Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa
File:                     bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa (raw, json)
Hash identifier:          hWrmmw2eHVzhgMZ2Jye7LHIS8hmkF1WR3Ry/dhVv4XI=
Subject key identifier:   24:61:7D:44:EE:E8:A9:07:9C:A5:BC:5F:3D:BD:45:30:D9:E1:63:E4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AD7D11D7BC68509E75B3E5E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     19344
IP address blocks:        216.10.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1d:7b:c6:85:09:e7:5b:3e:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=f7ec1943-20d8-47dd-9bcf-a4be41636c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:11:ed:18:64:36:b2:98:12:d0:c1:73:a6:
                    61:4e:10:1f:97:b7:58:b0:84:04:98:5a:63:25:34:
                    03:fb:8b:26:55:1f:14:28:55:c6:2e:c9:b0:75:71:
                    cc:4c:2b:61:f6:49:32:b9:12:0b:a2:2d:24:ab:b7:
                    8d:b4:14:cf:8f:13:17:de:af:28:4b:40:6d:e4:13:
                    b3:2f:9e:14:e7:1f:d8:5f:87:7c:10:37:86:53:ba:
                    29:3f:d3:0d:b8:31:0f:8f:41:27:39:8c:62:24:52:
                    e4:87:ce:4d:58:98:34:39:74:db:4d:06:98:c2:89:
                    b8:d3:44:a8:44:9b:ae:0d:bc:76:26:43:86:90:f8:
                    56:8f:22:74:3c:f5:21:c8:07:fc:e6:f2:c2:d0:ea:
                    78:05:c4:b4:38:96:f3:c0:01:d6:ea:93:25:22:47:
                    15:2c:0b:77:25:4a:e8:4d:93:90:fc:83:4f:b1:43:
                    5a:1f:0f:7a:26:5f:19:15:8d:0b:8f:d9:86:3f:7f:
                    dd:4d:00:e9:b8:3b:bf:2c:53:31:2f:e9:fd:be:2e:
                    a9:36:b0:76:ef:a3:26:10:bc:bb:b1:dd:7c:35:90:
                    62:10:86:b9:83:e7:20:15:7f:fa:07:f4:b8:79:e1:
                    79:c2:61:97:86:0b:70:1b:5f:c0:8b:6b:0a:d4:d8:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:61:7D:44:EE:E8:A9:07:9C:A5:BC:5F:3D:BD:45:30:D9:E1:63:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:69:d5:42:37:3d:13:11:cc:aa:77:6c:9f:83:27:c9:1a:4f:
         79:26:1c:7b:11:eb:7c:2f:59:e4:77:83:5b:98:77:4a:8d:ff:
         1f:5c:7b:2d:e2:e2:9c:e2:7e:5d:ce:8f:c9:e8:c1:cb:6d:ed:
         42:4e:5f:5c:79:0e:ef:94:6d:78:d9:ea:56:f9:50:4d:0e:5a:
         50:d9:c6:ec:d2:06:13:d4:9f:c6:74:8e:c5:ac:d6:e7:a4:7d:
         38:a7:de:55:69:44:ae:c8:21:0f:fd:74:5f:e9:e6:b8:ba:40:
         28:84:f4:1b:23:2d:17:ed:93:e0:07:6e:43:38:01:d4:73:39:
         80:5b:19:71:d8:d5:4e:08:ce:e1:f9:59:18:ae:03:33:d2:47:
         d1:81:98:20:75:10:a3:0c:4a:0e:5f:48:7c:84:07:3f:32:fb:
         02:2a:cf:57:b4:07:85:66:14:0f:b9:05:00:a4:c4:42:3e:87:
         f0:7e:40:11:81:b0:32:01:bb:66:ac:75:c9:f5:6d:09:47:96:
         3b:eb:97:15:e7:0e:60:90:67:7a:4e:f5:82:ec:2f:e0:c5:42:
         7f:1d:2b:1b:c9:0b:eb:42:83:75:6a:b4:84:a3:e9:8a:7e:fa:
         8c:dc:91:13:0a:98:b0:c4:dd:ca:dd:7f:46:5e:b0:d4:13:b5:
         71:5f:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:49:40 2025 by rpki-client