Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa
File:                     0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa (raw, json)
Hash identifier:          a1Rw3RAynbrYKvQhtpLsWxyEwU0CeCFwYBwR5vniZck=
Subject key identifier:   FD:85:BD:74:11:53:5B:B2:C4:13:80:1C:45:A9:72:F2:DC:88:35:9D
Certificate issuer:       /CN=766eb068-340f-4e16-9d08-04181e100ca2
Certificate serial:       010D0C9F4328584B80B76183644B4703C8A32080
Authority key identifier: 09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     63278
IP address blocks:        192.64.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:61:83:64:4b:47:03:c8:a3:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766eb068-340f-4e16-9d08-04181e100ca2
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=a694c2e6-2249-4e65-b1cb-7430d4ca20cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:f1:1a:e3:df:bb:a1:87:50:ae:60:51:0e:
                    ef:3e:6e:eb:3d:3f:11:bf:d5:6b:75:ad:3d:c7:63:
                    1d:f5:1a:df:cc:92:04:d4:8b:40:c3:a6:70:a0:72:
                    5a:a6:8b:e4:7d:b1:1f:97:a8:e5:fa:53:99:7d:a8:
                    1e:31:a2:cc:c9:c1:c7:f6:fa:af:53:f3:b4:24:ec:
                    ee:83:c5:22:9e:db:37:c1:f1:13:ce:b5:3f:b8:62:
                    d6:d8:e8:f6:8b:2e:4c:0f:08:6a:db:1f:fd:0a:a7:
                    72:6b:de:19:a8:dd:1a:e1:33:05:5a:de:55:a1:aa:
                    1f:12:78:a4:15:15:42:54:4d:23:ac:7e:a4:fd:d7:
                    e9:ee:59:f9:61:d2:c3:de:22:92:dc:d5:5d:32:19:
                    96:d2:76:ad:59:ea:d1:55:be:4b:60:ab:2b:45:dd:
                    46:03:6f:21:83:51:b5:b3:51:c4:22:2b:cf:54:84:
                    fb:f8:2c:3f:e8:82:c9:fc:53:b9:ef:47:c6:76:a5:
                    7f:80:78:dc:68:af:73:b0:5d:04:7c:88:60:cd:3c:
                    f5:6a:d3:7a:a0:dc:de:f6:27:0b:39:eb:4f:35:55:
                    3d:df:7a:31:a5:de:ad:84:f8:ac:32:a2:bb:ec:8d:
                    9b:f0:66:85:aa:f3:be:5b:2f:28:2e:ba:5d:51:57:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:BD:74:11:53:5B:B2:C4:13:80:1C:45:A9:72:F2:DC:88:35:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl

            X509v3 Authority Key Identifier:
                keyid:09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:f2:6e:c7:b4:c1:76:d8:4a:95:06:aa:9b:c3:c1:59:64:2a:
         3f:d4:7c:ee:74:e0:e9:40:67:73:05:a2:e0:23:f9:de:77:ea:
         8a:f2:be:00:4d:86:08:10:96:77:44:c6:3c:b1:8d:d2:12:73:
         31:85:ad:06:84:0e:e1:fa:dd:55:b3:d1:46:ec:96:0c:b9:67:
         77:e0:7a:3f:c9:0e:16:f5:22:84:86:ec:3f:1b:ea:74:74:b0:
         42:10:ac:ca:b6:b1:e5:c5:c1:ff:22:bd:14:29:76:42:58:f3:
         50:d0:1f:2c:d3:24:cb:a5:24:5a:06:58:88:ea:ae:39:35:7f:
         69:7b:86:bc:09:d3:a4:06:03:bd:4e:52:7e:f3:49:e7:d5:73:
         cb:c6:aa:35:64:0a:51:60:3b:eb:75:cc:b9:a1:a5:f8:9a:98:
         75:27:f3:b7:2d:0e:22:f0:4c:ce:5e:fe:63:39:e0:b8:de:7d:
         ed:64:d7:20:ed:c7:1b:02:fd:4b:c7:42:51:cd:77:0d:a0:79:
         ee:6e:56:93:6e:dd:84:0e:b2:0f:b0:95:32:0e:d6:e1:01:67:
         a4:6e:57:2b:06:e2:6c:e7:1f:84:c4:b8:ac:93:a6:f3:aa:99:
         82:a8:5c:fb:2e:4b:09:74:a9:1b:b4:45:42:dc:9a:e8:e3:d3:
         33:2f:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:45:45 2025 by rpki-client