Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/8d81ff10-44df-3da8-91aa-f1ac062470d0.roa
File:                     8d81ff10-44df-3da8-91aa-f1ac062470d0.roa (raw, json)
Hash identifier:          yRYrRUCHBpNT9ZvQU3W/Ytua4IEaRM1NREIbXGiT2Mc=
Subject key identifier:   1D:F7:4A:34:2D:DA:8A:EF:60:9A:AA:5F:83:04:51:2E:00:28:3E:E9
Certificate issuer:       /CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86
Certificate serial:       010D0C9F4328584B5F371F4A2D3ED3E60E86D675
Authority key identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/8d81ff10-44df-3da8-91aa-f1ac062470d0.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     21512
IP address blocks:        162.30.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:1f:4a:2d:3e:d3:e6:0e:86:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=c71a21ad-35cf-4f4f-bd87-195495f31635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:47:d6:f5:bd:39:44:61:a5:7d:ac:72:1e:
                    0f:b9:bc:b0:c5:a9:6e:c0:8a:00:b3:4b:55:81:05:
                    2b:36:a7:51:35:ab:ca:33:59:3f:86:43:40:73:a6:
                    22:31:cd:c5:24:cb:01:5a:54:d6:d2:af:d1:29:71:
                    ea:fe:83:fb:b7:28:08:a1:27:96:a8:4d:5f:a9:d2:
                    aa:14:b1:fb:f9:12:03:17:a4:f9:b4:23:1d:2b:57:
                    22:78:af:2f:42:bb:68:47:e6:60:de:ed:c9:61:1c:
                    83:0b:bb:95:61:82:60:87:7f:32:dc:0d:1b:f5:e0:
                    c6:89:77:20:ca:5f:7f:fa:1c:d5:1c:e4:d6:2d:dd:
                    9a:b6:30:72:c7:19:41:ff:ed:98:01:11:c9:dd:d6:
                    ea:03:50:bc:5e:f8:9f:92:51:2a:d9:10:aa:62:16:
                    27:96:af:64:60:2d:f2:25:33:77:f7:c9:d4:26:7f:
                    37:af:88:d2:b7:ac:2a:39:fc:76:c6:3d:a1:d1:88:
                    87:19:a3:23:af:f0:33:a0:ce:2e:6f:36:00:38:eb:
                    f9:be:3a:20:29:ae:7a:ee:0d:af:5d:68:11:99:d7:
                    71:63:dd:c3:28:fd:ea:a5:0d:d4:2a:8a:5e:02:da:
                    60:15:6c:84:c7:52:e8:9a:a2:4e:87:b0:fd:64:d7:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F7:4A:34:2D:DA:8A:EF:60:9A:AA:5F:83:04:51:2E:00:28:3E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/8d81ff10-44df-3da8-91aa-f1ac062470d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl

            X509v3 Authority Key Identifier:
                keyid:AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.30.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:ba:1e:b3:b4:79:80:2a:95:e7:68:fc:36:bc:a4:d1:51:
         a7:60:84:88:e6:50:96:51:57:60:24:11:16:1e:93:d1:bc:46:
         40:70:24:5b:5b:2e:62:0a:96:45:a0:c7:c9:5b:86:f5:39:b2:
         05:5b:21:6c:4b:0a:ef:49:20:d7:86:a8:84:4b:cd:c3:48:12:
         8f:22:47:0d:ec:46:41:f4:d7:35:59:8e:65:ec:d2:a8:6c:23:
         5f:0e:15:1f:df:d3:b4:6b:d9:03:b4:e4:62:60:b1:34:ba:df:
         6c:76:cb:45:a4:2f:05:9f:b3:75:56:68:ab:20:f9:d1:bf:5b:
         04:fd:5e:55:69:b5:a1:d2:b2:1e:ac:de:dc:92:a0:15:d5:81:
         81:0a:6e:56:a2:61:7d:9c:78:e0:d1:ee:43:09:1d:eb:b2:25:
         33:59:04:c0:29:0e:95:70:fb:8f:51:62:22:5c:49:9d:eb:72:
         84:39:32:31:47:c0:57:e5:df:f5:d5:1b:4a:5b:ee:14:3a:b4:
         d6:13:67:d6:e3:df:c4:3b:02:af:8c:6d:91:f0:16:df:5b:aa:
         fa:33:20:b7:8c:ba:8c:e8:ad:f3:30:80:d7:0b:21:ca:37:9b:
         9a:cf:3d:7a:57:9e:85:49:36:75:57:44:40:25:a9:a3:f1:43:
         6e:11:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:35:55 2025 by rpki-client