Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/b30e92b4-600c-34e4-ad5a-4f66b572b639.roa
File:                     b30e92b4-600c-34e4-ad5a-4f66b572b639.roa (raw, json)
Hash identifier:          LMAUM8/hURy9vDGC5XqJvVqL3DohTy5Ea7cYHMDqEBY=
Subject key identifier:   96:2E:2E:8F:97:A3:D7:B4:66:34:12:E1:EE:52:F7:68:D0:C6:29:AA
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584A331AF88C7125292FC70C2200
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/b30e92b4-600c-34e4-ad5a-4f66b572b639.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     12076
IP address blocks:        170.110.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f8:8c:71:25:29:2f:c7:0c:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=cdbd75ef-237f-4b30-af8f-d73e820ec20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:37:b4:a5:26:da:dc:7f:ef:23:cd:f4:36:
                    fb:a9:3d:53:ac:36:72:14:1a:18:0c:a4:63:fc:ed:
                    8e:47:9c:e9:95:2c:7d:60:5c:e8:23:42:73:58:77:
                    ac:92:97:c5:d2:91:7e:80:4e:ae:c9:05:78:83:94:
                    52:01:78:66:41:bb:01:b2:a3:1a:fc:1a:03:2b:10:
                    7a:05:90:17:7d:2d:57:63:60:35:ff:64:1a:87:23:
                    79:8b:2d:eb:86:54:10:15:07:31:83:5b:c1:64:6f:
                    7b:bb:69:cc:44:1a:00:72:80:61:9c:a1:c5:3d:72:
                    18:62:d7:c2:0b:c6:2b:b1:48:0c:ed:a8:51:5a:3e:
                    11:8c:2b:f1:05:ad:30:d6:2b:a8:13:26:c2:e4:f4:
                    5f:7e:b5:89:28:63:2b:cf:b9:45:6b:a5:47:be:5e:
                    fe:1b:d2:f3:4f:63:30:22:d6:ea:62:1d:05:2f:d8:
                    70:06:ee:ec:4c:cd:b3:82:39:4e:b5:a1:41:7d:c8:
                    0d:d4:d5:8f:87:6b:62:e7:4c:d3:f2:35:27:80:55:
                    23:97:66:46:17:24:dd:f2:42:a6:07:fc:05:6f:66:
                    8f:d6:d7:c9:f2:50:d2:1e:e4:94:d0:52:cd:3c:e9:
                    4a:0d:b0:d6:0b:a0:50:03:50:5c:63:94:a7:c7:78:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:2E:8F:97:A3:D7:B4:66:34:12:E1:EE:52:F7:68:D0:C6:29:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/b30e92b4-600c-34e4-ad5a-4f66b572b639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:d1:d5:f2:07:9c:99:69:fa:c9:83:c3:d9:4a:4e:92:bf:
         52:1d:43:34:fe:75:a0:24:ae:83:d1:f2:80:65:90:b5:04:59:
         b5:36:14:ec:ef:20:4d:ec:fd:8a:e3:a2:43:15:43:66:be:a2:
         56:96:37:03:49:e7:fd:cc:7b:d7:17:fb:aa:e5:d9:68:4d:5a:
         4b:b7:ca:da:75:3f:eb:bb:5e:0b:0e:22:7b:cc:15:10:f4:f7:
         47:7d:0a:3a:0f:b8:42:f2:83:02:ab:78:c3:33:24:6d:71:5a:
         43:e9:78:b9:78:52:33:52:5c:ef:b3:6e:43:fe:e2:99:5f:fb:
         c3:ce:13:82:fa:e4:db:5e:39:f1:50:00:21:11:c8:cf:97:6f:
         eb:46:72:83:2e:80:7b:90:21:96:8f:4a:06:ec:6d:86:12:8a:
         0e:f7:25:7e:3d:1f:44:6e:94:dd:6d:d6:da:32:a4:6a:3f:2d:
         15:fd:4b:a6:8c:78:2c:70:6e:a5:be:18:f6:7f:10:05:0d:f2:
         a8:7e:fb:4d:09:6b:de:57:65:ad:22:3d:dc:d9:bb:16:1c:4e:
         cb:57:25:f0:b1:e0:83:b5:b5:db:b8:9f:ee:48:36:5e:04:34:
         25:58:3b:73:c7:cb:74:92:95:58:2e:b7:3f:1a:08:80:e3:b5:
         5b:d4:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:26:12 2025 by rpki-client