Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/e5b21592-75bd-3ee2-b1f1-ea1cb0d4e9f3.roa
File:                     e5b21592-75bd-3ee2-b1f1-ea1cb0d4e9f3.roa (raw, json)
Hash identifier:          TWDiMCRjASu6py6txxt47672CdSZ40V6JzIEdv3Uj3g=
Subject key identifier:   D4:4D:9F:2C:70:77:0D:F2:59:AD:25:72:4D:14:65:28:04:56:4E:B8
Certificate issuer:       /CN=ab5b105c-8dbd-45f0-ac97-15de885200c5
Certificate serial:       010D0C9F4328584B41E71262A732CFD45D8C68C0
Authority key identifier: 44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/e5b21592-75bd-3ee2-b1f1-ea1cb0d4e9f3.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        69.59.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:12:62:a7:32:cf:d4:5d:8c:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab5b105c-8dbd-45f0-ac97-15de885200c5
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=f8860cea-ebb8-4641-b81b-bbc544f58a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9d:16:77:02:36:1d:8e:0f:00:49:5f:34:96:
                    84:f8:71:2b:c5:ae:4f:5f:54:7f:c7:a9:80:cd:b2:
                    33:9a:df:4f:2d:c8:81:db:cc:23:4a:98:bf:52:8b:
                    fc:42:f5:42:56:fd:37:27:4f:35:49:9e:be:80:1d:
                    4c:31:05:91:b8:41:d5:3d:88:9c:7e:0f:a8:03:55:
                    62:f2:f2:ee:1c:fb:61:d5:b0:c2:57:a0:b0:30:15:
                    20:60:32:98:8c:88:20:47:66:e6:ce:8f:f2:21:46:
                    bb:36:02:85:dc:d9:dd:60:41:cd:7a:2a:3c:cc:d8:
                    80:5f:e1:64:c6:ba:48:90:4b:65:a3:63:27:73:75:
                    9b:3b:7f:4c:5a:90:5f:85:c7:50:20:f7:56:6e:0b:
                    50:33:6c:f1:a8:87:c2:bd:01:ca:2c:e1:b3:92:45:
                    03:7d:85:0e:98:80:d6:30:f5:36:c2:4b:82:57:60:
                    0d:e7:6d:0e:84:71:d6:35:2f:70:f2:cc:88:c5:cc:
                    52:fb:19:13:60:d9:b8:7e:e6:43:89:d7:92:a9:a0:
                    4d:fd:00:9a:67:d5:f9:3b:d6:16:b6:42:06:57:65:
                    6b:45:98:6e:46:f8:de:a4:15:8c:ed:71:bb:6a:90:
                    bb:03:fa:ee:73:f2:70:35:b0:6c:0e:94:5d:a1:3f:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:9F:2C:70:77:0D:F2:59:AD:25:72:4D:14:65:28:04:56:4E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/e5b21592-75bd-3ee2-b1f1-ea1cb0d4e9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.crl

            X509v3 Authority Key Identifier:
                keyid:44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:26:1f:6b:e0:70:dc:ee:9b:12:1e:e8:26:45:54:39:9a:93:
         30:38:0b:30:ae:d7:d5:bb:d8:94:4d:5b:7e:84:91:12:d7:84:
         1e:f4:aa:ec:2e:0f:ea:99:16:e0:f3:88:db:5f:99:cf:8c:0b:
         ad:5d:2d:de:21:87:77:92:ea:3f:70:3c:9a:6f:09:82:d8:cd:
         80:3b:b0:32:c4:3c:d2:c1:0e:8c:79:4e:57:be:be:0c:61:c0:
         c2:20:06:0b:89:ca:e7:d9:d8:94:bc:76:ce:05:2c:26:e2:29:
         ad:ba:41:3f:e7:32:d2:b1:ab:09:63:66:9d:a7:9d:67:8f:5b:
         ee:67:59:69:b6:27:61:a0:03:db:d2:67:6b:3f:ca:b1:3f:33:
         ac:fe:75:61:4a:91:49:b8:4f:1f:8b:7a:2a:30:82:13:4d:93:
         bb:5c:c4:a0:e4:dc:bf:97:ba:5f:ae:bf:d3:b0:d5:80:74:cf:
         97:8c:46:b2:e9:43:ff:76:8d:76:b4:74:74:f0:6f:2d:0a:9c:
         67:43:76:f4:86:6f:62:b1:a9:5f:04:ba:74:31:ee:2c:3d:2e:
         dd:e0:39:bc:be:a7:cc:cc:f1:65:d8:e6:a1:66:51:c3:ba:02:
         f0:2d:df:0b:e1:90:a6:f9:80:66:82:8e:65:5a:b7:40:ed:7c:
         3e:89:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:28 2025 by rpki-client