Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa
File:                     2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa (raw, json)
Hash identifier:          LO6UbFoMddUBWbmiWIx1ApF8VCtbj8WhPBVSRrqoeFI=
Subject key identifier:   E9:EA:78:54:E9:08:93:1B:3F:01:54:57:96:48:B0:55:88:89:61:4C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC01652B3829E3645EC035540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        192.119.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:52:b3:82:9e:36:45:ec:03:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=49547ca0-9153-4fb8-9cef-505f14103660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:48:7a:90:6a:0d:53:25:9b:fe:fc:60:13:
                    2c:f7:5d:ff:53:e6:67:a6:f0:4d:c2:65:93:c4:b3:
                    39:43:c1:20:ac:90:81:7a:a9:28:ff:38:90:ff:a6:
                    cf:a3:e9:e3:19:7a:fb:f2:15:94:70:88:08:8e:df:
                    94:a0:ad:11:7f:0a:08:ac:54:72:7b:ab:8a:98:ce:
                    6d:a8:27:36:02:89:2c:d3:a0:43:ab:c1:5f:e1:15:
                    b1:85:62:4e:06:6d:77:81:37:f4:ce:71:06:9c:4f:
                    f4:8f:d0:4c:e4:cb:ce:86:5d:2f:5d:93:15:8e:85:
                    62:f4:53:b6:ee:66:99:b5:8a:79:81:fa:c5:8e:68:
                    4a:19:8e:b2:45:d1:32:29:d3:37:70:45:c6:3d:0a:
                    83:0b:1e:10:dc:1d:e7:c7:60:83:2b:cb:19:0e:c3:
                    03:ae:7d:f9:3f:a5:5b:68:08:e1:61:dd:58:a5:f0:
                    67:a3:c1:00:d5:de:2c:74:f0:27:24:b3:10:e6:cd:
                    44:4e:b7:58:57:a0:3e:fe:22:21:a2:98:ed:fd:36:
                    03:8c:28:21:fe:f9:de:6b:ae:e2:fd:ce:f8:52:ad:
                    c6:e1:a1:6d:28:65:c9:48:03:14:9c:04:8e:7e:05:
                    e6:52:c4:52:90:25:3a:96:70:66:b0:27:60:e2:14:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:78:54:E9:08:93:1B:3F:01:54:57:96:48:B0:55:88:89:61:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:60:96:b6:99:4d:fe:44:a1:46:d9:60:b6:5f:63:23:52:e6:
         8f:58:83:78:c2:d4:c2:d4:49:a7:03:aa:96:80:d5:f1:cd:ed:
         ea:77:1a:cb:2f:f1:2f:5e:0a:bb:9c:5d:31:7c:0f:d1:d5:17:
         6b:63:ff:0f:ae:47:99:15:a0:a6:48:9e:2e:b5:05:0d:84:cd:
         75:06:c8:10:a6:82:86:a0:b9:1b:15:60:b4:10:b4:be:bd:23:
         18:02:88:e2:29:34:78:43:72:72:35:c7:7d:2d:8c:27:39:97:
         6b:b1:9d:13:fd:05:cb:1f:92:aa:8c:c5:3c:f4:f9:ff:e3:f4:
         68:62:0e:26:c4:62:4d:68:6e:ae:3d:4c:06:94:31:81:39:82:
         63:c4:e8:fe:30:2c:ca:82:be:1b:88:f5:0f:ea:7d:7f:53:29:
         02:8e:2e:88:03:b8:5a:46:25:af:b7:1b:0e:8c:b5:21:32:ab:
         6d:9a:d1:28:55:4f:92:86:44:3d:a2:91:84:93:9b:66:68:20:
         6f:9e:02:f9:b8:30:fa:29:d2:c1:22:3c:02:34:6e:bb:f0:57:
         f6:01:dc:3d:ec:b1:8d:4d:e6:95:da:8a:1b:db:aa:12:80:2f:
         db:75:8d:f4:95:7b:bd:ca:36:86:c4:77:66:27:b7:84:29:70:
         26:11:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:48:12 2025 by rpki-client