Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142/30b3ec69-f749-3bcd-870f-005134f0b854.roa
File:                     30b3ec69-f749-3bcd-870f-005134f0b854.roa (raw, json)
Hash identifier:          qROhQvAeZkqjIuGFuU+g3Xbt9QG+LPW8U+3PqasXAWA=
Subject key identifier:   AD:04:04:3D:60:DF:BF:1C:5D:6F:B9:8D:B8:7D:61:0C:78:0F:D0:38
Certificate issuer:       /CN=deba6c30-8e89-45ed-a780-8edee740f142
Certificate serial:       010D0C9F4328584B2A2C2EB34BADA7AB12C1DDB8
Authority key identifier: F4:AF:16:58:98:B6:1F:0F:EB:33:AF:75:BB:B8:15:86:3F:87:D1:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142/30b3ec69-f749-3bcd-870f-005134f0b854.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     397667
IP address blocks:        69.94.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142/deba6c30-8e89-45ed-a780-8edee740f142.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142/deba6c30-8e89-45ed-a780-8edee740f142.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2e:b3:4b:ad:a7:ab:12:c1:dd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deba6c30-8e89-45ed-a780-8edee740f142
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=1f14f379-9a60-4532-9d27-722accf94d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:f5:ae:fd:65:ab:e8:82:d2:84:f4:2e:ee:
                    31:35:c7:41:6d:33:69:df:c4:dc:0a:0f:e8:c6:bd:
                    dc:b9:ea:ff:1f:6b:41:61:33:f6:79:27:58:5b:64:
                    03:a0:00:cb:02:0b:f1:4f:e3:02:26:6e:a1:4e:d4:
                    3e:b5:5c:21:9d:e9:71:ac:cd:10:0b:f6:dd:ab:85:
                    d0:9f:5a:c8:85:1e:76:73:98:5f:2d:2c:ef:a9:5d:
                    bc:cb:14:50:be:8c:cb:3c:e4:92:b1:8a:03:ef:79:
                    34:15:ae:1b:8c:0e:27:96:22:fa:0f:2f:f0:a6:08:
                    02:b1:f6:49:dd:d8:98:bf:b9:df:3e:21:12:a6:13:
                    7c:93:ae:26:f2:86:74:48:e3:c3:99:16:ee:13:6e:
                    3d:e7:6d:b5:b5:01:7f:57:98:68:42:c1:01:9c:66:
                    02:d0:62:1c:d9:cf:fb:e6:f6:ed:23:ec:65:a4:7e:
                    36:ec:61:3d:98:38:93:c0:ec:27:f0:b1:7c:ae:81:
                    75:0a:1c:9a:73:1d:2a:d9:af:f1:ab:24:d6:73:fd:
                    b9:ce:9f:4f:c4:1d:7d:0c:80:21:d7:67:67:65:03:
                    cf:7b:98:aa:d0:29:c0:81:d9:39:85:e3:4d:60:ef:
                    36:a6:77:a6:41:87:d4:ee:ba:d5:f6:80:a1:4b:e2:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:04:04:3D:60:DF:BF:1C:5D:6F:B9:8D:B8:7D:61:0C:78:0F:D0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142/30b3ec69-f749-3bcd-870f-005134f0b854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142/deba6c30-8e89-45ed-a780-8edee740f142.crl

            X509v3 Authority Key Identifier:
                keyid:F4:AF:16:58:98:B6:1F:0F:EB:33:AF:75:BB:B8:15:86:3F:87:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/deba6c30-8e89-45ed-a780-8edee740f142.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.94.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c7:81:56:66:7b:db:19:96:5f:94:cc:da:cd:0f:7e:78:59:
         94:58:d4:f3:18:b3:be:71:cf:2c:e2:28:8a:a6:18:f5:33:57:
         f9:06:8e:6f:d8:11:2f:7c:77:85:94:1e:8a:67:eb:48:6c:20:
         99:ba:90:f9:73:6d:d5:91:25:af:38:7a:37:42:b2:e1:ad:09:
         f9:0a:68:19:85:51:ae:c1:3f:66:b7:b9:00:1a:b1:1a:5b:01:
         a8:f8:d3:6d:db:ba:f8:4b:cc:4d:78:a5:38:8a:2d:fb:78:0b:
         72:e8:b3:4f:36:9b:2b:cd:4f:73:8e:6e:46:ec:d9:80:46:aa:
         2c:25:66:b8:b9:23:e7:95:aa:2f:12:8b:56:d2:aa:cb:fc:b9:
         30:f2:10:46:c6:3a:ac:35:03:e4:8f:7f:0d:4d:79:22:46:dd:
         73:e2:86:1f:63:08:ef:d6:d2:1b:95:e1:e5:28:ab:16:cf:49:
         2a:3d:f5:53:56:03:b5:1a:90:c8:e1:e3:b0:d2:9f:9d:95:78:
         88:87:72:78:cd:38:96:50:36:97:43:70:3c:1b:88:97:68:ab:
         7b:bb:fb:79:43:be:64:ea:d2:e8:de:8a:be:50:48:f6:c2:51:
         13:a2:75:f4:c0:68:27:06:4d:ab:ed:97:5e:03:f8:0a:09:bd:
         03:5d:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:09 2025 by rpki-client