Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e314eb2-1a03-3c8f-8b00-0ae8a65f8501.roa
File:                     5e314eb2-1a03-3c8f-8b00-0ae8a65f8501.roa (raw, json)
Hash identifier:          JPH9LwJeNJW4yEZjMwrJ3ZFtK+Sozw/D1/Iowy3rADw=
Subject key identifier:   95:46:8F:05:23:36:8E:37:C0:E9:CB:09:DF:C2:B5:82:CC:1F:BB:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4B8901C42E8C965F80BE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e314eb2-1a03-3c8f-8b00-0ae8a65f8501.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        72.255.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:89:01:c4:2e:8c:96:5f:80:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=404f27c1-9cd0-4f03-999b-4051dd1afe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cb:44:3b:f4:0c:73:86:9a:5b:57:ff:8a:e4:
                    66:da:7e:56:99:a8:43:15:07:38:f1:97:42:8e:d0:
                    80:cf:b8:1d:14:fb:20:80:35:8f:3f:0d:a8:46:c7:
                    8b:ab:db:59:c3:16:57:7b:45:9e:a4:d0:08:4b:71:
                    71:a5:d9:09:e0:da:4f:d6:a9:98:58:c5:b5:c4:ae:
                    c8:9c:0e:bb:38:89:ee:08:bc:da:1c:70:cb:8c:6d:
                    11:3e:a0:f0:af:1d:e5:d0:a0:1d:2b:ac:d5:a9:6c:
                    d2:1b:28:04:12:30:7b:25:b3:84:ab:5e:76:70:2d:
                    93:fd:4f:d9:e4:7f:c8:48:05:eb:50:65:85:45:ab:
                    05:78:8e:6c:c1:91:10:a3:60:ba:19:09:c4:9d:94:
                    74:e3:da:53:49:c3:0d:26:d2:ff:21:b1:35:68:f8:
                    b2:e3:9a:a4:f5:90:4e:ce:9e:df:86:a8:e8:96:5d:
                    5e:b4:2c:de:52:10:3f:de:36:fc:f2:4e:73:f2:62:
                    25:2c:0a:de:b5:d0:8a:e9:86:2f:eb:61:06:19:28:
                    83:98:5c:05:ae:88:cf:44:36:a2:3f:8d:e9:7a:98:
                    52:da:16:c9:e5:ff:66:53:e2:15:8d:71:5b:a0:27:
                    e0:f3:12:e8:6c:b7:11:49:1d:03:4a:3f:b9:b4:66:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:46:8F:05:23:36:8E:37:C0:E9:CB:09:DF:C2:B5:82:CC:1F:BB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e314eb2-1a03-3c8f-8b00-0ae8a65f8501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:87:bb:bd:9f:f0:f5:f7:cd:72:c9:b3:e3:aa:24:e9:f4:c1:
         95:ef:92:69:0b:86:69:59:f9:03:55:04:c4:49:cc:59:eb:b5:
         1a:23:a8:76:70:8f:b3:37:39:51:0c:cb:26:ea:7f:c5:97:f3:
         d1:cc:48:7e:f9:eb:82:0f:23:6c:27:91:38:01:80:0a:59:47:
         37:a6:6f:27:6b:b5:a4:c6:18:56:38:c0:23:ba:7d:f7:a9:b1:
         e5:3e:1f:56:b6:de:2b:f3:5a:29:8d:8a:52:c5:a2:ad:8f:2b:
         0d:db:c0:69:3e:c2:f5:96:41:7f:fa:d0:1e:db:15:8a:56:3e:
         f0:4d:30:0a:0c:24:86:6f:a9:94:a9:55:a1:05:50:cd:7a:06:
         fa:48:50:12:14:b5:f1:73:b4:41:29:87:66:64:a7:a2:ff:1c:
         ae:e0:8e:9b:bb:86:38:5c:60:97:17:16:c1:b1:6d:2a:1d:8d:
         89:ad:71:02:a1:f6:c1:03:89:d2:99:8c:73:22:73:c9:2a:b9:
         d8:f1:27:af:8f:14:79:db:49:28:3e:31:56:89:aa:09:ce:49:
         d3:57:4e:af:49:be:9b:39:4f:65:a0:7c:8d:c9:f4:e7:11:a3:
         c4:03:97:02:0c:2d:54:f0:cf:54:03:e2:d7:c6:d6:fe:66:69:
         a1:a3:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:14:01 2025 by rpki-client