Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/349d3b72-a194-37a3-95c4-97b0c3e9f593.roa
File:                     349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (raw, json)
Hash identifier:          Nc5Toc66fnqZl4CW0KYRuzxneteLba0zdJ/NpurzUUs=
Subject key identifier:   68:AB:90:89:2A:FB:F8:75:28:9C:65:56:CA:27:9A:9B:44:19:98:FF
Certificate issuer:       /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial:       010D0C9F4328584B742751D68248CA3CDD184FD0
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/349d3b72-a194-37a3-95c4-97b0c3e9f593.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     81
IP address blocks:        152.30.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:51:d6:82:48:ca:3c:dd:18:4f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=acaf1003-80aa-4012-83ba-f88943e5052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:6c:77:d8:77:cb:31:9b:8b:20:9c:1b:be:
                    9b:5e:bb:19:2c:d5:3b:45:11:5e:1b:17:45:98:9a:
                    00:28:91:66:5c:52:c9:1c:ff:9d:e7:f4:10:22:6f:
                    a3:aa:65:57:be:bb:d8:f5:60:d1:38:e9:c8:48:a9:
                    d8:93:46:60:3c:df:75:db:f6:d2:02:aa:c0:85:1d:
                    e5:bc:3a:cb:48:d3:55:08:46:19:01:eb:0f:a1:33:
                    03:fc:13:72:b6:a7:03:6a:61:87:31:d3:47:36:b6:
                    72:79:18:0d:19:5c:ad:6d:0d:e8:20:ad:f1:ca:be:
                    87:3d:b7:06:30:41:9c:e7:74:79:69:ab:12:d6:52:
                    f0:92:d6:fc:1c:19:91:4a:12:a5:b0:89:ae:be:b5:
                    a8:6e:82:79:b6:78:b4:cb:54:3d:3e:f3:fd:2b:d0:
                    07:01:81:1f:7e:92:5b:ab:5f:43:49:ca:f9:cf:6b:
                    78:25:62:93:bb:e9:7d:32:b6:9e:4c:90:67:50:94:
                    ab:a0:87:2d:ea:cb:16:70:6b:53:01:18:f7:d2:66:
                    2c:7f:2f:45:9e:96:be:84:ce:ba:eb:bc:1b:ac:8b:
                    b0:33:40:73:41:18:63:7a:18:1c:2e:35:05:93:26:
                    47:73:48:18:48:9b:fe:68:f6:bf:eb:6a:86:4d:e6:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AB:90:89:2A:FB:F8:75:28:9C:65:56:CA:27:9A:9B:44:19:98:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/349d3b72-a194-37a3-95c4-97b0c3e9f593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl

            X509v3 Authority Key Identifier:
                keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.30.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:8d:5f:ff:d7:fc:1f:02:57:9b:be:59:e3:a0:2c:85:12:
         87:90:eb:6e:e1:4f:8d:a0:85:1a:dd:aa:bf:88:e0:d8:c2:d5:
         0a:92:5e:56:db:e6:32:1f:78:ab:92:c8:50:ae:1a:0f:a0:d0:
         9d:60:29:d5:90:ca:de:77:14:13:ce:9f:99:87:9e:d3:cf:09:
         a7:d2:5e:2b:62:5f:33:03:39:ee:f1:d1:c8:cc:7e:76:c3:3d:
         a1:d6:c9:89:83:da:da:f3:8c:f1:53:bf:c4:db:ab:80:25:cd:
         39:7a:12:41:ae:61:2c:cd:db:65:ee:71:dc:3a:48:40:8d:9b:
         dd:68:5f:c8:4a:67:fc:4e:fb:56:54:8c:54:91:20:3b:03:13:
         68:df:14:83:69:61:9d:d3:bc:92:b3:76:38:d1:e4:3f:fa:d0:
         c4:04:2b:32:c5:20:9c:37:6d:69:31:17:d9:2e:a3:68:b2:7a:
         8d:80:cc:4a:7d:03:75:40:45:e6:91:9a:d8:1e:fd:f5:31:71:
         d2:c2:7b:af:d3:2e:46:ca:f9:87:79:fe:be:1e:95:0e:c1:d7:
         4d:8c:a3:db:36:d8:c2:13:71:ff:79:a8:cb:f8:53:22:01:30:
         9a:37:31:78:0b:aa:ab:29:b5:ba:97:a1:b8:b2:19:f4:ac:fe:
         e2:ca:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:50 2025 by rpki-client