Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/219a7b90-09b4-3c3b-92b6-6b3bbe27a2b5.roa
File:                     219a7b90-09b4-3c3b-92b6-6b3bbe27a2b5.roa (raw, json)
Hash identifier:          7p8bhAT5HxfCBCrpZjm+Sr7jMTkFfpXEUyk4LCPaLmc=
Subject key identifier:   2E:79:B5:4C:A6:10:6C:F4:02:CC:82:95:A6:A9:B3:29:89:06:BA:AC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0F7F80C8B78B7ADC2F630
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/219a7b90-09b4-3c3b-92b6-6b3bbe27a2b5.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        104.201.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f7:f8:0c:8b:78:b7:ad:c2:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=6124acce-3061-47de-853c-698f6510bba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:87:91:53:09:20:bb:dd:b2:1d:8b:63:6e:
                    47:5f:0a:83:cc:4a:63:56:63:2c:d0:35:c5:01:58:
                    16:fc:ac:2b:8f:90:2f:49:ba:9a:f4:1f:f2:a4:b2:
                    8a:f6:93:f4:2d:55:4f:20:77:be:73:36:5d:b0:3a:
                    16:97:63:73:29:d4:c6:2f:d8:89:5e:7f:0b:c4:08:
                    f8:38:9b:d3:2b:94:41:fe:ac:17:64:fd:93:dc:5a:
                    39:02:13:23:bc:40:5a:02:90:4d:f7:87:bf:93:3a:
                    55:b2:50:34:f8:f0:4a:78:7d:5b:ea:69:3c:2e:ab:
                    85:2f:23:0a:14:97:af:4c:f8:e1:61:77:f7:67:fc:
                    14:db:8c:5f:f3:57:56:3f:5d:f9:b1:a3:c3:27:a2:
                    ec:d1:e6:be:f2:88:07:08:3a:c8:81:c1:49:cf:e5:
                    f2:4e:73:6e:ac:67:15:af:cc:3b:10:1b:a9:56:0b:
                    66:ab:ef:3b:01:d8:10:84:d0:ba:0e:9e:4d:2d:63:
                    80:21:e6:92:c2:62:04:d3:8e:6b:44:cf:1e:90:e4:
                    ec:26:13:cb:f7:d5:8e:7e:50:38:68:4c:69:d7:7f:
                    41:53:21:ac:08:44:1b:7b:79:8d:56:0c:fa:03:14:
                    2e:1b:89:60:8a:b5:53:6f:d3:7b:51:04:5c:86:c7:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:79:B5:4C:A6:10:6C:F4:02:CC:82:95:A6:A9:B3:29:89:06:BA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/219a7b90-09b4-3c3b-92b6-6b3bbe27a2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:63:2b:c9:a3:73:a6:af:04:51:9d:a8:52:5a:c2:f4:a5:8b:
         1d:6c:eb:fc:2d:88:51:be:28:d1:b6:e0:ae:f6:67:a7:a7:f8:
         eb:51:76:e2:1f:aa:09:bd:ae:c6:49:c7:06:9d:d1:5f:4c:51:
         0b:a1:5a:34:68:f0:60:09:d9:33:a1:42:22:f8:1e:75:2e:80:
         4d:d0:7d:3d:04:de:a2:b7:73:f5:c9:d1:36:61:05:17:df:cf:
         66:25:25:1f:af:8b:53:6d:72:3f:1f:ac:3d:9c:bf:bd:87:77:
         c2:66:3f:99:0a:c0:0f:e1:54:66:86:14:5c:dc:6d:d0:ae:00:
         d4:37:4e:8f:90:2c:6e:4e:c1:78:48:c3:45:ef:10:f9:1b:05:
         2c:1e:b2:87:f2:cf:78:97:e0:95:79:2c:1f:53:97:58:a6:3e:
         ea:37:2c:c3:15:73:62:01:33:46:00:55:95:e8:8f:1a:ed:44:
         0e:3a:a1:0e:c9:99:b8:cd:0f:d2:89:23:e9:d7:c3:94:fc:71:
         ea:ab:05:04:e7:91:8c:d1:65:ee:25:a1:58:8c:8c:dd:72:5e:
         8e:75:88:b4:53:eb:94:06:a7:af:77:6e:03:39:33:cd:09:fa:
         d1:f3:c7:07:ed:18:ce:bd:f0:00:fc:5a:32:74:ea:67:0a:26:
         86:7d:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:28 2025 by rpki-client