Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa
File:                     b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa (raw, json)
Hash identifier:          IxmeGgE2wGPd8edQdGwOHq90wzJV6zf4b92XuXeAjRE=
Subject key identifier:   9D:76:B4:CA:FC:A0:B1:62:F5:17:B2:E2:7B:11:D6:37:D2:EA:BD:3E
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A77808C8F5877742388BB7920
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     11090
IP address blocks:        185.30.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8c:8f:58:77:74:23:88:bb:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=d2d1060a-2e76-4ae2-adb0-41cf3b581559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:31:40:b2:ba:b4:58:f6:98:be:5a:15:17:
                    29:d4:67:78:96:9f:ff:fb:d5:ad:c0:0a:44:1b:8b:
                    b8:64:7d:87:65:b8:1e:37:64:a2:3e:af:aa:e5:dd:
                    a3:7c:cc:5a:39:93:97:cd:09:8b:b7:32:3b:49:7b:
                    23:a3:ca:fc:de:f5:e3:e8:d9:43:cb:48:b4:dc:1c:
                    d9:1c:a4:35:59:7f:48:4b:28:7f:6d:31:16:26:b7:
                    89:0d:27:1c:ec:35:f2:57:15:21:51:74:d4:59:ce:
                    ac:23:90:53:82:bd:34:0e:f4:62:bb:a0:9d:9d:f1:
                    92:32:01:c2:96:f2:b5:da:6f:58:92:82:96:ad:4b:
                    8d:84:c0:f5:49:59:b4:0c:7a:35:bd:89:20:b3:97:
                    83:2c:9b:78:2c:91:ff:de:4d:c4:e4:07:ec:5d:6c:
                    d4:ec:ea:bf:06:f1:e7:38:5c:2a:46:db:ce:c3:30:
                    06:60:38:4c:e6:6b:57:11:05:56:8c:28:fd:23:36:
                    bc:20:65:d7:13:68:54:63:fc:0d:93:81:f6:3c:a5:
                    8a:f8:b8:66:e7:2b:f3:6b:85:cc:39:0c:1d:1f:14:
                    7b:42:a3:d0:64:e8:42:a7:4e:15:d7:aa:97:03:3d:
                    85:97:7f:22:0f:a1:07:e8:58:3d:ef:05:e8:22:59:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:76:B4:CA:FC:A0:B1:62:F5:17:B2:E2:7B:11:D6:37:D2:EA:BD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b45b2c0d-b348-381d-a10f-4b239ad6b76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:7e:f9:ab:e5:5b:57:a2:77:8d:dc:12:0d:01:6e:53:ab:
         57:b1:3c:e2:75:59:0c:63:04:a3:7d:b4:7b:0c:a1:fc:7c:44:
         ed:71:d1:63:d6:df:55:f4:cd:12:e9:a5:f7:a9:1d:2b:d4:ce:
         6c:bc:51:c7:9a:fa:f7:57:5a:32:4d:26:4f:a6:c8:65:4f:fa:
         21:b9:e9:c2:13:7c:80:80:0c:72:57:12:80:18:b7:22:c5:4d:
         3f:1a:8e:df:54:a6:18:99:41:b1:5e:55:84:e8:92:f7:5b:04:
         be:21:bb:28:f3:09:b0:d9:27:5d:95:34:d3:3a:73:ba:ce:26:
         58:ab:94:32:be:91:52:84:93:be:0c:18:f9:2e:6e:60:f8:b4:
         8c:b3:3b:d0:1f:a4:f2:e3:a8:8e:df:4b:85:9b:1f:3f:77:a7:
         5d:68:0e:a1:39:4a:a2:bd:f9:13:c6:aa:9b:e9:cd:8d:f7:a8:
         da:6a:aa:0d:f1:b3:c2:36:a1:89:1f:83:bd:23:4f:e3:d5:1e:
         7f:92:e0:5f:b8:25:47:39:22:2c:81:e5:5a:4f:8f:7d:58:48:
         fd:9b:c7:2e:48:ba:f1:d8:f9:56:db:82:85:16:45:6f:ab:7a:
         03:34:03:65:69:c9:e4:42:80:6e:da:0c:37:96:d5:ee:8b:63:
         63:79:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:46:51 2025 by rpki-client