Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30860.roa
File:                     AS30860.roa (raw, json)
Hash identifier:          S7d8xAsiwGJoumwL1/RVHnhIpDvuzeHkHRghcl2WaFc=
Subject key identifier:   BC:E6:3A:F1:EA:F4:AE:46:52:32:17:06:59:00:5F:1A:B2:78:15:83
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       45DEF0EC184E6A4335F338249753EBF3692E6CE8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30860.roa
Signing time:             Mon 05 May 2025 17:39:34 +0000
ROA not before:           Mon 05 May 2025 17:34:34 +0000
ROA not after:            Mon 04 May 2026 17:39:34 +0000
asID:                     30860
IP address blocks:        66.63.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 19:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:de:f0:ec:18:4e:6a:43:35:f3:38:24:97:53:eb:f3:69:2e:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  5 17:34:34 2025 GMT
            Not After : May  4 17:39:34 2026 GMT
        Subject: CN=BCE63AF1EAF4AE465232170659005F1AB2781583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:9e:43:f2:59:17:32:c5:dd:96:a6:c5:1f:
                    e7:73:b9:1d:13:69:1e:de:23:14:09:fb:8b:51:f8:
                    89:5d:d2:c9:2c:7d:0a:d9:e4:7c:c4:16:4d:48:75:
                    f5:c8:60:3a:d2:f0:60:79:86:db:bc:0a:15:ea:56:
                    fe:29:a5:73:3b:38:61:a5:19:f8:05:72:a9:57:33:
                    94:14:1f:4a:e6:60:f2:dc:86:a0:ea:f8:d5:ae:01:
                    73:ac:a9:5b:f1:9d:b0:20:a8:01:13:d8:7e:a4:47:
                    3f:d4:2e:95:17:8c:ce:af:43:d9:70:85:61:7d:db:
                    70:40:d3:d2:0c:e1:f3:11:83:cd:06:5a:58:69:c9:
                    f4:be:81:d6:30:6d:29:c5:3c:7f:ad:57:76:76:cd:
                    88:6c:bc:6e:a6:88:de:f8:83:a8:38:cf:b1:36:ac:
                    3d:c8:97:e7:ef:a5:4b:5b:5f:72:86:3f:86:8e:98:
                    91:34:68:a9:48:8d:48:c5:6e:bd:e6:a8:b6:30:d6:
                    f2:0f:52:8b:e6:93:5a:62:a7:98:8b:0a:4c:4c:d2:
                    46:83:18:87:20:84:7f:e5:2b:81:77:fa:8e:e7:97:
                    40:d3:16:59:70:27:e9:2d:9a:4e:95:f5:b2:a6:9a:
                    41:4e:ba:b7:3c:f6:5c:fe:5f:4e:eb:d5:17:6b:20:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:3A:F1:EA:F4:AE:46:52:32:17:06:59:00:5F:1A:B2:78:15:83
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30860.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:25:0c:93:fb:c9:3c:4d:2b:75:76:c0:b4:18:39:95:43:5d:
         3f:20:cf:f3:80:c5:8a:e9:e8:20:b7:c5:94:f6:a0:b1:bf:af:
         64:19:01:91:9a:ec:6f:0b:b2:50:c8:bb:7b:57:9a:63:87:7d:
         de:43:b7:26:41:79:71:26:d6:21:69:ae:5c:1e:fd:95:de:5c:
         6f:d5:19:cc:c1:93:83:ad:50:33:43:c8:48:48:26:c6:f3:fb:
         0f:88:a1:8d:7a:40:b5:6d:c0:4b:18:f0:6c:7a:14:34:11:fc:
         80:8d:63:7a:f1:82:a0:29:9b:a5:c7:f7:8b:b6:d5:57:ad:a3:
         9e:72:a2:bc:80:fb:41:ba:cd:af:55:f9:0b:59:66:68:d8:13:
         ac:e6:98:ec:fd:f8:98:7e:9d:35:0b:a0:c0:86:0d:2f:d0:3f:
         b4:91:6c:9b:01:d2:75:0d:9d:18:87:19:c1:1a:56:3f:8d:64:
         84:71:ea:62:1a:3d:d7:09:21:e6:f8:1c:09:0e:b2:5b:ee:1b:
         67:c0:ee:91:9a:d0:9a:96:83:ee:6c:2c:be:bd:fe:65:a1:06:
         ac:c7:dd:bf:79:9e:06:4d:34:d6:e4:35:b6:f1:31:e4:ce:07:
         68:0d:1a:d4:85:ef:79:e2:1d:6c:de:01:38:79:2d:c9:fd:83:
         c8:57:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:36:30 2025 by rpki-client