Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa
File:                     8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa (raw, json)
Hash identifier:          vJHCJu54htZmFWrpn8M6gQuEu3uhFfxtdGFrPxrGDIM=
Subject key identifier:   31:7E:CD:47:00:B1:F2:8C:82:89:5A:AA:AD:03:A8:7E:50:42:FA:E5
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584B8917671E73BE83E29368B770
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        168.151.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:67:1e:73:be:83:e2:93:68:b7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=1e2eafea-c196-4c2e-bbf2-dbb5acd45ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:5f:e6:8e:bb:d8:8a:13:85:fb:57:0a:7a:
                    ea:02:93:11:08:c8:bb:37:90:21:8d:ad:99:84:cd:
                    2f:8d:77:a4:03:79:e4:25:56:fb:d0:61:a5:5e:a2:
                    32:91:5f:bb:1e:35:25:41:0e:b3:f2:e9:f6:70:84:
                    6f:fa:29:7a:12:54:1d:1a:c2:72:24:f7:63:2f:77:
                    22:a7:d0:f6:46:70:49:ed:08:b4:0d:da:d8:fe:dc:
                    0d:c3:da:b3:02:88:01:7c:11:5e:06:0a:14:1e:c2:
                    69:55:8a:b5:46:88:45:14:96:af:09:d9:4f:33:b6:
                    17:64:80:c8:c0:ee:52:90:47:8d:a5:6e:f8:78:90:
                    c2:99:e3:3a:09:0a:13:f4:b9:50:d1:4f:ef:91:77:
                    5b:94:d0:79:20:37:a8:f8:06:06:53:e7:2f:8c:84:
                    93:03:d6:57:f2:b3:88:ae:71:45:3a:c7:be:66:56:
                    d1:fe:19:76:3b:07:b4:0b:6b:24:0b:d6:ba:a0:e3:
                    09:15:79:1b:16:65:3e:88:09:cd:57:d4:ca:d9:6e:
                    82:6c:a6:7a:fa:52:50:66:0c:d8:cc:55:5c:7a:04:
                    98:7f:a8:9c:f2:bf:6c:40:d4:74:a7:4e:4a:76:0a:
                    dd:e2:83:38:99:0a:19:c0:e0:45:ed:6f:19:ed:f1:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:CD:47:00:B1:F2:8C:82:89:5A:AA:AD:03:A8:7E:50:42:FA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/8b665f2e-7bdd-39e5-a76f-6d8ce93e8501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:6a:3c:e4:3c:f0:ad:0c:5a:ce:ca:d6:f5:95:a0:be:d9:
         b8:3f:7d:21:ff:19:65:39:12:d0:6f:40:a2:95:ce:40:a9:32:
         63:47:c9:d7:d6:68:ef:93:f3:7a:15:ce:44:99:a2:6d:0c:a7:
         9d:28:d1:1f:c6:61:a3:3d:5d:fe:9d:38:ed:1b:a2:e4:2e:89:
         af:e0:ce:59:e1:81:47:60:7d:b8:dc:d6:37:d4:f4:54:8d:0a:
         72:5e:2a:53:09:c0:27:e1:2f:13:b4:64:5d:44:dd:a5:1a:f1:
         26:62:17:ad:16:49:4d:b6:8e:d4:96:01:7f:cb:be:23:a0:aa:
         d2:eb:9a:f4:c2:60:17:8f:7c:30:1a:75:36:05:53:dc:cd:e5:
         eb:9d:04:27:3d:d7:7c:71:21:7c:e8:38:b1:07:64:46:95:eb:
         70:f4:71:01:23:5a:e0:3c:a2:42:ef:72:bf:67:ad:f5:1f:1c:
         10:25:b8:35:94:d3:e7:25:79:da:38:98:3b:92:ca:a5:41:1d:
         12:a9:fa:fa:22:06:03:7d:57:0f:b7:5e:bc:3b:c6:85:9f:12:
         2d:dd:5c:8d:4e:97:41:e3:77:ec:1f:ad:81:73:70:71:b3:0c:
         e7:73:bc:12:db:a7:70:8b:29:c7:5d:e4:f5:8e:a5:4e:74:0c:
         e5:10:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:46 2025 by rpki-client