Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa
File:                     ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa (raw, json)
Hash identifier:          pE1i+Yr9+9Tk0BeX7MJi6U9WEqhv5mzZrFgqmT8z5/k=
Subject key identifier:   A5:6B:81:23:0B:4C:FF:86:16:8F:48:1E:5C:6C:FE:9D:51:D3:0F:4E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A52B19A0F4A7831995800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        192.119.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:52:b1:9a:0f:4a:78:31:99:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=656825eb-faa4-4ca2-a33c-e9e9dcd8730d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:4c:0a:14:6f:89:59:f1:91:92:79:a3:b7:
                    28:c1:40:b1:f3:1a:c2:b6:b1:f2:a9:99:f3:5f:42:
                    bd:ab:eb:63:6d:27:b1:ff:5e:dc:5d:c9:55:59:6b:
                    9b:25:b3:c3:b8:db:b6:46:08:ff:fa:13:e9:e0:40:
                    6a:3a:fd:0b:49:67:f8:10:6b:83:3d:74:1d:51:79:
                    c6:f2:f7:36:b9:65:09:16:9f:3d:0c:32:81:b0:ea:
                    ee:59:46:30:1c:ec:00:74:54:39:a7:e5:30:c0:e7:
                    a4:d5:93:9f:e6:94:4f:af:82:83:e1:77:34:24:dc:
                    9a:f8:38:76:9e:35:d7:ab:b3:fd:d9:10:20:f3:ec:
                    e1:ae:25:5e:96:42:ae:ef:2c:4e:e6:b9:c7:9b:4c:
                    9e:19:42:e0:c2:2a:b6:1f:6b:4c:db:e2:12:56:e3:
                    bc:d5:49:e3:62:77:0e:21:df:43:97:99:c4:ec:27:
                    11:c4:bf:ba:ee:14:c2:64:a4:5b:ec:d7:33:a3:32:
                    90:6a:3a:c4:f3:93:23:32:e1:e2:c5:6e:1f:08:5e:
                    56:d0:7a:05:aa:d3:fb:de:3d:53:59:b4:75:e5:e8:
                    f0:58:8c:7e:bc:aa:72:a5:d0:2a:d2:70:0c:56:cc:
                    a8:9f:a6:00:31:c2:32:3e:2e:14:ad:5e:cd:4e:d4:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:81:23:0B:4C:FF:86:16:8F:48:1E:5C:6C:FE:9D:51:D3:0F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:3f:eb:27:f7:1a:11:dc:ed:a6:7f:8a:db:77:e8:80:cf:
         c2:61:c2:7d:31:5e:8f:2b:f9:bb:2b:4f:d3:1b:be:37:9c:db:
         ad:78:a7:79:93:f2:5e:c9:13:a2:dd:ac:9b:54:b1:b2:f8:1b:
         39:88:95:1b:65:5a:ec:09:78:b3:bf:26:d9:4f:0a:9c:5f:9c:
         b2:07:73:13:60:eb:5b:7e:ea:82:07:9c:68:51:07:92:40:d4:
         d9:48:44:f9:a7:39:8f:6a:59:eb:69:e7:c5:bf:84:e6:51:fd:
         cb:77:2d:93:db:2f:1e:01:8a:02:36:b6:f3:54:e3:16:c2:0e:
         2d:e3:cb:74:ef:be:5f:05:5c:e5:6a:4e:55:9e:7b:1c:28:30:
         5d:b6:ac:71:88:d8:25:00:f6:16:4b:be:1d:de:3c:1a:7f:5e:
         c8:e5:b6:16:15:6d:ed:ee:66:82:12:b7:8c:98:56:4e:bf:6e:
         69:1c:c8:3c:ae:e6:c9:bc:45:55:7d:a2:19:b1:7d:33:c6:68:
         18:6f:c7:21:1b:c7:ea:48:51:95:e8:3b:b3:e2:59:0f:29:aa:
         d5:39:f5:96:2a:88:85:14:7f:44:1b:26:c5:98:fa:41:12:b6:
         7b:56:a5:a4:5d:9c:6d:c2:06:30:16:7e:50:73:1f:20:cf:77:
         f5:6c:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:29:46 2025 by rpki-client