Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa
File:                     35db1a21-9d13-36a4-92ff-c93c50255a11.roa (raw, json)
Hash identifier:          0XRbbjGhvszqrpoiAlmXr+wnmWWnPV9Hfjn1Te4W/QM=
Subject key identifier:   21:74:70:E9:B2:B7:CF:2A:A6:F6:2B:7D:F4:16:D6:4C:9A:66:F4:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC0163A7A6E299C4C15260C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        198.40.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3a:7a:6e:29:9c:4c:15:26:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=3dd42df2-c46e-4668-82c3-10bebb3aa357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:1d:b4:e8:d6:5a:6d:58:8d:88:78:44:3f:
                    39:ad:16:40:18:bb:93:68:8e:e7:0e:fe:0b:73:36:
                    3d:dd:04:4a:2a:f3:f8:2d:f2:37:d4:46:cf:2e:76:
                    26:56:0e:1b:7d:4d:ee:4b:b6:4b:ba:e4:78:bd:42:
                    35:20:36:82:bd:69:76:61:38:34:fa:bc:64:9e:47:
                    ea:d8:98:b6:9a:ca:e6:0e:41:0e:5d:f3:3d:c8:d0:
                    48:38:d7:25:82:7d:86:bf:b0:6d:cf:f4:1c:84:b8:
                    b3:fa:83:f0:09:be:36:2a:82:41:7d:79:16:81:20:
                    cc:d9:29:ff:ca:a7:af:45:e9:2b:65:1a:33:cb:88:
                    12:ec:90:6f:f8:16:fc:67:1c:53:96:aa:f6:ca:b9:
                    e6:82:81:ed:b1:b2:37:f8:97:5e:16:6f:e1:bd:f7:
                    53:6c:9f:5e:1e:76:f3:cf:b6:c0:ce:d7:67:e4:27:
                    cc:0c:99:52:9a:ad:8c:b4:51:96:19:f4:c6:8b:73:
                    96:4f:98:9b:44:3d:58:c1:ae:55:91:77:21:1b:32:
                    5f:08:d9:92:1f:28:fe:49:76:c2:0d:db:9c:66:37:
                    83:c8:6a:33:ae:f4:3d:4b:8c:50:ff:55:40:56:12:
                    04:51:09:4b:d7:0a:5f:e7:f3:b9:24:31:7c:6a:ae:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:74:70:E9:B2:B7:CF:2A:A6:F6:2B:7D:F4:16:D6:4C:9A:66:F4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:50:d8:03:58:30:26:1b:62:d3:91:24:c9:ce:c5:53:cd:da:
         c5:50:66:06:51:b7:3f:8c:d8:b4:a8:83:08:94:a4:35:04:90:
         51:b5:a1:bd:5c:c0:65:0f:e0:5d:82:ea:1b:95:c6:1a:cc:dd:
         a6:4c:09:93:25:f3:33:a4:c2:ec:6e:03:ab:dd:5d:02:95:a8:
         8a:99:41:f7:eb:2d:3f:90:02:c8:7d:4f:08:17:2f:b1:eb:71:
         42:ee:b0:57:84:e2:4f:dd:14:f4:df:34:f2:27:f2:d3:79:86:
         d7:56:9d:a9:65:82:50:2b:49:90:92:ab:6b:db:68:3c:ca:df:
         a2:7e:e4:7a:e0:d4:66:32:e5:66:76:d1:13:45:c6:08:50:7f:
         5f:fb:89:b0:36:ca:d9:5a:f6:07:c8:4c:af:15:dd:65:68:54:
         c0:ed:c0:c0:33:f5:db:07:9a:c3:35:5c:23:81:bc:29:ea:da:
         7a:2b:a5:31:3a:51:25:ae:c7:0d:da:5d:83:e8:89:73:0a:59:
         14:7a:de:54:3b:14:fa:f3:7f:be:7c:50:f8:77:ba:b1:81:33:
         f7:b1:8f:c9:1a:af:51:e1:51:ad:e5:15:3a:3c:cc:25:19:99:
         22:fc:09:96:67:d6:1b:21:1c:47:2d:15:fc:ba:d8:29:d3:e8:
         56:70:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:26 2025 by rpki-client