Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          QMNwqw1dSWMm4iHENts6AJwL6vdUcqSJuqwWdzfaEYY=
Subject key identifier:   61:6E:9F:BE:0A:16:0A:DB:78:63:5B:8A:AC:E4:A4:64:43:7A:F7:5F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6E78E2E87738415FEEFAEF6DEF5450B92252A768
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30058.roa
Signing time:             Mon 22 Sep 2025 07:16:52 +0000
ROA not before:           Mon 22 Sep 2025 07:11:52 +0000
ROA not after:            Mon 21 Sep 2026 07:16:52 +0000
asID:                     30058
IP address blocks:        40.223.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:e2:e8:77:38:41:5f:ee:fa:ef:6d:ef:54:50:b9:22:52:a7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 22 07:11:52 2025 GMT
            Not After : Sep 21 07:16:52 2026 GMT
        Subject: CN=616E9FBE0A160ADB78635B8AACE4A464437AF75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:78:5f:7b:50:df:36:00:18:d5:52:2c:d0:
                    74:d4:b8:10:c3:c9:38:f8:40:01:35:be:3a:ea:a7:
                    8b:43:0a:fe:ce:58:8d:54:c6:37:0d:1d:c0:05:1e:
                    9c:2f:89:8f:89:8b:38:e0:9f:a3:f8:2c:ff:4d:b2:
                    be:c4:b7:11:39:6e:ed:de:b2:d4:87:40:60:2d:a3:
                    b9:45:eb:9a:d0:d4:40:08:f2:de:00:e2:cd:00:0b:
                    79:58:65:31:81:1a:6f:c3:44:08:bb:4f:85:57:d8:
                    42:f1:5d:83:40:73:26:c1:00:65:1e:7f:85:1a:61:
                    48:c1:c5:97:68:f9:fc:0c:83:a5:33:15:27:10:97:
                    b3:1f:94:46:25:f8:98:88:a5:0f:15:24:3b:1d:f4:
                    c9:e3:65:6d:93:fd:cf:1c:fa:49:3a:3e:01:65:30:
                    77:cf:f5:22:be:79:70:27:74:ca:61:0c:da:27:1c:
                    36:89:6c:1f:46:7f:79:a7:7f:e7:1d:b0:6f:f9:b0:
                    10:b4:65:3c:95:e7:b2:6c:c7:e2:18:dc:97:82:78:
                    15:6a:a4:f4:77:70:c8:f2:fa:18:c8:15:f6:4c:ae:
                    f6:b5:8c:71:aa:c3:2a:be:39:e1:65:03:7b:f1:89:
                    17:c7:46:b6:19:0d:94:1e:fe:07:12:fc:e7:69:12:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:9F:BE:0A:16:0A:DB:78:63:5B:8A:AC:E4:A4:64:43:7A:F7:5F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:b4:43:76:64:2f:a6:3b:68:05:f2:5f:fb:08:66:e7:37:
         ad:38:41:db:10:d7:8d:bb:05:fb:a4:9b:eb:f4:27:b7:fe:e9:
         6f:7e:34:ca:49:64:80:ba:ef:81:89:58:d8:08:e7:97:bb:b9:
         31:76:1b:1c:dc:9d:50:e2:b1:43:76:da:cd:4f:71:04:3b:bf:
         56:8a:bc:bf:04:9d:f6:f4:0d:c1:98:49:61:81:8b:de:58:5f:
         d4:a9:0c:31:e7:d1:28:96:a1:d4:e4:24:fa:8f:b7:4c:8b:f5:
         98:6b:4a:e0:4d:18:b8:1c:05:50:d4:b3:db:db:31:ca:3f:55:
         28:92:c1:40:ce:0a:15:e5:7b:63:08:4d:ef:f9:8e:e2:5f:fc:
         62:29:c9:d4:0a:80:4a:26:02:a6:ff:04:4e:38:37:9c:74:26:
         72:e8:ed:b1:56:1c:3e:2b:3a:40:95:6a:dd:12:36:a4:a7:08:
         6c:c2:a8:3e:1d:26:1f:8e:45:6a:60:10:24:7a:92:9b:58:53:
         a7:55:e5:28:bc:2d:1e:77:f3:55:06:2b:24:19:4f:75:a2:28:
         8c:71:bb:2b:da:9c:19:e9:6e:7a:35:2a:13:9c:f6:74:1f:da:
         eb:57:c1:e6:c0:9f:01:60:d3:ff:94:77:30:25:5e:3e:f3:17:
         6c:78:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:33 2025 by rpki-client