Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16181e35-7528-364a-bbb5-57306a21ee81.roa
File:                     16181e35-7528-364a-bbb5-57306a21ee81.roa (raw, json)
Hash identifier:          hB9mTMlgOTq/WEVbo5NzdHEWMHWFhFMGEoQdU5CDKT4=
Subject key identifier:   83:5F:BD:06:65:DF:CD:A2:CF:9C:F4:82:03:AF:9B:54:AE:82:D0:43
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC01651EE31AFA29266195B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16181e35-7528-364a-bbb5-57306a21ee81.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        198.40.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:51:ee:31:af:a2:92:66:19:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=b5b8bc3a-dad3-4628-b522-ee80944e8381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ec:05:a7:e6:aa:a2:37:39:e2:82:e3:07:ac:
                    d1:4b:cc:bd:11:bc:77:68:a7:a6:7a:a4:a7:59:98:
                    31:cb:c0:88:b7:25:29:88:f4:25:5c:1f:8c:87:b0:
                    c3:77:b6:57:59:d3:08:18:fd:13:6b:50:33:23:bc:
                    2f:ad:45:42:5a:b1:51:d0:66:51:d1:f3:97:83:87:
                    86:a2:2b:01:b3:2b:b3:69:59:87:f7:9f:71:2b:dc:
                    e0:39:ca:da:11:f1:66:76:c4:82:7f:ce:74:75:58:
                    28:ce:3c:51:74:44:1c:e1:bc:e4:bd:c7:80:71:dd:
                    55:4a:4c:23:aa:96:fb:93:f7:21:75:3f:b7:07:9f:
                    18:72:35:5f:33:9a:95:63:31:7d:72:87:e5:ec:b0:
                    17:13:67:12:3b:93:9a:bd:9e:46:b7:98:82:4c:26:
                    6a:bc:7d:eb:73:b9:b4:06:ea:34:98:cf:da:74:87:
                    3b:98:56:e0:da:93:3d:3c:5f:c5:2b:ef:33:68:b0:
                    99:7c:6d:ac:2e:8d:29:2d:32:58:45:3e:f9:ad:e0:
                    2b:d2:d3:f0:48:1f:56:65:47:6f:b2:af:64:d4:66:
                    c9:52:36:c8:7c:f4:28:ee:97:a7:4a:90:4f:b8:83:
                    d4:c0:56:4f:0a:b8:a5:86:0e:c8:d5:5c:57:49:e2:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:BD:06:65:DF:CD:A2:CF:9C:F4:82:03:AF:9B:54:AE:82:D0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16181e35-7528-364a-bbb5-57306a21ee81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:42:3d:1e:4d:b3:66:53:c7:33:46:1a:56:a4:69:18:c4:
         a6:da:0f:a0:98:f1:93:f2:36:3b:9e:ae:b4:4a:25:06:47:3a:
         bc:dc:36:a7:2b:6d:fa:52:93:5a:dc:1f:6c:ed:17:91:10:c0:
         4c:f3:c6:d9:95:76:cd:03:01:f9:23:eb:35:36:dd:32:1d:12:
         49:3e:c9:bc:5e:1e:0f:17:8f:bc:62:79:c6:10:c5:12:99:1a:
         c0:0d:bc:db:dd:d5:aa:58:57:4e:d3:60:4b:e6:9b:7b:30:ad:
         aa:f3:29:51:71:74:c6:66:57:53:fd:4e:c6:db:9a:02:b8:0a:
         4d:6e:fb:b1:8b:b5:47:08:f9:58:55:c7:e7:42:5a:30:da:c2:
         25:15:f3:0b:c3:1a:aa:db:e2:02:dc:77:6f:69:eb:30:c5:ae:
         08:15:5d:55:bd:d6:5f:b8:b3:5f:cb:22:8c:84:6c:5e:be:67:
         e8:57:a3:f0:d6:97:5d:2b:37:ab:9c:35:08:78:96:f5:f8:f8:
         e9:9d:ae:ce:07:54:e7:08:79:be:2f:8e:07:40:41:a7:e3:aa:
         bf:1a:15:1d:fa:43:01:c2:20:84:b0:49:86:f8:f2:ea:db:db:
         80:5f:90:30:95:42:79:71:73:eb:6c:ed:2d:b8:0e:f0:ac:07:
         47:6b:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:10 2025 by rpki-client