Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/30d04b89-4e0b-3490-b07b-451701cecdb1.roa
File:                     30d04b89-4e0b-3490-b07b-451701cecdb1.roa (raw, json)
Hash identifier:          322g+MFhfJ1qH6LHFBrwBJJprDfBkuG6HvXT5+ShOCw=
Subject key identifier:   34:CF:76:E9:46:0E:1B:EE:5F:44:F7:A0:ED:8F:7A:A6:5A:AB:BE:75
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285849D85F81BF0BF2BBD31CD0D380
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/30d04b89-4e0b-3490-b07b-451701cecdb1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     1280
IP address blocks:        149.20.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:81:bf:0b:f2:bb:d3:1c:d0:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=f2dd5072-bd79-4632-b41c-b72391610ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:e9:0c:97:02:cb:75:48:f2:bf:73:2f:08:
                    6c:c6:45:cf:06:91:d4:f0:2c:bc:3c:13:7c:88:79:
                    30:9d:f3:f8:9d:4b:e4:ee:22:a4:00:5f:9e:18:63:
                    36:75:4f:1c:a2:ca:f8:54:88:97:05:c7:e9:b4:d7:
                    d4:ea:d5:e5:c4:3d:38:2e:29:2e:ab:d8:41:b7:8b:
                    8b:f2:8a:3f:e8:25:72:15:7b:76:b8:9a:92:51:38:
                    48:06:39:47:7c:68:1f:66:09:9b:77:97:98:41:9a:
                    55:3c:20:a2:df:64:ed:31:3a:fe:09:55:90:54:a8:
                    1a:3e:84:26:54:4e:0e:c5:1b:16:df:3b:25:89:fd:
                    b2:7f:8c:24:ee:8e:fd:f5:e8:90:55:3f:3c:93:76:
                    45:c1:da:cc:17:dc:7d:67:02:12:b5:66:ef:ee:08:
                    ed:8d:c7:c2:c2:71:eb:0a:75:f4:de:11:62:8a:0b:
                    5a:24:45:4b:0e:01:37:27:3c:09:d8:98:e7:60:ec:
                    b7:70:ad:ed:08:74:fc:80:56:70:cb:da:83:ef:83:
                    6f:8a:0a:9a:49:d9:e1:1d:63:59:67:c2:e3:b2:9e:
                    85:e1:a0:8c:74:81:af:ef:a8:6f:60:3b:d5:8a:30:
                    4e:f2:e0:f6:ac:9f:3d:ec:ac:49:1d:bc:fd:87:be:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CF:76:E9:46:0E:1B:EE:5F:44:F7:A0:ED:8F:7A:A6:5A:AB:BE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/30d04b89-4e0b-3490-b07b-451701cecdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:1a:75:47:81:bb:3b:11:b2:f4:fd:a4:81:6b:f4:b9:b4:
         79:bc:3c:ef:3b:7e:c6:99:5c:82:0e:24:67:03:36:17:6a:2c:
         25:9d:28:fb:b4:6a:0c:98:ac:cb:c5:56:5f:ee:27:3b:e8:dc:
         bd:9d:6a:a4:9e:e0:8d:4d:1a:48:69:d7:00:89:89:22:a0:83:
         47:9d:50:b7:12:ce:9d:3e:69:2f:53:d5:5a:5a:76:09:5c:bf:
         51:0b:db:08:80:16:64:50:ef:b2:65:4c:59:85:3f:af:cc:68:
         61:2b:d1:d3:d9:fd:d5:0d:78:2d:1d:ae:24:74:20:40:5d:28:
         9f:39:eb:83:50:ed:68:ea:37:ff:72:37:ad:2b:4f:72:c3:5e:
         ab:24:c4:69:18:82:b0:d5:18:5a:fa:7b:c3:5d:a5:72:0c:95:
         e3:c8:3d:18:e9:f5:fa:29:d0:b5:c1:5e:f9:94:f0:27:1f:fd:
         a0:4d:5d:e2:41:54:03:f1:60:5d:b0:8f:c5:86:81:56:26:9d:
         f7:ee:98:03:66:15:85:44:85:97:7c:21:09:74:dd:fb:15:2b:
         20:34:89:5c:e4:cd:10:39:e4:d0:94:31:55:21:6d:f6:25:4d:
         d2:9c:d8:08:68:4e:4f:19:84:47:a8:78:71:d6:b1:7e:93:f9:
         7e:b7:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:01:51 2025 by rpki-client