Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa
File:                     9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa (raw, json)
Hash identifier:          cSLZc8HtcQKh7zn0WY6WrDxago9Br66n4GVuyRXM0eM=
Subject key identifier:   4A:E0:3D:0B:38:42:85:07:B8:70:83:1A:77:38:59:38:CB:D0:C5:1A
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858499829CF095EE1AE596010D280
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     11090
IP address blocks:        185.30.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:cf:09:5e:e1:ae:59:60:10:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=8c586790-434c-443c-a83b-70530da8b15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:32:a6:8c:d2:47:76:74:ab:8b:65:34:da:
                    22:78:ea:84:77:33:4c:3c:0e:7a:cc:55:c4:76:8e:
                    6b:cc:6c:dd:f2:90:4a:24:2c:e8:54:74:7b:b9:ac:
                    61:59:23:80:e4:34:c7:35:12:51:41:0e:7b:0e:58:
                    c5:75:96:ea:58:fe:69:0c:b6:c8:47:b2:78:8a:5a:
                    64:f1:bb:65:b8:4d:2c:85:ad:7d:ce:66:76:c2:aa:
                    71:6b:6c:12:a7:42:fc:5f:6e:1e:89:07:8f:52:24:
                    e8:74:d7:3f:df:f1:1b:34:0f:c7:14:4f:0c:9f:4d:
                    06:e5:58:c9:87:54:73:c8:aa:7f:36:d7:bf:f5:07:
                    b6:1d:ba:26:78:9e:65:14:f5:2d:02:8f:01:28:64:
                    f6:d6:4e:07:a4:3e:87:ba:b0:eb:f5:62:c3:f0:03:
                    e2:6a:60:e3:79:b0:f1:bc:b1:8f:8f:ce:d4:40:28:
                    59:82:2d:64:85:dd:34:ec:b4:4e:f4:d9:17:5b:26:
                    cd:db:94:c6:1a:85:f0:b1:23:18:60:79:6f:77:8e:
                    f7:49:98:9d:9d:ae:02:ba:3a:97:29:54:94:fb:0f:
                    33:d8:97:57:25:3c:5c:e9:8e:5a:63:74:ca:99:10:
                    d4:c7:4f:e0:4e:c6:3c:7b:6c:6f:ca:3d:3d:ff:27:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:3D:0B:38:42:85:07:B8:70:83:1A:77:38:59:38:CB:D0:C5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:94:0b:f3:de:c5:63:5b:20:e1:fd:e0:21:85:ba:52:ea:
         a1:6e:d4:3f:36:f4:40:7b:d4:94:26:9f:75:6a:87:f7:dd:f7:
         4c:6b:bd:16:22:a4:fe:85:da:52:b7:4d:d7:14:55:de:c8:2a:
         af:3f:ad:de:f0:98:5a:1a:b0:62:d7:93:e9:5d:ac:d5:d2:6d:
         13:d2:05:09:81:8c:50:9a:36:5e:d9:22:2c:d4:9b:6b:40:22:
         16:cf:5d:e9:15:71:8e:55:e5:6b:b6:84:5c:d0:ed:e3:6d:1e:
         4a:28:1b:72:aa:0a:8b:87:43:bd:0e:e9:52:fd:69:d0:d9:f0:
         a3:b6:1b:06:08:cb:3b:85:f0:85:51:49:6a:47:44:28:e2:ff:
         e6:84:56:28:4a:c8:9f:67:20:23:e1:57:73:86:4e:9c:a7:e8:
         c0:42:54:95:c4:99:9b:1c:95:cf:68:23:ac:a5:95:90:e6:bd:
         8a:cf:e9:a3:e1:96:54:1d:f0:bf:f0:70:be:31:b4:9d:51:28:
         8b:bc:c8:75:ed:7b:e5:e2:aa:a8:ce:fb:d2:57:c6:e9:2a:6f:
         2d:00:b5:56:7c:62:fe:15:53:64:f4:ef:d6:87:ba:a1:54:95:
         2f:d8:b9:ee:dd:ae:0b:50:9f:29:65:43:9b:5e:8d:40:e9:04:
         39:fd:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:13:38 2025 by rpki-client