Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa
File:                     eeec2a0b-d077-3139-8182-9ef3d7ace134.roa (raw, json)
Hash identifier:          59L7jUjqCzF71SjP0vEde5LuFonOZ1DPEnsSyWQpWoE=
Subject key identifier:   5C:07:5A:E0:EC:2F:26:42:9F:41:18:36:B3:CC:5C:4A:07:79:4C:D2
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584B6F441992E88DE43F7E893420
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa
Signing time:             Mon 06 Oct 2025 18:59:38 +0000
ROA not before:           Mon 06 Oct 2025 18:59:38 +0000
ROA not after:            Sun 04 Jan 2026 19:59:38 +0000
asID:                     17275
IP address blocks:        161.107.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:44:19:92:e8:8d:e4:3f:7e:89:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Oct  6 18:59:38 2025 GMT
            Not After : Jan  4 19:59:38 2026 GMT
        Subject: CN=a8464b95-c5e7-46c5-b409-f52f9bf5f9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:d4:c7:7b:cb:6c:1a:08:f5:80:50:50:9c:
                    af:c6:f6:31:df:b5:21:77:38:20:96:ff:5f:dc:56:
                    aa:bd:fe:58:8e:71:3d:fe:74:36:92:4b:63:4c:9b:
                    62:bf:83:9e:86:48:89:b2:84:6e:30:13:74:90:65:
                    07:0f:a2:00:8f:85:2e:12:5b:91:58:0d:38:8c:14:
                    5e:e0:00:34:0b:40:5d:5b:cc:73:a7:e9:4d:74:32:
                    73:9b:6e:43:87:6f:dd:8a:a2:83:dd:23:fe:e7:84:
                    b3:8e:e1:da:8b:fd:d9:35:0b:3c:85:15:19:c7:07:
                    69:b4:ba:22:14:b7:87:d3:32:37:4b:94:b9:2c:0e:
                    7a:ae:43:00:e3:30:00:fc:8a:99:59:ce:fc:75:4f:
                    35:1b:ac:84:68:f9:62:46:7c:75:b6:38:18:ac:9d:
                    21:71:93:65:8a:86:47:9b:15:77:79:ab:6c:60:82:
                    d9:d3:fe:71:c4:69:c6:19:26:99:be:21:58:e9:9b:
                    c2:83:77:68:71:98:20:ee:a9:d2:70:44:48:8b:15:
                    f3:7b:52:ca:65:49:39:93:c1:2d:75:15:4b:19:14:
                    03:ba:3c:69:c1:90:93:fc:e9:cd:e6:59:55:36:e6:
                    63:9d:48:ff:8a:3f:f9:83:16:05:02:a0:f5:41:27:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:5A:E0:EC:2F:26:42:9F:41:18:36:B3:CC:5C:4A:07:79:4C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/eeec2a0b-d077-3139-8182-9ef3d7ace134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:d9:eb:6d:b7:f2:52:0e:fa:38:47:6b:57:06:a4:bb:e5:
         42:f3:90:bb:be:2c:ab:38:7f:6c:b5:9c:cf:6b:ae:c3:3f:55:
         ea:c6:40:cb:a7:55:bc:01:82:04:79:17:66:31:9e:de:b5:ac:
         ec:76:60:9f:aa:18:d6:11:77:93:2a:fa:83:30:e3:b4:17:26:
         99:d8:b6:00:25:11:b1:cc:b2:00:fb:d1:7c:cb:cd:7f:79:f9:
         dc:3b:1e:a9:c8:42:23:74:25:ff:c0:34:89:9a:7d:4f:ea:2e:
         f7:a2:89:d1:66:46:08:90:c0:d8:af:dd:9b:75:68:3c:6c:fd:
         c5:d1:89:2c:67:ea:0f:8e:e9:13:c4:9d:34:4e:8f:f5:23:8f:
         5e:5d:72:ef:a0:09:90:36:d3:6c:ba:4f:9c:68:f8:7e:c3:b8:
         66:b2:3c:6a:7f:02:b2:c5:3b:13:51:37:26:56:2b:76:11:a7:
         cb:69:40:fc:c1:e2:fb:da:8f:4e:dd:0c:94:ce:93:2e:9e:3b:
         e1:15:f6:19:e7:e2:16:98:74:6e:fd:b2:9e:9b:68:c1:0b:dc:
         58:94:a9:ec:7e:b5:74:b0:7b:15:50:e7:f3:ac:e8:46:01:da:
         49:96:02:91:cf:a9:bc:1d:92:37:ff:ed:37:e3:e4:72:f8:2e:
         ce:1b:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:30:27 2025 by rpki-client