Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c094cb03-8144-3231-8f35-2020eb89e807.roa
File:                     c094cb03-8144-3231-8f35-2020eb89e807.roa (raw, json)
Hash identifier:          Z/9p0mXn58Kob6Ab8xMtZMr1C/wLgEkEwnwqsMJblfc=
Subject key identifier:   2B:B8:34:5F:B8:A3:5F:06:CA:CB:36:66:2A:C8:27:84:12:1E:4C:52
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA0D2439CDC6346E35B0AD680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c094cb03-8144-3231-8f35-2020eb89e807.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        198.40.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:43:9c:dc:63:46:e3:5b:0a:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=e0346599-6531-409c-b312-14a23cab9d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:5d:4a:50:b0:f1:03:ce:5b:e6:f6:df:53:
                    27:89:6f:37:59:16:97:da:14:8c:c6:39:19:de:8c:
                    fa:73:17:ad:b0:48:f0:95:f5:25:7c:ae:84:00:fc:
                    af:d7:bc:fb:31:d3:04:11:13:7a:ff:69:6c:d1:e9:
                    83:c5:06:d8:f6:b4:a3:f6:25:e0:76:7b:2f:42:72:
                    07:da:60:15:cb:39:5b:13:df:9b:90:a9:27:3b:77:
                    6f:4d:da:1c:f3:a8:8e:1c:8b:c2:c3:b4:fd:7a:7b:
                    3b:c6:b1:42:a0:63:66:43:45:d5:da:02:02:5c:66:
                    c1:ca:7e:2c:8d:6d:70:38:7c:c1:b3:2f:e1:e9:d5:
                    f8:44:e9:3a:f6:41:f5:ff:fd:6f:43:64:a7:41:f9:
                    7a:c2:a1:3b:a4:5f:81:1a:8b:12:e5:21:91:40:76:
                    95:18:f5:0b:54:0d:52:b1:0d:5c:b4:82:99:05:a0:
                    54:19:1e:d4:68:68:47:1d:09:43:ae:d7:74:ea:4c:
                    e9:11:86:6e:73:30:61:64:dd:93:7e:57:14:70:73:
                    56:12:20:69:5d:0a:99:94:f2:00:b4:79:b4:15:b4:
                    c6:c5:71:ab:02:61:a5:62:b4:6a:e6:a1:69:93:11:
                    30:16:60:d7:c4:66:54:56:33:4b:8d:52:5f:1f:95:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:34:5F:B8:A3:5F:06:CA:CB:36:66:2A:C8:27:84:12:1E:4C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c094cb03-8144-3231-8f35-2020eb89e807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:34:de:05:29:6b:30:12:8d:08:41:f7:25:fa:91:66:64:51:
         b3:0d:55:fa:56:fe:81:76:75:6e:e8:aa:41:55:8f:30:bb:d8:
         ab:62:8e:84:b4:55:a1:d0:93:62:22:4d:ea:ec:9d:3b:1c:61:
         6a:2a:88:05:ce:ae:12:01:8c:6a:a2:45:3d:d7:6a:2c:75:32:
         fb:3b:8c:ea:8a:75:3b:df:d5:c2:14:16:4f:97:dd:f5:79:28:
         c8:6a:1f:af:8b:0a:e6:f8:a2:fb:bb:34:54:e7:4a:42:d1:0f:
         ec:03:7f:51:f6:01:63:5d:8b:e2:a9:18:ae:e2:a3:bc:40:e1:
         a6:38:0e:8d:7c:3c:c9:6b:dd:3e:8a:24:55:bc:75:74:17:aa:
         c8:d9:81:79:86:a3:5c:a1:12:ae:00:21:3b:23:54:9f:8c:a6:
         1c:ab:8e:50:d6:01:97:eb:c9:23:db:36:3f:f5:c9:98:35:29:
         bb:94:fe:83:24:6a:fa:92:aa:4d:29:92:39:f2:37:be:ba:9c:
         08:24:20:33:60:15:19:49:bc:89:ab:2b:9e:35:5a:69:d8:86:
         d7:01:db:a1:e7:79:8f:89:cd:d7:04:d4:05:24:d5:82:1f:76:
         1e:d0:24:fe:a2:86:82:9a:6d:27:36:46:2b:58:6c:72:49:e9:
         a8:89:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:15:29 2025 by rpki-client