Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e30213e4-b69c-3be5-b554-376445fa786e.roa
File:                     e30213e4-b69c-3be5-b554-376445fa786e.roa (raw, json)
Hash identifier:          p+Upi1tKbLcuoXb8+c5sQf6OonohWnJXt5wAJgXBYa4=
Subject key identifier:   29:FE:4C:85:B6:55:85:85:ED:CE:5C:FD:6F:33:B8:1F:01:03:99:95
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584E877033FDECE2828BCE330F00
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e30213e4-b69c-3be5-b554-376445fa786e.roa
Signing time:             Fri 17 Jul 2026 13:08:43 +0000
ROA not before:           Fri 17 Jul 2026 13:08:43 +0000
ROA not after:            Thu 15 Oct 2026 13:08:43 +0000
asID:                     10279
IP address blocks:        152.44.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:70:33:fd:ec:e2:82:8b:ce:33:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Jul 17 13:08:43 2026 GMT
            Not After : Oct 15 13:08:43 2026 GMT
        Subject: CN=bbd77f36-3bbb-423f-b45f-8ac53ddd5e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:eb:11:4d:a5:7b:d9:f7:84:68:4d:6d:df:
                    82:58:d1:fe:4f:f6:e1:90:0d:39:27:de:dc:2d:d6:
                    7e:6d:6f:87:88:bf:5f:66:ac:d4:f0:7c:62:53:93:
                    71:85:cc:3d:03:4a:73:33:86:55:72:e8:55:22:2c:
                    fb:02:d8:c3:5b:15:0b:b3:87:01:97:61:d3:94:f3:
                    46:a2:4d:14:61:14:dd:c0:f9:a0:bd:48:8a:ae:87:
                    f7:a1:ef:0d:a7:9b:cf:9f:07:8e:d0:d2:4a:41:2f:
                    27:01:37:c6:b4:0b:ec:09:02:78:ce:45:25:c7:05:
                    af:34:01:12:63:dc:cd:d8:d8:1b:e6:b4:fd:07:56:
                    41:2a:c3:64:05:23:8a:04:a6:08:d2:61:a1:c6:9c:
                    2d:ce:ed:26:06:6b:5f:7e:29:21:27:3c:cf:17:2a:
                    9e:6f:6d:06:6a:d6:1c:b3:f4:51:8a:86:95:78:5c:
                    7f:63:28:83:51:cc:bb:d7:d0:59:d0:77:ba:c2:48:
                    e4:67:a0:a4:1e:fe:da:99:dd:f0:da:0f:d1:89:02:
                    05:64:62:a8:10:19:5a:84:60:1a:26:42:f9:43:c9:
                    7e:fe:f0:0f:25:6f:c2:39:e9:62:f9:74:54:ac:ee:
                    56:0d:6f:a3:08:18:63:b0:81:c0:0f:c2:19:58:3a:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:4C:85:B6:55:85:85:ED:CE:5C:FD:6F:33:B8:1F:01:03:99:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e30213e4-b69c-3be5-b554-376445fa786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:0e:1f:fc:66:af:8d:49:84:d8:24:08:f6:ff:9f:30:74:
         7d:28:e9:a9:bf:fd:45:1b:f1:4f:b2:6b:b1:89:b3:62:2a:61:
         ea:2a:6b:28:aa:55:dc:9f:19:ed:cc:04:fe:2f:07:4a:12:ca:
         77:6a:e4:8e:a3:53:47:f8:71:a7:57:d0:75:c4:9d:a4:a7:ff:
         56:a2:1b:0b:1a:1a:2f:24:27:62:25:a6:92:df:f3:b2:28:27:
         be:74:bd:bf:09:56:c0:c7:89:61:1b:3d:ba:26:c7:19:fc:a8:
         a1:bc:35:b2:31:27:c7:4c:d2:8e:6d:0b:76:2e:86:ef:b5:57:
         a0:e4:e7:ee:af:d4:41:77:f0:43:13:fe:3f:7c:a8:71:d4:1e:
         dd:fa:81:bf:48:e9:58:44:61:01:07:c4:43:cf:ec:0a:27:bd:
         68:c1:92:79:c2:e9:fb:15:7e:20:0e:c8:cd:e8:dc:52:50:95:
         a6:03:08:0a:f3:97:21:55:a8:f7:ad:62:a1:f1:44:3f:25:63:
         2c:4e:db:c7:ce:45:fb:f8:46:6b:24:a4:60:cb:a6:06:03:7b:
         b5:d3:c2:f4:f6:f4:4f:02:e1:c2:3d:66:d1:a2:84:43:08:c8:
         60:e8:b2:cc:72:b5:21:bd:2c:23:9f:4d:a2:d3:8d:ff:e1:79:
         f8:d0:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:06 2026 by rpki-client