Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cd32540-60ea-34b6-b742-283e95f88a7c.roa
File:                     4cd32540-60ea-34b6-b742-283e95f88a7c.roa (raw, json)
Hash identifier:          gdl+CiQilJc7oU0yuMK9/qPb2oBN+Tuo1eyS3eDCwuw=
Subject key identifier:   F5:C0:36:57:06:33:BF:CD:02:F3:80:05:EB:54:31:75:5A:DC:78:B0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC0165121D6B846F6B3171980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cd32540-60ea-34b6-b742-283e95f88a7c.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        198.40.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:51:21:d6:b8:46:f6:b3:17:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=6a94b8bd-8c94-4a38-bbd0-5ecd12a52115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:51:4f:5a:12:a3:6a:96:d6:8e:fd:44:93:c8:
                    ba:4a:3b:8b:68:6b:92:1b:e3:0f:f5:17:1b:e5:91:
                    31:d4:bb:aa:49:b5:bc:cf:75:e5:e9:14:49:9e:56:
                    96:68:7c:fb:a4:48:51:a8:7a:68:2f:5e:1a:a6:f6:
                    0d:d4:41:2e:ec:f6:75:98:3e:59:cd:60:d4:2d:9b:
                    c7:61:7a:f0:da:fe:96:29:a0:7d:60:b6:ac:24:52:
                    fc:b2:ee:54:54:3a:05:83:cc:43:44:b3:a4:c4:18:
                    7a:1e:9f:99:19:18:c8:aa:27:a3:ab:6d:46:51:5c:
                    62:fc:50:ba:57:ad:96:09:fb:dd:d4:50:ce:e1:7d:
                    14:06:b4:5a:20:5d:95:bd:a0:3a:39:08:70:2b:1c:
                    15:5b:f6:d8:68:5f:75:2c:63:99:5b:61:e6:50:42:
                    cf:a7:56:a7:11:16:31:a7:33:49:0a:7a:e4:ab:61:
                    62:8b:73:3b:cc:ff:53:c8:9e:d1:4b:f1:d9:4d:01:
                    df:55:24:34:6c:b7:ff:39:dc:04:89:f6:29:70:ea:
                    3b:24:f4:68:08:69:3c:c9:f9:f9:54:a3:61:2f:c5:
                    ef:54:ee:8a:6a:ec:fc:21:8f:ac:0f:30:0f:56:3f:
                    a6:05:08:4d:90:a2:36:05:39:eb:73:5a:19:77:60:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C0:36:57:06:33:BF:CD:02:F3:80:05:EB:54:31:75:5A:DC:78:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cd32540-60ea-34b6-b742-283e95f88a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:0d:b6:cf:2b:ae:d7:84:a8:bd:4f:bc:7d:fd:25:a3:33:
         50:c4:06:6f:02:fe:a0:d0:f4:d7:ed:5e:d6:49:49:60:d8:20:
         72:3b:fc:d8:a4:0d:2e:2a:ef:81:9b:d2:a7:ce:d6:3a:b9:bb:
         dd:0e:18:4b:ca:85:2c:17:99:31:6d:9a:83:1c:cf:5c:53:fa:
         45:ad:61:5d:52:c6:4d:b6:67:95:6b:77:65:d2:25:90:95:e6:
         df:68:41:74:47:d2:d5:63:12:c7:59:6b:00:79:df:32:2e:d0:
         0d:44:b8:5c:c8:5d:62:25:ae:d2:1f:30:a1:d0:f6:68:71:c8:
         ad:8a:2e:f3:12:ee:db:06:96:53:ec:e4:c7:3b:3c:16:e7:2a:
         ef:3b:24:01:77:d4:d3:99:95:c0:78:83:0f:c6:96:82:cc:5b:
         0d:ea:ee:aa:a0:4c:ab:e0:8c:0a:9b:2d:f8:c9:bd:4e:1c:4c:
         12:41:d1:fb:3f:55:c4:ff:7c:54:5a:45:bf:11:fe:cb:6f:fe:
         ae:a3:cf:7e:c9:2b:f7:79:0f:37:10:d1:4c:49:c5:e9:88:89:
         44:25:54:5d:96:6c:5e:24:d6:14:b3:53:1e:03:e5:df:27:61:
         41:3e:4e:58:f0:f1:65:bf:16:4c:ea:50:8a:09:f8:a2:91:57:
         f4:ac:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:37 2025 by rpki-client