Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
File:                     1a9639da-a216-3ece-b327-c09a057856a3.roa (raw, json)
Hash identifier:          GipWLbaJTD9kzGgzQXqINj1tD4DR4Tx8QNqnUrtI0Jg=
Subject key identifier:   44:66:33:44:E0:2B:A6:C5:A5:54:14:CD:AF:DA:A3:EA:31:FC:BD:64
Certificate issuer:       /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial:       010D0C9F4328584EB57C573DA6AB6CA209A54E00
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     81
IP address blocks:        152.30.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:57:3d:a6:ab:6c:a2:09:a5:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=1e382960-d264-426a-afa8-b9dd042c688d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:2f:5c:23:56:a9:b8:1a:79:69:aa:f7:c7:
                    f8:33:11:7e:a0:39:48:79:a7:80:35:11:91:ef:25:
                    cd:45:40:5e:4d:bb:3e:7c:3a:60:29:a1:92:66:ee:
                    45:34:71:e0:aa:d8:87:04:9e:41:2b:c6:6b:71:a8:
                    57:de:2f:7c:f6:b8:36:a5:5c:52:18:d4:54:d8:7b:
                    4c:36:9f:59:cd:72:6a:6b:93:f5:df:7f:fe:4e:a9:
                    60:a4:b1:b4:39:81:05:f2:2d:b8:a8:43:2b:04:79:
                    1a:71:eb:55:96:33:9f:60:ed:35:12:6c:45:f6:4e:
                    b3:71:3a:84:be:6e:88:f8:78:bf:61:a4:c2:ab:07:
                    c7:a3:a9:cf:a7:8d:72:82:25:db:df:98:be:02:86:
                    3d:a3:73:ef:a0:47:7c:7f:0c:01:be:b4:db:90:c9:
                    a3:1c:a5:d3:46:d1:ed:2b:d1:ef:c2:98:2c:b5:72:
                    58:f7:b3:ca:fd:c6:9f:70:c4:a8:56:f5:82:aa:d2:
                    c4:18:23:dc:19:35:7f:53:0a:9a:a6:fe:fa:74:8d:
                    c2:b2:c0:00:f4:de:49:bd:86:d9:de:a9:18:2d:4c:
                    61:41:6e:d1:76:b4:82:07:41:a3:a4:3b:a9:8c:db:
                    fd:c1:b4:b6:d5:9a:72:4b:35:be:1b:13:3b:69:65:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:66:33:44:E0:2B:A6:C5:A5:54:14:CD:AF:DA:A3:EA:31:FC:BD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl

            X509v3 Authority Key Identifier:
                keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:b3:af:cd:31:68:51:2f:f6:75:15:49:07:36:29:0e:f0:
         f3:d6:00:f1:27:e6:b3:0a:8e:31:44:09:36:ff:e7:05:7a:68:
         1e:79:77:42:24:67:e7:18:0b:ec:bb:6c:3e:37:2b:52:85:45:
         4f:28:24:5f:a7:73:3b:ec:97:5e:09:f5:c0:d8:1b:8e:48:9e:
         fb:20:66:70:8f:9d:39:05:68:57:d1:3f:a0:8d:92:1e:8b:ed:
         85:77:c6:86:4f:97:af:f9:2d:fc:fb:ad:f9:49:81:04:f4:e1:
         a0:21:77:47:95:9a:22:64:20:49:76:2d:4f:4e:e6:40:c7:fc:
         87:4f:a9:d0:58:2e:a9:e1:9f:a1:aa:2f:b5:89:2a:ce:29:28:
         e5:fd:14:5d:56:91:a6:f4:15:8e:0d:0c:89:c6:ce:eb:31:39:
         ed:ce:d9:cf:94:f4:63:2c:03:d3:89:38:de:10:f9:98:58:37:
         7d:93:cd:2e:71:df:18:67:72:84:0b:80:00:44:c6:d6:e7:95:
         8d:17:1e:eb:15:52:57:06:15:6e:5d:c1:f7:d7:29:8d:0a:bf:
         36:f0:18:91:43:c5:ab:be:60:41:33:16:53:4b:0c:26:42:36:
         58:0d:2f:ab:10:28:b1:12:48:be:e8:45:a1:4c:0c:3f:7b:22:
         84:2e:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:37:02 2026 by rpki-client