Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
File:                     1367525f-332e-39de-a859-d9312447ba1e.roa (raw, json)
Hash identifier:          BWa2chZok6Fx9WuucKFCFYrJlGi1vZHAoPoWJrK1V8w=
Subject key identifier:   0D:48:49:F6:86:17:3B:E2:3C:35:46:D7:30:3E:EE:43:59:F5:AB:65
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA39D15B85FA5CCB50677E380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        104.201.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:15:b8:5f:a5:cc:b5:06:77:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=ef5f66b1-f4f4-4bab-8b17-d1d0daa5b949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:4a:e1:59:ed:9d:c2:0c:25:6a:ee:c7:b5:
                    6d:7e:95:c1:5d:e5:50:7d:be:6e:da:48:02:22:61:
                    d0:c3:ae:2b:18:1a:44:30:00:c8:58:78:51:23:6b:
                    6a:e0:69:d6:21:d0:7e:33:b9:55:6e:0c:cf:56:6e:
                    06:f6:1c:87:5d:db:90:e5:63:08:e4:e6:ed:76:61:
                    79:07:a5:5a:86:4d:58:fe:7a:87:61:c2:e8:8c:49:
                    2f:c9:d9:e0:26:c0:2b:a7:fe:d0:10:46:0b:56:01:
                    32:bd:05:1f:49:53:8a:39:4b:05:43:06:0b:d6:ee:
                    71:57:a3:b1:25:15:5f:c0:89:aa:2c:be:78:c4:c4:
                    3e:29:53:37:f1:9b:ae:bc:c2:85:70:1c:55:f3:04:
                    54:70:d7:6b:c3:21:5f:fb:75:f1:1f:df:66:07:53:
                    20:c2:b8:69:ed:3a:5f:8c:ed:2c:86:af:30:22:25:
                    e8:3c:a6:fe:a5:92:a7:aa:a7:be:fe:4b:42:0e:c4:
                    2a:20:92:da:54:b5:88:a3:2e:6b:54:25:7c:a9:d0:
                    15:0b:92:2f:73:85:42:05:52:a3:7d:22:4f:8e:9e:
                    5e:0d:45:ca:c9:fa:ec:2a:ea:1e:88:a8:63:e3:12:
                    4f:3d:5f:51:72:33:38:66:ed:09:02:81:39:9e:a0:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:49:F6:86:17:3B:E2:3C:35:46:D7:30:3E:EE:43:59:F5:AB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1367525f-332e-39de-a859-d9312447ba1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:6b:21:08:33:6d:4a:e6:f8:72:d1:82:26:36:4c:17:1c:38:
         87:f9:ff:b2:18:c7:9f:37:9e:8f:d6:81:02:0c:81:c9:85:ce:
         70:59:28:3f:3a:20:c9:53:a2:d1:72:f7:34:55:aa:9f:49:2a:
         ea:25:b0:63:f3:17:14:da:71:4e:93:d9:d5:86:38:91:27:63:
         8e:5d:6f:94:a3:c3:09:15:99:bb:f5:01:32:2c:6e:13:b1:8d:
         32:05:37:34:22:a4:c2:f9:a4:0c:97:b9:2a:b7:f3:f3:71:d9:
         c5:8e:ab:82:b9:fe:11:2f:7f:a7:d1:50:b9:82:ef:86:04:6e:
         f2:ce:f8:2a:1d:03:68:18:cf:2f:31:89:d0:51:d7:7f:e9:34:
         f4:25:4c:d0:30:24:1f:5b:84:6c:fb:c7:e3:81:79:9b:8b:a5:
         73:be:13:af:43:c1:58:e3:ff:ed:b9:68:15:66:88:54:ed:8b:
         7c:0d:f9:15:7f:4e:b8:6d:be:65:63:05:48:df:03:51:4f:de:
         50:ef:b3:d5:c4:65:68:c1:a9:f3:13:d0:bc:3c:f2:02:7e:77:
         5c:b3:14:80:07:9d:14:a7:f5:d9:c7:c3:bd:a8:74:bf:db:8e:
         07:57:bc:47:e9:4a:3b:53:7d:71:ff:b5:dc:21:4a:74:24:58:
         61:0d:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:09:54 2025 by rpki-client