Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63011db1-dbaf-31e3-acd9-3703aa91aecf.roa
File:                     63011db1-dbaf-31e3-acd9-3703aa91aecf.roa (raw, json)
Hash identifier:          zKPvLNBAbM5R1zCjEc2w5ustiS9kH9Qg142/v/Y4v7E=
Subject key identifier:   16:6E:8F:7C:47:93:CF:10:87:F6:C8:7F:DB:37:80:3D:E3:B3:37:65
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC01650734318837CAE5D6F60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63011db1-dbaf-31e3-acd9-3703aa91aecf.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        206.226.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:50:73:43:18:83:7c:ae:5d:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=ddd10de9-7142-415a-9487-957fe69e9c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:fd:f3:39:b1:e6:48:36:47:fc:39:36:c3:
                    c2:6f:0c:af:1e:36:3e:5f:a4:a7:39:0b:db:54:31:
                    fc:c6:46:05:d8:a5:83:4c:82:e2:f8:44:7f:77:44:
                    fb:4b:b7:0d:bb:3f:2f:1a:aa:db:84:e5:d1:34:97:
                    09:16:f2:b3:a5:eb:83:b7:7c:38:fc:0b:19:61:cb:
                    52:3d:72:c7:a1:55:aa:0d:c3:dd:5c:0f:d2:a2:dd:
                    49:d1:c4:80:50:55:46:8b:5b:a8:fd:d5:4d:2e:a1:
                    7e:7d:65:fa:f5:97:20:de:17:7f:09:39:4b:5c:d8:
                    33:d0:23:40:b7:a6:e0:6e:c6:81:c8:a1:d2:eb:e2:
                    2c:68:cc:8a:1a:d7:f3:4b:96:bd:dd:23:d1:1b:a7:
                    a6:ae:38:08:09:fc:de:a4:c3:6d:43:25:5a:b6:1d:
                    aa:2a:36:7c:12:0b:d9:38:63:03:3e:0f:ca:2e:a2:
                    45:ab:5c:12:4f:e3:84:8a:1e:4f:57:53:d5:82:d0:
                    d9:5d:75:1c:99:dd:83:4c:50:60:cd:11:6b:31:41:
                    06:35:00:52:3c:44:fc:cd:d7:2c:52:66:b4:b8:c7:
                    cf:1f:62:e2:07:ef:a3:9b:0b:f0:db:fd:3f:8d:1c:
                    64:97:cb:a1:50:a2:23:98:51:c4:22:8f:d2:13:e5:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:8F:7C:47:93:CF:10:87:F6:C8:7F:DB:37:80:3D:E3:B3:37:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63011db1-dbaf-31e3-acd9-3703aa91aecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.226.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:0d:c9:da:f9:3a:41:96:54:ac:84:6f:93:3a:c2:5c:a5:
         59:74:0b:d8:e3:ca:53:19:23:33:b7:d8:1a:a4:40:a4:1f:14:
         19:82:e7:82:35:6e:f3:c6:71:bf:ea:2e:cf:30:c6:d8:64:d5:
         c1:84:c4:1e:8d:08:6a:88:62:79:cc:d7:c8:f5:4a:de:12:c9:
         91:8a:b3:e8:cd:8c:a3:79:61:02:c8:a8:11:e1:24:69:74:a6:
         19:67:7a:11:3b:cc:17:cc:be:24:7f:f5:71:4a:eb:84:27:99:
         5f:a9:4b:aa:2d:46:8e:64:b1:98:cf:ba:de:0c:6f:df:94:70:
         56:7d:0e:c4:d2:fb:35:22:4c:ba:f3:8a:e8:af:a4:94:50:ff:
         ca:f3:ee:4b:c4:27:68:78:8d:46:e8:ca:eb:c8:9b:d6:51:fe:
         c3:23:dd:df:71:3f:8c:dd:07:4a:3d:8c:23:73:9a:5f:49:4d:
         3d:2f:d5:1f:84:bb:1b:2a:26:b0:16:e9:e5:fb:86:90:a5:73:
         96:de:28:c5:8f:9b:a9:58:1e:66:de:65:1a:3c:59:53:ed:84:
         0c:81:56:0d:f7:3e:29:c0:83:1e:ab:23:5c:43:73:47:87:51:
         b9:34:3a:ab:5e:5b:ee:4e:42:1e:35:fa:e8:0a:d8:4a:28:54:
         3c:c7:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:19 2025 by rpki-client