Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6de70038-5fcc-387b-8af3-d8cae62034bd.roa
File:                     6de70038-5fcc-387b-8af3-d8cae62034bd.roa (raw, json)
Hash identifier:          EHVy6umFN+5jDMmImszTgW4diVp7VZ5/Ng/2Pb99tR0=
Subject key identifier:   9E:FA:97:15:32:CE:98:C4:D2:1A:C9:8D:71:7F:ED:1C:0D:8C:4D:8F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4BAEC0BF355637CA057300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6de70038-5fcc-387b-8af3-d8cae62034bd.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        72.255.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:ae:c0:bf:35:56:37:ca:05:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=60068385-a160-4ae4-a6c2-c417c0c7568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:f0:6b:52:8f:22:51:75:b6:13:5f:07:f2:
                    1b:29:1d:af:1f:ed:5a:4c:76:ad:70:1c:ee:c0:76:
                    b6:82:2b:bd:56:bc:8a:cc:0d:40:06:d5:b8:77:ea:
                    ac:2b:9e:68:97:4d:f9:30:de:98:18:92:3f:e8:2e:
                    58:fa:3b:3f:4a:ef:d1:af:82:6e:4f:96:47:b4:b7:
                    73:ee:db:fd:07:25:e3:22:cb:3a:2e:dc:79:4a:07:
                    66:e4:a0:cf:0d:12:0a:42:88:fe:a6:c4:f7:15:10:
                    b9:fa:cb:4e:a1:93:9e:cf:6a:7e:a3:f4:2e:00:9f:
                    24:5f:c0:0e:9d:00:b4:16:d0:ac:48:c8:bd:df:49:
                    02:ea:fc:2e:9b:dc:9c:4d:37:73:aa:22:02:bf:c7:
                    c2:a1:67:14:10:65:44:1e:73:45:3a:fe:33:b0:2b:
                    1d:66:b5:5a:be:56:f5:74:64:27:91:10:ad:06:f4:
                    66:cf:67:c1:cf:6c:2e:9e:af:81:53:41:68:b6:de:
                    5a:74:b3:3e:e6:d7:64:b8:a5:fa:3b:fa:14:d8:f2:
                    f2:b7:6d:91:3d:7c:5e:0f:74:7c:c2:30:e3:d0:ee:
                    e9:97:a0:22:c2:38:c9:63:ba:40:49:03:0e:89:8c:
                    f7:fc:07:b5:fe:22:80:0b:e0:cb:05:6f:2c:b2:76:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FA:97:15:32:CE:98:C4:D2:1A:C9:8D:71:7F:ED:1C:0D:8C:4D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6de70038-5fcc-387b-8af3-d8cae62034bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:00:22:03:9b:67:c6:d2:91:69:5a:3b:85:9c:8a:63:67:82:
         a9:92:f2:7d:8c:50:a6:47:67:b0:27:74:c9:4a:7e:4e:13:22:
         0e:2d:74:1b:c1:15:ba:4b:7e:d8:1c:e1:e8:49:92:25:83:7d:
         4f:1a:51:31:c8:16:5f:7e:e8:db:3c:1a:90:65:31:4b:48:7a:
         4f:f5:24:30:42:ae:fc:45:6c:a4:aa:ae:b9:76:3f:29:cf:6b:
         cc:dc:50:46:76:07:53:fb:08:c8:79:37:b2:da:46:9c:80:61:
         1c:cb:94:74:f4:7f:45:ca:59:29:b0:8d:b8:f3:ec:d5:4a:f2:
         94:cf:28:2b:ed:b4:a9:ae:54:0d:de:d5:08:0b:fa:b6:31:32:
         dc:44:ea:79:e0:e3:1e:cd:76:3c:5c:eb:4e:ea:11:0d:4a:e7:
         d5:70:c8:35:01:b6:e5:53:24:16:07:ea:59:0b:49:1f:cc:94:
         0c:a3:db:b7:4e:20:23:15:fb:69:6b:dc:a9:c3:60:f8:d8:8b:
         aa:8f:c4:5e:49:e8:12:0f:83:b6:a1:ad:b1:bd:c5:d2:12:1e:
         a1:32:da:f7:8b:e3:b1:57:83:73:4c:2f:33:56:0a:fe:cf:57:
         d9:32:87:4a:59:04:80:49:ae:2a:2f:6c:94:18:4b:d6:de:d0:
         7c:9c:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:58:55 2025 by rpki-client