Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c2b00f3-8a08-385c-8a24-94b316f5b135.roa
File:                     3c2b00f3-8a08-385c-8a24-94b316f5b135.roa (raw, json)
Hash identifier:          vJiFql6hr6OhUpctyOWgxi61XymKpO9uDakqoARq75A=
Subject key identifier:   DB:52:01:02:BF:50:07:0F:6D:BD:83:FA:F9:0D:BD:61:FC:21:33:FC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4BAF894BED59338EE56180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c2b00f3-8a08-385c-8a24-94b316f5b135.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        63.142.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:af:89:4b:ed:59:33:8e:e5:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=5ff27e07-3473-45c5-aedb-8257758544a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:98:1d:fd:71:55:26:62:d4:6b:99:5f:6d:
                    3e:48:96:eb:f9:82:0a:6e:44:52:fd:b7:92:a9:92:
                    49:ff:a0:e1:eb:5b:c9:72:95:88:37:53:56:70:86:
                    59:62:fd:57:36:2e:b0:10:7e:62:aa:14:6d:3b:09:
                    5f:be:50:34:a8:6d:58:f2:e4:df:9b:9d:bb:e2:cf:
                    d7:87:33:bc:46:4b:bb:1f:bd:23:9f:d1:a9:61:b8:
                    61:f6:33:dd:e1:a9:20:8e:6c:f7:b9:be:7f:62:00:
                    72:92:aa:72:cd:61:aa:21:60:6f:2c:bd:f7:2f:b7:
                    79:d8:f8:ef:c6:55:41:9e:81:ed:3a:ec:0c:1e:72:
                    bc:6b:12:ba:7d:18:11:7a:7a:ee:41:ff:b3:9c:7c:
                    c6:62:ba:3b:41:8c:67:9d:4c:60:e7:c4:0c:a4:d5:
                    14:38:78:e5:5b:83:02:67:ea:c9:63:06:5a:9d:00:
                    2d:34:24:2f:f9:9c:7d:b5:4c:6d:7a:ce:9b:dd:84:
                    6d:a0:65:8a:a0:b5:5d:60:6f:aa:66:22:ae:5e:66:
                    93:ed:3b:66:0d:57:77:04:8c:d4:8a:52:de:55:7c:
                    a9:ac:b3:5f:31:0d:28:19:20:83:d2:a1:d3:e9:11:
                    f8:35:2d:dd:31:c9:14:76:d8:7b:ad:ef:06:ec:a2:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:01:02:BF:50:07:0F:6D:BD:83:FA:F9:0D:BD:61:FC:21:33:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c2b00f3-8a08-385c-8a24-94b316f5b135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:50:14:77:2b:fb:06:47:57:ac:7e:43:0b:f2:c1:53:46:c3:
         07:b7:4b:ae:73:65:1a:83:6f:1c:f4:94:59:90:b3:0a:87:9e:
         11:3c:6e:19:8b:ce:ac:df:59:52:d2:72:ff:f2:5d:49:3f:5c:
         b4:d6:da:cc:82:b1:60:58:40:86:64:76:3e:ad:b9:0c:bb:45:
         66:64:f5:f2:e9:de:7e:0c:0e:fb:99:fd:81:6b:ce:7c:7a:97:
         89:a4:4b:c5:4f:af:80:07:17:00:41:ed:9b:58:a5:41:cc:07:
         d1:aa:f1:f2:56:8a:fa:cd:6f:40:04:7e:ab:f4:50:ee:e2:e0:
         c0:c1:78:59:dc:83:54:1b:13:56:6f:45:3c:d0:bb:b0:43:24:
         ba:c3:15:0e:93:e9:42:23:3d:2c:f2:2b:50:1b:c6:da:3a:d4:
         b2:fe:d1:2b:5f:9f:a9:67:96:90:c6:41:ef:34:19:4d:50:f4:
         a5:b0:a4:81:88:7a:2c:30:3c:f1:9c:79:91:02:1f:36:1f:d9:
         93:4e:0f:4c:28:f0:e6:ef:80:b0:e5:8e:fc:67:52:51:c3:80:
         22:de:dc:19:c6:e7:6a:10:00:29:04:8a:9d:0d:ec:14:d4:cc:
         3e:95:10:7a:bc:d2:1e:6c:7d:4b:e7:fb:67:ee:c7:02:0d:66:
         6b:69:a0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:26:37 2025 by rpki-client