Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024fe552-2a26-3f4d-a74e-0ce6ca0405e7.roa
File:                     024fe552-2a26-3f4d-a74e-0ce6ca0405e7.roa (raw, json)
Hash identifier:          psGUlpSJNyuysFzvnvHfnG6hnPKqyJn7u4jthdMaxuM=
Subject key identifier:   F1:15:91:2A:DC:1B:FF:DF:38:84:40:F0:41:DF:74:54:CA:D2:F1:1F
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC1E4B6B4DCC84FDEAFC42A40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024fe552-2a26-3f4d-a74e-0ce6ca0405e7.roa
Signing time:             Tue 05 Aug 2025 16:32:36 +0000
ROA not before:           Tue 05 Aug 2025 16:32:36 +0000
ROA not after:            Mon 03 Nov 2025 17:32:36 +0000
asID:                     23473
IP address blocks:        68.180.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:e4:b6:b4:dc:c8:4f:de:af:c4:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 16:32:36 2025 GMT
            Not After : Nov  3 17:32:36 2025 GMT
        Subject: CN=cf842389-d670-460d-9d3f-c5b2cd13b39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:be:f9:99:6c:d5:2d:fb:43:18:80:9f:f5:
                    84:04:1f:3a:a9:77:12:5d:98:df:dd:59:a1:17:70:
                    0e:cb:f9:4d:56:7d:44:30:16:04:f9:b2:2a:82:f6:
                    2b:dc:40:8d:26:87:77:a8:e0:ba:31:b2:42:ef:ec:
                    8a:3d:8a:ff:9a:4b:9f:00:4f:74:4d:74:2e:69:81:
                    3f:95:6d:8b:e7:ec:db:4f:21:40:08:8c:2b:d4:0f:
                    b4:b3:2a:2c:3e:5b:3f:3a:49:bc:41:7e:78:33:00:
                    df:37:34:cb:fc:44:8c:43:36:53:03:3e:59:fa:59:
                    f0:d5:8f:ae:1d:b6:c9:48:25:ae:52:a4:eb:18:ee:
                    43:81:fc:7d:0f:72:f4:a7:54:51:d8:f5:71:33:b7:
                    dd:85:ed:1f:4f:0a:c4:a4:d3:ac:68:4f:86:cd:f3:
                    70:75:c1:91:a4:2a:e3:26:4f:9b:75:26:02:5c:7d:
                    71:bf:33:37:99:41:77:ab:cf:28:36:4b:1a:22:9e:
                    cb:ac:48:ae:e7:e5:82:9f:a4:67:40:f7:02:76:9a:
                    13:44:7c:44:2e:81:de:d2:00:87:c7:a0:7c:69:11:
                    94:97:95:b5:0e:80:8b:85:8a:5e:85:25:3c:fa:8c:
                    f9:c6:f3:f6:84:ce:29:ba:df:0e:15:5e:88:05:d3:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:91:2A:DC:1B:FF:DF:38:84:40:F0:41:DF:74:54:CA:D2:F1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024fe552-2a26-3f4d-a74e-0ce6ca0405e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:ee:79:86:99:e8:d7:cd:29:a0:5d:2f:44:62:fa:ee:0f:
         94:ab:7b:f2:e6:45:b3:0f:10:c0:3a:b0:29:60:d5:e3:fb:d0:
         7a:83:82:80:b0:84:ab:42:30:64:71:af:49:6d:c1:d4:57:5f:
         1f:f3:b5:85:80:1f:0b:f1:fc:1f:2c:1a:8b:88:cd:53:ee:d7:
         c9:56:30:31:c6:fe:b9:b0:30:40:52:7b:04:51:22:8e:46:79:
         68:c3:e5:05:5a:37:fd:72:df:25:4d:ae:08:e3:90:d6:f7:75:
         2a:26:11:82:8b:d4:cd:ac:e7:af:2d:46:24:29:1b:48:80:eb:
         59:04:42:19:21:a9:b4:eb:09:8a:0e:bf:93:2c:3f:c2:9e:6f:
         bf:98:75:4a:68:52:36:0f:0d:70:fb:c3:6d:30:f4:92:67:a1:
         4d:9a:f1:1b:3d:74:64:3c:6c:52:b5:9d:e9:dc:6b:07:19:3b:
         34:2c:41:61:f0:d1:79:fe:17:13:45:e0:ea:a6:0e:46:8b:f6:
         12:23:dc:68:ef:49:47:24:50:f3:c6:08:b2:03:ac:9c:0f:4f:
         8e:59:a2:7e:e9:17:de:12:fe:cb:c6:f8:c8:21:2e:92:37:03:
         a9:11:18:2b:21:d7:00:64:2c:4c:0c:1a:38:dd:c4:bf:a3:80:
         85:07:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:17 2025 by rpki-client