Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa
File:                     5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa (raw, json)
Hash identifier:          xZDhLYu+Ooncy9c6dYySsynN1pw11NRIWzaKdMA5LDU=
Subject key identifier:   47:B9:4C:0A:BB:9F:4E:52:8D:BE:18:CE:FE:C1:F6:5F:32:12:AF:14
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4B89FBA93C543325885120
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        72.255.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:89:fb:a9:3c:54:33:25:88:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=3c25716f-28c2-4f3e-b111-525f6d30cb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:5d:92:25:5d:7c:85:2f:a8:cf:62:f6:77:
                    95:ad:10:fb:84:c7:ab:d9:b7:ee:dd:43:2b:2e:8b:
                    b0:2f:e3:e4:02:6b:ba:43:bb:71:72:87:a6:13:a5:
                    e2:94:b9:b0:4a:3b:83:0e:08:30:b3:aa:d9:41:d1:
                    1c:01:b1:28:17:93:2b:16:46:a2:65:16:b5:a0:32:
                    ae:db:2d:c1:89:06:5e:27:f3:da:e9:b9:9d:07:07:
                    7d:cf:0b:c9:fb:c9:9d:ec:66:f2:59:cc:fd:fe:3f:
                    17:7c:68:18:c1:1a:00:af:9d:4d:bd:15:f9:bc:47:
                    6d:86:0b:b8:bd:d4:4a:d3:be:08:13:31:a5:2c:f7:
                    0b:30:c4:89:70:44:18:78:de:6e:38:47:d2:51:53:
                    5d:24:fa:46:74:88:e7:25:82:b0:4c:f8:e8:de:4d:
                    8b:bc:b5:21:76:b9:37:6f:5a:66:12:c2:e6:2c:d9:
                    de:01:6c:06:26:65:f3:1a:e5:da:3b:67:99:68:24:
                    43:2e:62:f1:d8:9b:37:7a:c9:e2:73:41:3b:d0:c3:
                    c1:9f:14:8c:f6:35:22:46:33:53:98:65:1f:d2:5d:
                    99:61:fc:b9:c0:df:23:e0:41:d4:74:44:5c:23:77:
                    86:49:67:41:88:fd:85:39:95:91:dc:ca:a2:9c:05:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:4C:0A:BB:9F:4E:52:8D:BE:18:CE:FE:C1:F6:5F:32:12:AF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f7:4d:18:59:12:2a:8f:5c:72:d5:0f:18:06:ed:91:c9:a0:
         1d:64:34:3c:b4:c1:94:00:f9:d5:b2:8f:a4:75:89:c1:56:88:
         d6:47:0c:ee:35:55:eb:aa:5e:42:0b:ec:f2:4b:06:9a:17:7d:
         06:f5:09:ff:5d:9b:ed:92:fd:8c:92:88:ac:5f:fb:ed:2c:9f:
         0c:c5:1d:48:4d:0c:a8:b4:9c:b0:e3:a9:5f:e2:2b:40:91:b1:
         a7:32:33:0b:c9:83:8d:7d:e9:07:da:01:c9:6f:d2:a5:ec:e6:
         3c:8b:cc:0e:f5:72:21:d7:c5:4a:78:90:e1:ff:c3:f0:38:53:
         c6:7d:ac:ac:d7:e3:8f:2e:8d:48:87:0c:87:5f:b5:e2:2d:da:
         f3:85:b3:a3:b0:1a:76:79:e5:58:f9:14:32:9e:c8:d9:17:7e:
         c8:52:a9:f7:1e:18:c4:97:c4:7b:2e:c4:3e:b5:61:19:19:c8:
         86:87:60:df:40:05:cc:49:9f:0b:10:a8:67:09:c5:ab:f1:6c:
         f3:02:87:a6:26:52:d1:f8:06:94:a2:4b:3c:d4:81:57:4f:7e:
         77:3b:f8:16:6a:61:8e:89:8e:2e:ae:41:39:e7:40:23:f7:e8:
         e1:b2:8e:a7:88:1b:60:57:70:bf:3f:88:35:9c:e7:f9:9c:a9:
         91:c3:9f:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4n7qTxUMyWIUSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
M2MyNTcxNmYtMjhjMi00ZjNlLWIxMTEtNTI1ZjZkMzBjYjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS9dkiVdfIUvqM9i9neVrRD7hMer2bfu3UMr
LouwL+PkAmu6Q7txcoemE6XilLmwSjuDDggws6rZQdEcAbEoF5MrFkaiZRa1oDKu
2y3BiQZeJ/Pa6bmdBwd9zwvJ+8md7GbyWcz9/j8XfGgYwRoAr51NvRX5vEdthgu4
vdRK074IEzGlLPcLMMSJcEQYeN5uOEfSUVNdJPpGdIjnJYKwTPjo3k2LvLUhdrk3
b1pmEsLmLNneAWwGJmXzGuXaO2eZaCRDLmLx2Js3esnic0E70MPBnxSM9jUiRjNT
mGUf0l2ZYfy5wN8j4EHUdERcI3eGSWdBiP2FOZWR3MqinAUaPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEe5TAq7n05Sjb4Yzv7B9l8yEq8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWYyMDIzMmMtZjhlNy0z
MmY5LTk3MGEtZDZiOTNiYWYwNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL3TRhZEiqPXHLVDxgG7ZHJoB1kNDy0wZQA+dWyj6R1icFWiNZHDO41
VeuqXkIL7PJLBpoXfQb1Cf9dm+2S/YySiKxf++0snwzFHUhNDKi0nLDjqV/iK0CR
sacyMwvJg4196QfaAclv0qXs5jyLzA71ciHXxUp4kOH/w/A4U8Z9rKzX448ujUiH
DIdfteIt2vOFs6OwGnZ55Vj5FDKeyNkXfshSqfceGMSXxHsuxD61YRkZyIaHYN9A
BcxJnwsQqGcJxavxbPMCh6YmUtH4BpSiSzzUgVdPfnc7+BZqYY6Jji6uQTnnQCP3
6OGyjqeIG2BXcL8/iDWc5/mcqZHDnw8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:33 2025 by rpki-client