Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/06266d36-1e51-3f73-9b73-69a4f8271e3d.roa
File:                     06266d36-1e51-3f73-9b73-69a4f8271e3d.roa (raw, json)
Hash identifier:          oNSq27xpmXVs6cg11RGoc2xdejd/VTSDNLM793M2BMA=
Subject key identifier:   D4:8A:59:80:8D:91:3C:A2:9F:AE:5F:DC:6A:A0:C8:2F:E5:9F:51:05
Certificate issuer:       /CN=a32aa006-ef22-4905-8c82-2651c19859b9
Certificate serial:       010D0C9F4328584B2066D7D01667A7B26CBDC480
Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/06266d36-1e51-3f73-9b73-69a4f8271e3d.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     19350
IP address blocks:        199.212.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d7:d0:16:67:a7:b2:6c:bd:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=e52aee51-3b2f-49c5-aa52-3a3b10c116bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:5f:74:ca:5e:8a:b5:0a:e6:59:0f:70:68:
                    2d:47:94:74:28:46:30:7c:aa:af:7a:44:1c:aa:df:
                    2c:eb:b3:50:c8:44:9b:b2:d8:d5:76:ec:57:b6:c9:
                    08:38:27:52:8a:38:30:aa:e7:57:fe:51:ef:d4:c7:
                    67:54:d6:08:6d:b6:f2:4b:9c:39:b1:ad:ef:c2:b6:
                    a4:91:ed:fe:ad:56:ff:23:7a:89:a7:d9:9b:57:3e:
                    f5:ff:78:2b:7a:c2:af:d4:39:5a:12:fe:37:35:a8:
                    97:02:de:fa:2d:dd:23:4f:7d:8f:b7:bb:45:68:bc:
                    45:88:f1:d4:2d:4f:13:0a:05:70:bf:fb:77:7b:fc:
                    f6:bd:db:f5:28:fc:4b:3d:b9:eb:48:e6:6b:eb:66:
                    9f:60:68:11:54:80:88:8f:e8:7d:51:b8:fa:ee:19:
                    1c:91:ad:c1:b6:37:5b:5d:5a:b2:90:18:c9:22:c1:
                    b0:f7:dc:a3:cf:aa:b1:4d:34:07:1c:12:ee:04:63:
                    5b:85:d7:48:c6:c6:9d:de:ab:be:92:c6:73:95:01:
                    47:6e:31:36:1d:26:54:70:ee:1f:72:4d:e9:12:9f:
                    a6:14:92:57:9d:78:39:1f:70:35:6b:6f:92:bf:da:
                    8c:dd:45:5c:30:c3:e9:1f:bb:6c:2e:ed:fb:a7:2c:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8A:59:80:8D:91:3C:A2:9F:AE:5F:DC:6A:A0:C8:2F:E5:9F:51:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/06266d36-1e51-3f73-9b73-69a4f8271e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl

            X509v3 Authority Key Identifier:
                keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:dc:14:d4:ce:11:7d:3d:6d:72:1c:51:84:9a:b4:72:c4:06:
         00:2e:37:82:78:d5:78:ff:ac:46:c2:2c:de:48:dc:9e:d6:63:
         5c:29:a5:8c:77:ad:e7:cd:f8:3f:12:4c:0c:13:37:97:ef:d5:
         94:0e:48:f2:aa:16:ae:59:4e:d9:d2:32:77:f9:bb:4b:e8:69:
         57:c3:16:0c:b7:fb:42:a5:48:13:9c:7c:99:45:76:6a:68:8d:
         b5:bc:81:52:c0:f5:6f:15:06:16:ba:0d:06:0d:56:67:a0:90:
         1c:ab:3c:9d:be:67:73:13:3a:15:74:51:67:2a:c9:0c:6e:ca:
         26:e1:80:77:35:64:ee:f7:56:31:bb:ce:ce:f8:af:74:61:8f:
         44:62:50:18:1f:86:31:6e:10:59:e5:96:46:35:94:f7:e2:08:
         fe:a4:b7:24:33:25:d6:ec:f6:be:aa:b0:fb:80:19:83:53:a9:
         c9:19:d2:36:16:be:f7:b0:9b:24:1a:44:3f:ed:54:f1:62:fe:
         32:eb:6c:2d:13:d3:6b:16:2e:09:86:19:ca:56:4d:d1:48:93:
         f5:12:5f:a6:b8:a7:46:54:67:4f:c0:ef:0c:a9:c5:a8:f6:bf:
         85:61:91:7c:b4:20:56:52:f3:db:6e:69:ac:c7:4b:ba:90:93:
         35:d9:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:09 2025 by rpki-client