Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b8d348b-ddb7-33c0-914e-d6f6360ddbd1.roa
File:                     3b8d348b-ddb7-33c0-914e-d6f6360ddbd1.roa (raw, json)
Hash identifier:          ppNMjj+olfVxyyQ4nLiZEGN8nkFwjQW6W31s1v+rhVU=
Subject key identifier:   1D:C2:44:77:F4:4B:F9:AC:4C:74:7C:4D:61:C6:BF:9C:0E:15:3C:E2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC01620BD3186622AF5A33B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b8d348b-ddb7-33c0-914e-d6f6360ddbd1.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        198.40.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:20:bd:31:86:62:2a:f5:a3:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=8d4ee043-a5e8-4691-a3e8-df3279c92620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:68:50:3d:69:71:73:d2:ba:54:06:c0:f3:
                    63:d1:6e:1c:0f:5c:65:bd:76:e9:31:55:13:d1:c0:
                    be:cd:77:3d:59:7a:f9:e3:41:25:a0:d9:4c:81:4b:
                    9d:ee:41:50:99:8c:e9:c1:84:d4:c6:d5:35:98:15:
                    44:1b:1b:6d:7e:9a:36:53:0b:bc:5a:d6:5d:04:2f:
                    dd:5e:c4:84:a0:bd:16:7f:ae:d3:0b:c3:5a:21:10:
                    da:a9:10:44:7a:3f:94:c2:d6:41:db:39:75:a6:b5:
                    e8:80:5c:f3:45:9e:08:39:8c:ec:b4:ce:25:e1:40:
                    28:82:70:b5:b8:78:c6:5a:8b:b1:f8:8d:1d:77:3e:
                    3f:fc:ff:a3:31:43:e1:0a:67:a6:41:aa:18:dc:a7:
                    77:fc:5e:04:17:ff:29:a2:7d:a9:54:0b:57:11:98:
                    cf:74:f6:c5:51:f7:d9:da:e9:de:40:e9:fe:62:56:
                    56:73:74:27:d0:05:3a:01:54:ce:d6:35:54:fa:cf:
                    9a:07:66:11:1e:ad:46:f5:18:bf:85:f6:41:ce:20:
                    b4:e7:0f:d5:7a:29:de:94:8a:05:84:c7:f4:f5:42:
                    56:46:24:28:f3:01:8b:78:23:13:09:19:55:3b:d5:
                    cf:ba:a5:5f:2b:8e:19:e7:15:6b:bd:7b:44:3c:fe:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C2:44:77:F4:4B:F9:AC:4C:74:7C:4D:61:C6:BF:9C:0E:15:3C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b8d348b-ddb7-33c0-914e-d6f6360ddbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:20:c9:fb:2c:8e:1f:ce:b7:40:b0:fc:f9:10:ae:a7:5a:02:
         6c:e8:f0:43:87:85:e2:b8:ae:27:e7:79:4b:23:1c:24:b8:00:
         9e:9b:87:82:7d:c1:64:7e:6a:e4:73:9e:a9:b8:7b:ec:90:4c:
         e3:cf:45:41:da:6d:12:5b:50:e0:46:4c:84:e1:79:d2:4e:af:
         66:28:d9:dc:a5:65:ab:51:8e:2e:34:df:20:23:df:54:9d:85:
         76:eb:8d:31:b0:28:e8:7c:71:4a:f1:48:3c:6d:a5:17:63:64:
         e8:42:d4:c8:2d:c5:05:d3:65:68:55:80:0b:4d:b1:79:29:b7:
         a1:f6:ad:e4:77:fd:34:a9:c0:28:65:8a:37:06:53:3a:4a:26:
         84:c9:60:9e:f8:b0:e4:88:b8:84:7f:5e:3b:92:4c:3d:5a:cb:
         d7:86:1b:ae:e0:f8:10:82:4a:5a:a7:9e:27:b4:f7:0a:95:25:
         74:3d:00:c6:13:e9:a5:58:c6:ad:50:a8:a8:6f:08:c0:0a:52:
         b2:b8:92:8a:98:32:70:af:41:86:65:40:0b:c7:5a:62:f2:97:
         1b:f0:b8:bf:1b:f9:60:15:32:b4:1a:24:10:f2:0c:c2:8c:38:
         de:b4:a4:4e:72:7f:d3:fe:f4:f5:cb:46:23:e7:50:1b:a0:0b:
         be:42:cf:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiC9MYZiKvWjOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
OGQ0ZWUwNDMtYTVlOC00NjkxLWEzZTgtZGYzMjc5YzkyNjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6ZoUD1pcXPSulQGwPNj0W4cD1xlvXbpMVUT
0cC+zXc9WXr540EloNlMgUud7kFQmYzpwYTUxtU1mBVEGxttfpo2Uwu8WtZdBC/d
XsSEoL0Wf67TC8NaIRDaqRBEej+UwtZB2zl1prXogFzzRZ4IOYzstM4l4UAognC1
uHjGWoux+I0ddz4//P+jMUPhCmemQaoY3Kd3/F4EF/8pon2pVAtXEZjPdPbFUffZ
2uneQOn+YlZWc3Qn0AU6AVTO1jVU+s+aB2YRHq1G9Ri/hfZBziC05w/VeinelIoF
hMf09UJWRiQo8wGLeCMTCRlVO9XPuqVfK44Z5xVrvXtEPP4g4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3CRHf0S/msTHR8TWHGv5wOFTziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2I4ZDM0OGItZGRiNy0z
M2MwLTkxNGUtZDZmNjM2MGRkYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcgyfssjh/Ot0Cw/PkQrqdaAmzo8EOHheK4rifneUsjHCS4AJ6bh4J9
wWR+auRznqm4e+yQTOPPRUHabRJbUOBGTIThedJOr2Yo2dylZatRji403yAj31Sd
hXbrjTGwKOh8cUrxSDxtpRdjZOhC1MgtxQXTZWhVgAtNsXkpt6H2reR3/TSpwChl
ijcGUzpKJoTJYJ74sOSIuIR/XjuSTD1ay9eGG67g+BCCSlqnnie09wqVJXQ9AMYT
6aVYxq1QqKhvCMAKUrK4koqYMnCvQYZlQAvHWmLylxvwuL8b+WAVMrQaJBDyDMKM
ON60pE5yf9P+9PXLRiPnUBugC75Cz5A=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:05 2025 by rpki-client