Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/30e52c33-36b1-3f0c-9b09-ff69690264a3.roa
File:                     30e52c33-36b1-3f0c-9b09-ff69690264a3.roa (raw, json)
Hash identifier:          vQLAVGhFIl/RltnB2kzVnzS957u+YhtLYsmvP+oqijA=
Subject key identifier:   02:12:B6:3E:DD:92:0C:8E:C2:5F:3B:DD:A0:19:4C:72:E6:FC:60:92
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584B0FA6BDD9183C447B0F5BC2C0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/30e52c33-36b1-3f0c-9b09-ff69690264a3.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     50440
IP address blocks:        69.168.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bd:d9:18:3c:44:7b:0f:5b:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=dbe2a9d2-b3d3-4392-98b8-d7a6bf377948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:af:2f:08:0e:45:b6:b2:60:95:3a:66:d1:
                    b2:a2:60:57:d9:af:fa:84:e0:8f:3f:21:39:92:5f:
                    8c:f7:4c:c5:11:2d:95:c0:be:b7:34:bc:c5:1c:dd:
                    20:c2:50:52:5e:16:9c:c1:a8:0b:ea:ad:72:0f:3a:
                    32:47:f3:ad:54:da:f0:e5:3e:5b:e8:de:3f:83:58:
                    d2:e4:cc:81:f0:f4:9d:b4:cf:55:ba:cb:2e:0b:e2:
                    49:f4:22:de:47:37:5e:29:b2:12:87:f0:c2:7c:d3:
                    5f:42:40:19:58:59:bf:3e:9e:aa:0d:53:62:16:cd:
                    45:3d:46:7c:58:92:2d:44:32:37:75:db:67:e8:e2:
                    a5:ab:a8:56:12:dd:12:04:e3:20:ee:65:72:a2:4c:
                    99:0a:20:86:f6:c7:fe:66:b4:0c:b6:35:58:15:ec:
                    60:bd:8f:02:1a:28:0d:ba:1f:3a:50:ec:a2:34:bc:
                    c6:28:b2:ca:b7:ff:43:a9:94:15:da:12:1d:f8:fe:
                    bb:01:e8:cb:6f:89:b8:83:b7:b3:39:e1:90:66:8a:
                    74:9d:31:cd:c1:b9:ac:90:f1:eb:bf:50:97:f2:66:
                    85:b3:16:a6:22:2b:4c:c2:09:75:80:10:b6:87:1a:
                    e8:41:e7:d1:88:6f:56:07:88:90:0b:0d:2b:c7:b6:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:12:B6:3E:DD:92:0C:8E:C2:5F:3B:DD:A0:19:4C:72:E6:FC:60:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/30e52c33-36b1-3f0c-9b09-ff69690264a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:d0:13:84:5f:3a:8d:16:b1:a3:7d:99:53:ea:71:1e:a5:
         0a:07:f3:c4:b7:83:1d:b8:c8:79:4b:f0:9d:22:d4:9c:ce:13:
         e5:7a:c7:b4:76:d1:40:59:29:d2:7f:38:74:2a:ba:e9:dd:9c:
         dd:cf:54:eb:09:b8:aa:d6:a6:8c:5f:90:7b:fd:7e:d6:23:81:
         f1:f6:d0:1a:f4:b7:78:7e:84:3f:9d:05:03:dd:f4:d9:bf:e2:
         dc:61:c3:5d:6d:39:d3:32:60:01:9c:20:f9:15:2a:45:a3:5d:
         a8:77:a7:43:30:8b:19:cc:1d:39:e7:da:8d:e7:bc:30:c6:3f:
         1e:ec:0d:57:f0:50:92:6f:f5:a2:28:d2:d7:22:40:f3:9e:1e:
         18:88:01:13:00:02:53:9e:d9:4e:58:15:01:1c:4d:b9:0f:b5:
         b5:f1:b7:66:1c:a9:93:7a:09:96:5a:88:28:fb:03:06:88:6f:
         ae:db:49:55:d8:a9:db:88:c0:11:b4:90:01:f4:3f:3e:92:1b:
         b6:a6:36:46:0c:09:3a:5e:08:35:a2:3f:cb:82:6f:8a:b4:01:
         52:31:96:74:30:be:b2:32:71:ef:ef:93:a1:04:bb:58:2a:ad:
         7c:79:8d:48:ae:cc:a6:48:d3:de:f2:00:ae:8b:8a:e6:37:28:
         0a:8c:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:58:10 2025 by rpki-client