Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/ce50c172-859a-37b4-a5d6-69292c41fb23.roa
File:                     ce50c172-859a-37b4-a5d6-69292c41fb23.roa (raw, json)
Hash identifier:          Nj0VqiuEdz9XRxA4kTiXpfyRHKcJMpYFTsmS3PlKhbw=
Subject key identifier:   29:FB:F0:E1:64:2C:E6:0E:81:DD:C1:4C:F3:71:3D:F9:0E:07:E5:39
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F4328584AADF115887E7DFC2464D56710
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/ce50c172-859a-37b4-a5d6-69292c41fb23.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     63290
IP address blocks:        66.245.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:15:88:7e:7d:fc:24:64:d5:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=efa2f272-275c-408d-9039-a9a915799243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:d4:4d:0b:e7:a6:49:66:52:38:7f:fb:3a:
                    14:fb:2b:cb:f6:cc:f7:c0:65:8f:87:e2:98:3f:16:
                    c9:e0:b8:4e:b5:37:a0:3e:18:90:37:23:fc:d9:77:
                    b8:a6:a6:27:02:a0:07:45:0c:31:43:61:85:a2:da:
                    d2:a4:06:43:5e:d2:7f:f6:7d:5b:cf:bf:7b:3e:07:
                    71:aa:0c:40:02:8d:34:2b:f2:eb:62:b6:f1:93:ad:
                    80:0c:8d:29:27:62:29:06:a5:30:53:ec:aa:80:ff:
                    3f:11:9e:c8:64:c3:d5:15:1c:4d:bd:b2:8b:36:2b:
                    4c:6a:aa:13:a3:09:0c:f7:9e:9b:cb:5d:92:bb:08:
                    c9:64:56:f1:00:d5:97:77:db:4d:79:9e:39:90:f8:
                    f3:ee:38:4e:d2:7b:07:2c:e5:1b:5c:5e:bc:c2:52:
                    80:00:3e:3f:41:f5:75:07:a4:45:b9:d5:42:c1:1c:
                    fc:3d:cb:25:72:4a:ed:e9:c7:3b:25:c1:0f:0e:43:
                    fa:b9:73:7a:40:b5:e4:05:44:7e:a9:31:82:e8:bd:
                    ba:07:9f:1e:c3:a9:17:e4:7b:f7:b7:6a:d4:b5:e0:
                    a0:e5:7b:1a:a6:52:47:ee:d0:31:0c:eb:4e:e4:e8:
                    ef:f9:d8:f7:af:1e:24:41:4d:0c:f7:ac:96:0f:b5:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:F0:E1:64:2C:E6:0E:81:DD:C1:4C:F3:71:3D:F9:0E:07:E5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/ce50c172-859a-37b4-a5d6-69292c41fb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:cd:9f:92:24:b4:ab:59:2d:f4:4c:7a:1e:0b:38:cc:72:
         84:30:09:08:b0:df:13:f3:99:e9:d2:74:ba:e3:19:a7:2d:1e:
         ad:2a:28:00:c4:86:b7:cd:3e:4a:5a:85:41:69:01:ce:94:6f:
         10:20:8b:bf:fa:9f:1c:a8:ee:ca:e4:03:aa:0d:af:c9:88:c9:
         73:aa:6e:e2:8e:94:5c:83:ef:34:74:4c:9f:57:d6:db:ac:8e:
         46:19:97:15:ef:af:e9:8b:99:12:3d:2b:98:d8:54:61:74:fb:
         d2:a5:20:12:1e:42:67:ce:d6:af:d5:77:ee:6e:40:8c:1a:97:
         54:67:56:36:bb:97:1b:9d:ac:4a:79:f8:f9:04:b2:88:cb:37:
         43:02:1e:02:0d:c8:84:26:5e:da:18:ca:c4:ad:82:59:2d:5c:
         08:87:44:b4:ba:b9:88:21:3c:81:74:e7:e4:8a:ba:31:dd:01:
         e0:51:59:96:a2:a5:41:ae:03:e8:8c:41:b0:96:61:42:da:60:
         fe:02:1f:35:a5:40:ce:15:e0:ec:b5:2d:84:d7:6d:69:51:5f:
         ae:a8:f4:46:42:91:63:9e:7e:b3:95:6e:99:53:5a:90:20:c2:
         b6:17:ea:dc:d1:5b:4e:e7:98:d8:4d:5f:cb:d3:ff:67:ea:af:
         cd:7d:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:01 2025 by rpki-client