Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/01dc464a-6567-3e87-859f-47a048dffb46.roa
File:                     01dc464a-6567-3e87-859f-47a048dffb46.roa (raw, json)
Hash identifier:          idBlbKVio9sLNYOrETeuIIq55IKfGhMNyt9815FkIes=
Subject key identifier:   0B:37:C6:4D:55:9E:4C:51:64:96:9C:4A:7C:93:E3:46:FE:65:D3:45
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584A0D6A957C44BD1D13BB786B00
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/01dc464a-6567-3e87-859f-47a048dffb46.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     401241
IP address blocks:        200.5.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:95:7c:44:bd:1d:13:bb:78:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=f9b2c87e-8b58-443f-831f-1ac8ce0b5bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:f5:e6:ec:b3:a0:45:e0:53:7f:98:93:b4:
                    14:5c:c3:b4:42:d4:a6:a8:97:2b:cd:15:8a:6e:4b:
                    2a:72:c3:fe:44:26:b3:68:98:31:d4:e9:84:df:12:
                    4f:3b:df:fd:58:e1:89:a5:6f:b0:bc:1c:f0:58:98:
                    bf:20:16:85:e8:9c:e7:2c:44:39:fe:ba:30:5a:6a:
                    87:5f:24:b9:3e:b8:9e:bc:df:bf:4a:19:88:8e:60:
                    2c:85:9e:84:8f:33:66:33:61:f1:d9:06:57:fb:42:
                    57:a2:28:fb:cc:94:4a:0e:51:2a:76:7f:d6:0e:9e:
                    07:8c:e8:3d:a5:2c:38:97:86:e7:47:86:aa:67:0d:
                    10:dc:69:55:7a:ab:6b:10:87:7e:50:6f:89:56:7b:
                    93:c7:f5:09:44:96:95:6b:cf:88:c2:00:1d:40:2c:
                    84:e7:3a:74:ae:1d:1b:39:60:49:06:84:b6:b4:c2:
                    20:a3:64:6d:47:6f:de:6d:ff:a5:55:c9:3b:92:b7:
                    68:ca:00:79:93:9d:4a:56:9c:49:2f:1d:dd:ff:7b:
                    8b:a8:c9:84:b8:2d:6a:9e:40:ec:87:35:0a:24:7c:
                    4c:c0:9b:d9:e9:30:05:72:f9:80:93:bb:77:52:ab:
                    8a:76:67:8a:ae:80:09:ad:b6:71:b5:25:09:74:fd:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:37:C6:4D:55:9E:4C:51:64:96:9C:4A:7C:93:E3:46:FE:65:D3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/01dc464a-6567-3e87-859f-47a048dffb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:1a:b0:99:ec:c6:3d:3d:50:34:e3:05:48:ec:43:b6:73:
         74:0b:bb:be:20:fe:79:bd:f5:52:bf:3b:ee:46:1d:30:97:35:
         8e:34:a4:17:81:79:c7:61:8e:8d:11:c2:0c:3d:e2:47:5b:ae:
         0d:a1:02:ba:fe:de:23:1a:2a:ec:44:56:f9:1a:4a:c1:7e:f4:
         2e:18:ec:b6:7f:88:81:72:a9:0d:b6:ea:de:2a:c6:dd:63:54:
         0c:b3:89:2f:ca:c3:28:53:2e:9f:b6:f0:f6:14:a9:41:ea:93:
         cb:17:48:51:f6:ac:1b:50:33:2c:55:bd:98:3c:36:6d:8d:0e:
         00:6d:ab:a2:44:37:d6:31:f7:e7:fd:1e:f7:1a:b6:26:d3:77:
         50:df:df:06:70:df:17:28:ae:fc:b7:68:a0:e5:05:d4:b5:16:
         fb:73:5c:ca:99:3c:83:93:68:e9:7a:e7:7a:ce:37:5a:b3:f1:
         6b:cc:22:72:db:83:92:61:85:51:1e:f2:bf:b5:34:61:f7:8a:
         38:35:cc:80:4a:f9:50:80:a5:f3:4a:6f:90:82:52:7d:a6:d2:
         99:18:95:a2:30:1a:e8:47:67:15:c5:fd:d1:f0:e0:88:ce:fc:
         34:06:50:76:3e:94:07:b3:a6:4b:35:24:e7:0c:f0:b1:d2:71:
         55:f2:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:15 2025 by rpki-client