04:28:2e:ec:
         2f:9f:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:52 2025 by rpki-client