Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/058d050d-5248-3ecc-92f5-1d246c951ea5.roa
File:                     058d050d-5248-3ecc-92f5-1d246c951ea5.roa (raw, json)
Hash identifier:          OzajFXeRygyI9cuBDERD6GKE7fbl9uNrq9TJFgW4V8Q=
Subject key identifier:   30:AC:0E:CA:D2:2B:29:E8:F7:0D:E1:06:38:30:F2:A2:B3:72:BB:67
Certificate issuer:       /CN=30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6
Certificate serial:       010D0C9F432858494F93E7B44F307EEB895C2780
Authority key identifier: F5:C7:2E:43:ED:3E:D6:D8:2A:96:2A:ED:5B:43:17:B2:26:28:60:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/058d050d-5248-3ecc-92f5-1d246c951ea5.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     26804
IP address blocks:        216.153.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:e7:b4:4f:30:7e:eb:89:5c:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=3115683e-10ea-451a-b453-3c6b02eb8170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:9a:e2:39:fa:60:a1:9d:14:32:a4:29:64:
                    0b:8d:47:4b:f7:39:eb:ce:58:e6:c6:20:86:88:47:
                    43:a6:92:5e:f0:aa:a0:3f:17:99:42:2a:05:92:28:
                    1c:78:8f:6f:ae:e3:d5:7a:f4:04:a5:14:31:1a:2b:
                    c2:74:e2:26:0f:39:e7:e4:d9:bd:40:e8:04:1f:6f:
                    ac:f3:f1:d8:78:0f:a8:54:96:f0:36:5d:c7:60:ed:
                    85:6a:2c:6d:04:64:53:8c:2a:48:d0:b9:03:3a:7f:
                    e1:0a:f8:e3:d8:bf:47:73:c1:93:51:8c:e0:c5:a0:
                    1e:1b:f4:b1:10:b7:f0:ca:7a:d1:7f:fc:f0:91:61:
                    55:1b:cc:2c:7a:98:f1:70:0d:93:27:02:e2:7e:b7:
                    0e:14:f5:78:b8:c3:f7:22:7d:1a:bd:a6:5b:14:f6:
                    db:86:1d:71:f3:73:85:53:89:27:52:87:4f:63:cd:
                    14:13:d8:c7:70:df:89:32:4c:73:a4:36:85:57:2d:
                    8c:ad:0e:91:bc:a7:a4:a6:dd:2b:87:2e:54:e4:8f:
                    9c:90:14:19:1c:30:97:be:00:c5:5e:14:46:05:00:
                    d9:76:ee:a3:4d:be:a6:64:ff:72:60:62:5e:ef:23:
                    f4:d0:37:c9:55:21:50:9a:55:14:86:b7:70:80:28:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:0E:CA:D2:2B:29:E8:F7:0D:E1:06:38:30:F2:A2:B3:72:BB:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/058d050d-5248-3ecc-92f5-1d246c951ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.crl

            X509v3 Authority Key Identifier:
                keyid:F5:C7:2E:43:ED:3E:D6:D8:2A:96:2A:ED:5B:43:17:B2:26:28:60:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:54:19:f5:11:3c:f3:e2:4b:06:52:16:d6:9e:36:7a:7f:f6:
         53:4a:ee:11:77:cb:69:0d:5d:bb:93:b9:74:a3:47:4e:a8:cf:
         30:17:ad:80:c7:c9:25:a8:53:ea:b2:dc:f0:95:fe:bc:2d:d8:
         68:ea:eb:1d:9a:cd:ec:d8:ba:6a:18:3f:a7:e4:68:ad:78:fd:
         b7:ff:a1:30:67:85:e1:45:a9:2a:9c:29:60:cf:46:1f:ad:a8:
         de:cf:f5:2f:17:ce:3b:ba:89:df:fe:8b:fe:ed:30:10:27:54:
         60:51:da:56:cb:c9:25:ce:27:c7:d5:d2:f4:ad:4e:54:d9:b0:
         55:c7:5d:45:d9:b5:21:02:17:51:6c:cf:b5:98:04:0a:1d:bf:
         6c:58:ab:e0:db:44:e6:4c:60:35:39:08:e3:49:0c:66:70:ab:
         8e:f0:c1:a6:71:41:ea:09:e9:a4:e7:6e:11:59:42:55:7b:c8:
         4c:ce:ba:9b:a6:f4:62:12:06:f0:c7:df:24:91:50:fe:d4:b3:
         07:5f:c9:69:6d:2b:fa:50:a6:03:a5:45:d0:86:c7:85:dd:d2:
         1c:86:ae:b7:98:bc:cc:18:85:e1:5b:cc:36:58:b4:27:04:91:
         ac:67:e2:67:a4:f6:81:d6:56:a0:2b:e3:bf:f7:ca:98:de:a6:
         7d:e3:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:48:10 2025 by rpki-client