Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa
File:                     430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa (raw, json)
Hash identifier:          8ub8/Yd7Jw4gYZGxqk3ylOIUqcuTi43GtJWBm0/jteE=
Subject key identifier:   C5:3E:5D:EE:2A:D7:7A:FE:35:7B:C7:8F:27:1F:06:3F:78:33:57:6F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BBCDAE1BA5DA7376C2A77E500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        64.237.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:e1:ba:5d:a7:37:6c:2a:77:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=04020cea-09dc-4e78-90a1-8d2a25efc510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:3a:07:43:ff:6c:bd:1c:85:c7:50:cb:50:
                    b8:e6:dd:c4:a2:4c:3f:be:3e:1f:b6:6c:70:38:97:
                    1c:b6:77:93:61:57:ea:7d:76:38:ff:01:ae:f3:36:
                    a0:5f:bb:17:4b:82:34:99:f2:c7:b2:37:2c:f0:25:
                    02:4b:99:5d:97:33:a2:56:1d:27:6d:fb:00:73:57:
                    a2:45:34:8c:02:1b:39:df:28:1a:66:2c:a1:f3:c5:
                    d0:b6:be:11:dd:e7:9d:93:40:a6:88:f7:69:97:52:
                    f2:52:d6:f2:4c:cf:7d:99:fe:7f:d0:a6:74:7f:94:
                    ca:be:45:85:34:bd:2c:27:1a:34:fa:a8:50:cd:5b:
                    15:85:9d:fe:4b:65:00:0f:65:ce:08:16:aa:7c:a6:
                    ea:85:14:9b:33:d2:35:c0:61:60:a6:97:22:ce:19:
                    2e:ed:9d:48:24:43:8b:3a:79:d3:51:08:26:1e:31:
                    ca:46:29:24:d6:c4:40:77:e6:d4:81:a5:ae:b5:31:
                    a8:59:bf:8c:5a:d6:47:5f:b1:4a:e4:41:5f:30:c1:
                    6a:bf:a3:c8:bf:e2:d3:55:83:58:17:5d:57:a3:d3:
                    29:7f:e0:b6:33:2d:c0:29:c9:80:d1:04:51:fa:91:
                    40:9b:df:c1:3c:32:e1:d5:e8:43:f2:25:fd:e6:0b:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3E:5D:EE:2A:D7:7A:FE:35:7B:C7:8F:27:1F:06:3F:78:33:57:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/430e4bbe-bf26-38f7-bb74-efd8b8905ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c9:89:f4:b2:ac:b3:79:13:03:ca:58:e6:b1:2c:ae:56:07:
         0e:32:4b:63:e3:4a:9f:c3:b4:41:8a:49:cf:28:77:1c:79:f1:
         81:4d:d8:17:33:f4:4d:99:94:91:9c:79:49:64:fd:3e:78:6d:
         17:f8:05:eb:44:5f:97:d9:0a:b5:2f:a5:ec:d9:5c:80:47:b5:
         7e:ee:1c:c6:71:c1:8b:8e:00:f8:43:04:5a:35:f3:ab:42:cc:
         ed:93:ab:60:a4:ff:f4:a8:ed:61:5e:a1:47:22:f9:b5:6b:13:
         f1:e5:1e:6d:9a:0c:3b:09:d9:17:b0:bc:34:e6:30:f7:22:b7:
         8e:4b:9b:56:a9:4a:2b:71:77:5d:55:d9:3d:9d:8a:93:4d:01:
         18:d0:7d:a8:0d:28:13:1b:4a:42:94:44:89:72:13:81:7b:d7:
         02:5d:ef:1d:f5:fc:d2:e4:55:bb:f0:34:9a:0d:ea:97:56:57:
         92:6f:f2:7e:c4:2b:0c:4f:02:e5:75:f5:a3:fe:43:24:86:cb:
         6d:cd:10:ef:47:7b:fe:63:9f:2c:83:32:6c:25:2d:0f:d5:48:
         10:a4:3c:b7:19:70:c5:79:45:a8:ce:ad:17:a1:95:d3:10:f0:
         8f:94:e0:70:3e:ba:ca:dc:94:70:de:8e:02:73:90:87:2f:35:
         3f:c2:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:58:13 2025 by rpki-client