Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b50da040-064e-37d7-889e-01ee3cdd159a.roa
File:                     b50da040-064e-37d7-889e-01ee3cdd159a.roa (raw, json)
Hash identifier:          AKpxQJc+QIgEynyNgN6+BElixYzY2rgjZCsjwmPajSQ=
Subject key identifier:   A6:8F:2F:50:B6:0A:92:7D:09:B1:43:DB:6D:63:98:93:9F:FF:02:16
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA0D258CD2087F262D5449900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b50da040-064e-37d7-889e-01ee3cdd159a.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        198.40.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:58:cd:20:87:f2:62:d5:44:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=fa618d78-e847-4363-bb29-c69920389e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:56:0c:05:4d:02:97:1d:8b:78:c7:bb:5d:
                    e6:44:b2:33:ee:48:05:01:2a:0f:07:58:1b:bc:a5:
                    67:08:53:33:fe:77:e7:48:17:b0:ce:b9:f7:ab:22:
                    d7:b4:f2:78:12:98:1a:93:7a:f3:5b:7a:c6:7e:0e:
                    3d:f1:df:f0:fe:32:5d:c7:7b:05:f2:c0:b3:32:a5:
                    2e:b2:bb:35:87:7d:37:77:ff:87:94:bd:e6:3f:aa:
                    0e:ae:31:83:99:a6:98:ff:de:25:b7:22:fe:d1:90:
                    f8:a7:86:f7:6e:8d:c1:37:ba:1f:97:70:3e:2a:a5:
                    11:8b:aa:8f:53:c2:19:00:ce:36:b1:fa:97:31:a5:
                    aa:d8:06:b8:d5:9c:78:01:f6:b5:f1:0b:21:e9:be:
                    2e:9e:56:93:78:54:a1:48:c7:9a:64:c7:9a:3b:26:
                    9c:05:fb:ba:c4:67:4a:c0:69:6c:88:c9:a6:af:1e:
                    5c:5f:8a:0e:a3:63:88:3b:28:7e:df:ee:0f:9e:a4:
                    34:ae:f9:64:2c:44:6d:6d:33:e0:9c:58:e4:85:1f:
                    76:bf:59:55:e6:3c:5a:dd:5f:2e:7c:39:ff:8b:65:
                    eb:a4:30:c9:b5:d9:24:e0:6f:82:f3:e0:f9:62:37:
                    78:11:19:7d:93:4a:81:be:6d:f1:39:c7:e0:69:77:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8F:2F:50:B6:0A:92:7D:09:B1:43:DB:6D:63:98:93:9F:FF:02:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b50da040-064e-37d7-889e-01ee3cdd159a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:08:9c:ab:36:ac:af:74:25:fc:e3:03:bf:0f:52:10:7e:
         6a:30:71:7f:27:b8:14:1a:af:77:4d:ac:42:15:f4:85:cb:f8:
         da:49:06:d7:b7:d8:5c:48:8d:d8:20:58:1c:79:aa:d1:4e:2f:
         d6:0c:cf:52:83:c4:27:f1:69:af:6d:64:99:52:d8:e4:07:08:
         d1:6c:b8:8d:12:5e:42:c3:ba:86:e5:83:c6:91:85:ed:39:14:
         72:1f:2a:c2:60:f9:5b:cf:78:5b:11:72:3d:0f:51:4a:67:4a:
         f4:c3:be:78:04:83:7d:7f:e4:3d:ab:dd:5d:bd:a2:f2:49:11:
         94:78:f0:59:20:c4:1a:c6:56:0b:7f:15:1b:bc:f4:8e:6c:51:
         5c:e9:83:d5:c5:74:0b:ab:e8:9b:c5:cb:d4:d0:67:23:b9:e2:
         ac:22:84:08:a0:b5:55:3a:e7:8a:98:61:78:92:39:8e:d5:c6:
         08:fa:a5:c7:38:5f:2e:9b:a5:2e:53:0c:6a:50:65:00:19:c1:
         26:5d:1d:00:0f:0a:cb:2a:27:9d:70:05:f2:60:ab:e1:3c:6f:
         3d:03:eb:7b:45:8a:4c:ec:36:3e:e6:44:ed:0d:44:44:21:f9:
         51:cb:bd:14:25:85:88:ce:00:65:ba:ee:4e:a1:64:8c:44:0c:
         20:a4:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:17:03 2025 by rpki-client