Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa
File:                     72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa (raw, json)
Hash identifier:          pAHVTadz/fNwwZQVYnURSgAbuYfH0Dt94CDx88S1Xoc=
Subject key identifier:   4B:3B:00:68:53:CD:9E:9F:90:08:63:AB:FF:79:05:BF:A5:3B:15:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC0163CE4F5E2E74022DA82C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        192.119.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3c:e4:f5:e2:e7:40:22:da:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=987021e5-08e5-46f9-8361-932a5ebe5673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:c7:21:4d:b8:20:3c:81:48:c5:4b:1e:53:
                    03:59:9c:e9:11:dc:40:54:5f:00:1d:b0:94:16:17:
                    86:3b:f4:31:b4:55:80:4e:77:88:7a:6f:60:bc:63:
                    ea:69:7c:d6:a5:76:47:6b:95:b9:6a:3f:70:d2:70:
                    d7:6a:9c:5a:eb:f7:3a:68:ad:b4:2d:7e:00:b2:81:
                    33:23:a3:dc:85:2a:69:97:46:34:19:ca:18:84:e2:
                    c9:4d:80:24:29:3c:eb:13:2d:a5:3e:48:b8:be:5f:
                    71:09:e5:c7:78:db:08:32:4c:ce:6b:b3:a0:fd:6a:
                    ef:a3:a8:8e:fd:e3:f3:61:a8:16:b8:83:fc:83:3d:
                    d4:cc:52:f7:e6:95:7d:7c:bc:74:21:6f:a3:20:8a:
                    e9:d3:4e:f9:ef:e3:ab:da:72:5c:02:4e:c0:cb:11:
                    d1:2a:c8:a0:b4:b6:b8:53:19:ca:29:3c:6a:df:d8:
                    81:61:54:70:49:ba:22:4e:e6:24:b1:d5:7f:b4:1b:
                    d6:c3:54:99:c7:37:85:c8:f4:fa:dc:82:d8:5a:25:
                    75:92:7f:0a:0d:38:b7:cb:dc:62:35:52:98:3e:38:
                    78:00:5f:c3:aa:e4:fe:7a:22:aa:54:d8:12:f0:af:
                    f5:e3:95:c0:42:89:1a:9a:3a:b6:d8:ed:22:23:2b:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3B:00:68:53:CD:9E:9F:90:08:63:AB:FF:79:05:BF:A5:3B:15:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:cb:7b:bb:a6:31:ab:07:37:8b:08:07:a6:2e:69:a0:00:
         84:6e:de:e0:6e:fc:65:cf:69:11:8f:ad:46:86:a7:14:88:03:
         f0:a5:91:85:13:ff:e9:e3:aa:3f:49:5d:8a:ec:21:6d:2f:53:
         ff:ac:b1:76:7f:e1:89:7c:6a:43:90:88:f3:90:bf:4f:5d:dd:
         5b:76:34:ce:db:5c:13:a4:54:93:ca:05:38:05:89:d2:b1:67:
         48:c4:a5:ae:17:7c:dc:16:1b:12:fe:ca:eb:45:41:ed:68:2c:
         f0:63:d6:97:a7:6f:66:24:2a:d2:9f:44:24:34:29:9d:c9:43:
         7c:80:71:68:33:d6:92:37:f9:e9:db:ec:fa:16:57:92:1a:74:
         d9:cc:fd:ff:b2:29:68:b6:54:97:88:3f:bc:25:46:09:9b:8f:
         c7:7f:b3:b8:cc:57:25:9d:d7:03:0e:0c:35:72:b0:19:54:33:
         3f:68:bd:72:14:7d:90:84:7e:f6:63:3d:ee:7b:c3:8f:56:5e:
         31:cd:78:bd:4f:54:81:c8:7d:aa:df:27:c9:21:4b:54:20:12:
         ac:a1:0c:f2:d5:a9:14:04:1a:07:d5:71:61:bb:ec:64:64:00:
         73:a0:d1:8d:43:60:41:41:fa:a4:4e:1a:cb:40:76:78:db:56:
         a8:f8:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:04:07 2025 by rpki-client