Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
File:                     1a9639da-a216-3ece-b327-c09a057856a3.roa (raw, json)
Hash identifier:          mrMo7uEtjVStvN8glpgmI9kF/+3JYGO3zKauBW3n7J4=
Subject key identifier:   32:43:F3:32:2E:8B:5D:CF:4A:4B:A7:9E:D7:69:DE:B8:3C:D1:AB:70
Certificate issuer:       /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial:       010D0C9F4328584E131983E6FAAC7DCCE9A2E680
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     81
IP address blocks:        152.30.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:83:e6:fa:ac:7d:cc:e9:a2:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=afb2d683-f79b-4b75-9660-6126b0e7aab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f3:1d:54:f6:0f:ae:6b:fb:a6:aa:70:3a:f6:
                    d3:f4:ff:2a:4b:1b:6f:2e:e8:07:f9:8e:98:25:a8:
                    e6:6b:49:1c:7a:89:6b:ca:57:ef:92:fb:7f:e2:05:
                    f6:98:80:72:bd:bc:0d:18:dd:d0:d0:22:96:28:15:
                    e8:a2:55:2c:83:39:18:f8:2a:0a:0d:73:54:8f:29:
                    a4:fd:5f:10:b7:16:f5:04:16:ad:20:95:35:b2:4d:
                    9d:72:95:ee:01:62:86:f1:83:1d:44:5c:ef:0b:cc:
                    da:b3:4b:6a:31:23:15:d5:fc:46:5a:01:fb:87:4d:
                    62:f7:67:1a:89:25:80:05:ce:59:d7:84:4d:11:12:
                    c4:b3:cc:ff:d9:73:3f:f1:db:23:96:b9:d9:98:4d:
                    07:8c:5f:32:40:7a:e3:64:2b:a1:f4:d6:77:e7:37:
                    cb:b7:32:a1:9d:13:a4:bc:b2:72:ab:aa:2f:58:0c:
                    70:53:67:4e:dd:9f:09:a7:97:7b:ef:fd:7a:6e:9d:
                    25:b0:12:f1:85:3a:51:5e:8f:d7:14:9f:85:8e:bc:
                    b3:12:b3:cc:37:2a:14:1f:21:bd:e7:68:1f:2d:c1:
                    fb:ba:09:54:42:c6:6c:e8:5e:b1:71:b6:16:cd:2d:
                    ba:c4:f9:6b:f0:9a:a3:0a:f0:5d:6f:be:e3:a4:eb:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:43:F3:32:2E:8B:5D:CF:4A:4B:A7:9E:D7:69:DE:B8:3C:D1:AB:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl

            X509v3 Authority Key Identifier:
                keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:71:62:e4:9f:d0:ef:a0:df:21:9f:0b:e7:ee:73:65:a7:9b:
         7d:6c:8c:6e:23:b4:f7:50:ae:b8:c0:d9:d3:5c:4e:0a:b8:0b:
         f2:9d:cd:4a:06:13:70:47:8f:53:87:cf:69:ec:3a:e0:d4:56:
         89:db:0d:ef:c4:28:43:4a:15:95:16:ab:9b:5e:95:1f:97:c0:
         58:3d:b1:01:d3:f6:bf:cc:8e:ab:22:33:07:d8:78:28:c7:ab:
         19:cc:5e:62:ae:8e:18:16:67:a1:e2:e4:21:88:63:5f:87:16:
         ec:22:b5:93:6a:9a:41:f6:2f:f1:9c:61:20:b9:f7:b1:32:11:
         8f:a7:0c:fd:a8:77:a5:b9:4f:fc:3b:2c:94:6d:55:d2:53:84:
         00:4c:7d:ba:10:74:da:7d:39:88:c9:bd:b8:5b:55:6a:c8:22:
         af:75:f8:61:63:eb:79:82:66:23:6f:cd:12:19:51:79:4e:12:
         22:fa:c3:fc:97:c7:d6:84:cd:26:a6:02:42:22:be:0f:06:32:
         3d:dd:5c:59:7e:46:ab:c5:49:e0:c8:a7:21:48:7c:78:7a:a3:
         69:50:78:db:10:4b:d7:c7:c0:6f:78:b4:3c:4c:24:53:c3:5d:
         2b:61:b9:58:65:1a:63:df:83:f7:2a:20:2f:35:d4:a1:a2:e4:
         c9:7f:6e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:29 2026 by rpki-client