Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
File:                     58c33897-e305-33fe-b338-248e0ebe23a5.roa (raw, json)
Hash identifier:          fquSnr3I7amkTCIkxz9bx5asQUmWW0oETItfPYiQVg4=
Subject key identifier:   F8:F1:DF:31:A1:9F:AF:97:33:31:59:C3:F4:EF:58:1F:FD:23:CE:C4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A51D720BFA84020CBBF00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        192.119.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:51:d7:20:bf:a8:40:20:cb:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=8938b357-8166-434e-9403-2e9b8498affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:e7:53:38:2f:89:cf:b1:05:24:d3:ee:ab:
                    bd:31:8a:cf:b8:fd:20:31:e9:c1:6e:c5:31:7c:c7:
                    21:d1:d8:ec:f9:ea:43:af:03:35:0f:f9:e6:f2:6a:
                    fa:68:04:ef:10:2e:6b:83:cf:cf:6b:4a:34:7f:1f:
                    7f:8c:ba:e3:b0:e9:0e:e4:b7:11:37:85:c6:a9:6d:
                    62:de:2d:b1:25:36:0b:19:5e:94:c3:d4:12:7c:ed:
                    7d:e4:6d:00:6b:9a:92:34:f6:5b:95:7b:6f:c7:84:
                    ee:fe:7f:75:e0:f7:29:30:a1:aa:e2:12:f0:4c:bb:
                    b8:64:2b:3d:1c:20:b5:2c:c7:3f:8d:bb:c2:3b:07:
                    8b:18:21:96:8f:76:07:e8:e4:a6:67:03:fa:bb:08:
                    ef:5d:f7:65:a6:09:a1:82:ca:18:c5:00:a5:97:5e:
                    06:ee:fc:f5:ba:59:7f:3d:0c:0c:d8:0d:d2:9e:d1:
                    5d:69:60:05:41:6d:6d:e9:80:0e:38:cc:9c:53:39:
                    e0:1d:c9:bf:cb:31:8e:d8:20:6d:6c:79:b7:69:36:
                    2f:36:b6:b5:b0:39:15:c0:3e:72:54:6e:1b:17:04:
                    59:7b:27:3b:11:ff:72:8c:ec:e1:8a:30:23:9a:ea:
                    ff:8e:a5:4b:07:f0:66:e1:8a:bc:d6:f3:5d:42:d7:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:DF:31:A1:9F:AF:97:33:31:59:C3:F4:EF:58:1F:FD:23:CE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:12:8f:d6:4f:c5:3d:fb:f0:3d:0e:c2:00:50:1b:21:d3:c9:
         84:c4:47:6b:17:ed:e8:78:fe:89:12:79:a9:79:23:2b:c6:5e:
         5f:f4:e5:1d:c3:56:fd:0d:31:5b:c5:ba:c9:8d:88:f5:05:eb:
         f0:13:62:0d:7a:f4:1c:6c:11:86:bc:ef:1a:8b:00:c0:2a:57:
         ae:8c:29:25:30:8d:c9:6d:36:80:64:72:41:f3:c1:e9:98:42:
         95:af:e8:39:75:e8:f3:68:71:63:6a:8f:86:d5:b3:fc:f4:be:
         59:33:a5:35:5a:91:93:45:1e:7e:be:fa:b8:35:9f:73:cd:48:
         53:cd:62:bc:ee:09:c0:cb:87:36:1f:97:2f:87:39:3d:24:ff:
         90:e6:3d:35:58:07:10:3a:06:f5:bd:e1:7e:51:84:8e:dd:e8:
         cc:88:cc:4d:3b:be:11:39:06:7a:5a:31:3c:d6:4c:4f:ee:50:
         f8:97:cc:6b:e7:66:f4:7e:cd:8b:90:a3:64:29:6b:be:cb:0c:
         b2:6f:07:9e:c5:47:5a:16:de:73:b4:a4:15:68:48:bc:8d:81:
         40:39:0d:92:f3:89:19:d6:18:f1:73:db:88:35:8a:17:53:61:
         43:ff:cb:36:1d:e7:d9:6b:e7:c8:6e:06:7a:fc:d7:c9:1c:d5:
         1e:94:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:30:00 2025 by rpki-client