Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/30fa26f6-7cb1-3846-8766-59afe66328ca.roa
File:                     30fa26f6-7cb1-3846-8766-59afe66328ca.roa (raw, json)
Hash identifier:          S8uFpdOVpcX3lG4gEE3E3GSJ2r1RwXlWdwIekzljofg=
Subject key identifier:   E7:8A:F4:39:D5:FF:1D:2D:DD:46:2E:2E:B6:7F:4B:AC:63:F8:92:5A
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584B5DD1D9B8F2C2FEBC8C07E000
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/30fa26f6-7cb1-3846-8766-59afe66328ca.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        167.17.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:d9:b8:f2:c2:fe:bc:8c:07:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=682d76c0-c240-4b00-a857-c80283443666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:c1:43:34:86:ec:45:4a:3d:93:78:83:b3:
                    c4:a2:f4:db:03:6d:c5:ed:84:b6:63:27:4c:48:ef:
                    b3:2f:cb:69:ce:e1:7f:ad:e4:38:23:d7:7e:2b:10:
                    57:f3:54:63:ac:70:34:bc:ef:30:9a:75:42:fe:e8:
                    79:33:da:bb:27:94:0e:16:dc:4d:8a:94:89:98:e2:
                    96:6b:84:ad:00:81:b0:09:77:21:68:cb:85:39:bd:
                    a2:7d:bc:a1:60:f2:a9:8c:cd:61:ba:68:f0:91:db:
                    50:3c:bd:b7:e6:25:86:cd:96:69:0d:e4:38:e7:0c:
                    21:52:74:52:cf:c6:11:6b:16:0a:47:86:92:11:e6:
                    73:56:36:07:1c:67:f7:c3:47:56:82:9e:a0:e0:70:
                    6a:16:0e:19:d4:6d:8a:ea:10:22:b5:ae:14:13:5f:
                    5b:f5:d9:70:01:cb:34:14:00:9c:41:de:ae:f6:4f:
                    c0:b8:d6:48:dd:bc:90:81:45:d8:cf:a5:4e:fc:71:
                    d1:69:70:c4:62:56:ab:66:0b:48:15:f6:dc:d6:6c:
                    41:e1:8b:1d:5a:96:53:05:eb:3a:21:5b:e2:e2:14:
                    86:81:1d:1f:a2:31:96:f0:cf:9f:26:c0:e9:8e:1d:
                    4d:16:f7:e8:9a:34:1c:2e:1d:e4:40:39:7b:71:23:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:F4:39:D5:FF:1D:2D:DD:46:2E:2E:B6:7F:4B:AC:63:F8:92:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/30fa26f6-7cb1-3846-8766-59afe66328ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.17.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:20:dd:16:c4:a9:8b:84:5d:71:0f:8c:92:d0:e0:68:0d:
         60:7a:dc:7a:32:25:c3:7a:f0:20:2b:2b:7a:1a:43:b2:90:c4:
         8e:bc:a5:b7:5b:6b:5a:ea:d6:dc:6b:9a:98:8d:9b:44:94:41:
         8c:4a:fd:83:06:d0:01:87:28:a0:3e:42:a9:3d:94:5a:2b:8a:
         fd:c5:ef:63:a1:bb:70:27:77:45:8d:9c:90:ab:ec:43:20:3a:
         91:fe:03:d7:b8:6f:ce:74:2a:f0:a9:10:a3:35:e5:b2:44:3a:
         6b:9a:c2:62:4d:f0:2b:0b:25:d3:e8:c6:71:46:19:b6:09:ac:
         5f:c0:74:8e:24:02:e7:a2:da:c6:1f:86:c0:c6:47:a6:b9:65:
         6e:d8:16:8c:d3:e8:2b:22:6a:98:1d:b0:3a:97:55:2c:fd:5d:
         7c:c3:a5:30:cc:c2:b3:6b:5f:63:ff:b7:48:dd:37:54:54:35:
         34:d5:21:77:07:44:f5:1c:28:d9:ed:65:e4:73:ad:63:15:69:
         26:21:05:6f:93:4b:29:9c:c9:e6:cb:6f:2b:6a:3f:a3:8c:c7:
         1a:e6:72:0b:78:31:6f:ce:26:f0:e4:ed:4d:12:f1:ee:82:1e:
         39:b7:bd:19:73:46:d5:35:67:8c:5b:b0:5d:56:33:9c:51:54:
         ce:79:ab:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0dm48sL+vIwH4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
NjgyZDc2YzAtYzI0MC00YjAwLWE4NTctYzgwMjgzNDQzNjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa3BQzSG7EVKPZN4g7PEovTbA23F7YS2YydM
SO+zL8tpzuF/reQ4I9d+KxBX81RjrHA0vO8wmnVC/uh5M9q7J5QOFtxNipSJmOKW
a4StAIGwCXchaMuFOb2ifbyhYPKpjM1humjwkdtQPL235iWGzZZpDeQ45wwhUnRS
z8YRaxYKR4aSEeZzVjYHHGf3w0dWgp6g4HBqFg4Z1G2K6hAita4UE19b9dlwAcs0
FACcQd6u9k/AuNZI3byQgUXYz6VO/HHRaXDEYlarZgtIFfbc1mxB4YsdWpZTBes6
IVvi4hSGgR0fojGW8M+fJsDpjh1NFvfomjQcLh3kQDl7cSOf2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeK9DnV/x0t3UYuLrZ/S6xj+JJaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMzBmYTI2ZjYtN2NiMS0z
ODQ2LTg3NjYtNTlhZmU2NjMyOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpxHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB93IN0WxKmLhF1xD4yS0OBoDWB63HoyJcN68CArK3oaQ7KQxI68pbdb
a1rq1txrmpiNm0SUQYxK/YMG0AGHKKA+Qqk9lForiv3F72Ohu3And0WNnJCr7EMg
OpH+A9e4b850KvCpEKM15bJEOmuawmJN8CsLJdPoxnFGGbYJrF/AdI4kAuei2sYf
hsDGR6a5ZW7YFozT6CsiapgdsDqXVSz9XXzDpTDMwrNrX2P/t0jdN1RUNTTVIXcH
RPUcKNntZeRzrWMVaSYhBW+TSymcyebLbytqP6OMxxrmcgt4MW/OJvDk7U0S8e6C
Hjm3vRlzRtU1Z4xbsF1WM5xRVM55q3I=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:37:01 2025 by rpki-client