Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/de26fd8a-5819-3f48-9427-7d417bded44a.roa
File:                     de26fd8a-5819-3f48-9427-7d417bded44a.roa (raw, json)
Hash identifier:          3wiwmwKXW89OQ7y0SkCDK20gOhQHurlmtl1mZ3Ll3FY=
Subject key identifier:   2F:E8:A8:0E:EE:AB:6A:8C:CA:F0:2B:F1:8C:23:63:47:36:41:2E:D1
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCC288410BDD346829E70
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/de26fd8a-5819-3f48-9427-7d417bded44a.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        209.82.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cc:28:84:10:bd:d3:46:82:9e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=426eedb7-93e7-4f23-9d86-637e3cc03c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:e1:b5:89:64:7a:d5:23:93:9f:a2:ff:a3:
                    0b:f3:e1:ca:c5:dd:9c:83:99:31:1c:72:8c:c9:ef:
                    98:42:c9:3d:9d:03:a7:04:68:29:ed:e0:be:0b:2c:
                    a8:99:8f:db:db:af:ac:9f:52:5c:bb:4c:68:b8:cd:
                    1c:4b:33:76:d0:5b:f6:3f:c9:49:b7:e1:40:53:10:
                    b5:03:02:73:7a:a2:20:48:d0:cf:24:4c:39:64:87:
                    e8:9e:59:98:70:af:73:a3:3e:03:52:40:66:32:e1:
                    fe:4b:e9:3a:c1:94:60:eb:3c:59:56:de:a1:75:ae:
                    b1:36:eb:c8:45:a6:ae:12:dc:0b:db:ad:12:25:00:
                    8e:68:ac:e1:c6:59:e5:9a:f7:8a:79:21:19:aa:aa:
                    e4:ae:a2:6a:bd:a7:a8:8f:3b:5d:21:dc:4a:b0:c0:
                    7d:5e:1e:0d:a4:08:73:89:94:8f:bb:57:2d:03:74:
                    99:21:7f:84:02:f0:da:4d:a7:e7:7c:2d:01:7c:28:
                    ef:a9:74:80:c8:a1:a7:2c:76:f9:30:c8:a9:62:0f:
                    96:df:dc:22:e0:2c:30:7d:89:dc:c9:6d:0a:71:d6:
                    d4:22:62:31:7c:17:d6:a8:f8:01:eb:70:41:1f:98:
                    aa:a2:b8:8b:2d:f5:10:1d:42:3d:87:c4:ab:ca:0d:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:A8:0E:EE:AB:6A:8C:CA:F0:2B:F1:8C:23:63:47:36:41:2E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/de26fd8a-5819-3f48-9427-7d417bded44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:00:cc:11:bb:f5:28:21:d0:ef:38:65:e8:94:81:44:de:d6:
         fd:36:53:4a:f4:6f:4a:d2:65:f5:86:29:0e:3d:1c:07:87:b4:
         a5:b7:28:f4:f9:69:58:ec:fb:b2:15:41:92:d6:f2:10:46:95:
         53:9a:b4:3d:0c:9a:14:cf:a7:11:be:fa:34:32:43:3b:ca:ca:
         d1:37:06:7f:0b:b6:0b:e0:b0:7b:f9:00:05:3d:20:42:87:67:
         70:de:22:d1:59:c0:0d:18:08:08:70:31:cf:92:e4:21:2a:e9:
         75:03:94:77:a4:3a:a2:12:10:26:64:dc:c6:2e:3f:08:e5:ec:
         a2:df:db:f0:8f:69:89:f9:85:0b:5f:20:ac:e1:b8:fa:ce:2c:
         15:0b:e5:3d:32:ca:ba:68:67:50:45:43:c4:f5:57:b1:7d:5a:
         4e:c0:2c:ed:06:82:55:2b:f3:66:9f:43:fc:72:d2:78:33:98:
         c3:ca:c0:f9:d3:c7:c3:fd:1e:b7:0e:bf:6c:98:08:40:6a:1a:
         2a:f2:cc:16:03:fc:af:c8:d1:11:bd:3b:b5:d3:6e:37:b0:bb:
         31:87:6c:30:65:c9:ca:88:e4:21:d7:4e:44:92:20:60:bd:1e:
         5b:31:cd:e6:78:ae:e9:89:13:23:93:21:c7:69:0e:98:76:72:
         3f:6a:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:04:56 2025 by rpki-client