Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa
File:                     ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa (raw, json)
Hash identifier:          0x39/L+YZ4Lc2wvYo+/K3ycQufV817r8UA5t+cl0q/0=
Subject key identifier:   13:00:BB:89:F7:E7:E1:FF:B9:FB:1A:CE:FE:67:75:F5:A3:47:69:1E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC01624293D5EE7B9570DDE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        192.119.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:24:29:3d:5e:e7:b9:57:0d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=1a283377-266c-4bd4-b2ca-073c0a5feacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:23:60:59:8a:10:e8:36:b3:8f:b2:99:9f:
                    af:e5:9b:12:6f:43:fd:e9:e5:0a:7f:fb:38:86:27:
                    f5:0f:4d:e1:5c:ab:7c:d5:c1:6c:c9:84:be:a9:06:
                    7b:f0:4c:40:6d:73:2d:b3:bf:d7:92:81:fd:78:65:
                    28:78:84:0f:6f:c8:66:68:06:42:6c:ba:b5:ec:09:
                    78:9b:1b:64:2e:f0:ec:ce:cd:ba:ec:d5:c1:dc:31:
                    88:42:18:07:45:06:1a:8f:88:56:66:f2:38:08:41:
                    0b:80:c8:76:34:23:b2:db:76:bd:cb:d4:b8:a6:ce:
                    11:13:17:14:4d:58:18:87:12:93:2f:50:be:5e:4b:
                    41:09:26:1a:27:cf:e1:af:94:8d:8d:c5:6e:4e:91:
                    9b:e6:ee:ce:17:7f:5e:90:98:6b:71:57:43:e1:68:
                    d5:1e:45:3d:93:9d:51:08:90:7b:4e:6a:6c:72:f3:
                    a7:0a:2a:df:cb:e1:2b:df:90:c7:0e:32:eb:14:f2:
                    8f:f4:18:37:fd:3d:20:d3:ac:3c:51:af:b3:c4:48:
                    dd:98:76:96:a8:a4:40:af:74:51:5e:cd:17:14:af:
                    c1:20:e2:ab:7e:58:dc:0e:8f:4d:b4:d9:bc:5f:82:
                    e0:31:b9:bb:8c:66:da:58:18:77:6b:e5:f4:71:a5:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:BB:89:F7:E7:E1:FF:B9:FB:1A:CE:FE:67:75:F5:A3:47:69:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:96:9e:98:f6:85:aa:c0:9e:ed:b1:7a:1e:9b:82:2a:8f:
         0a:d3:c2:73:f4:2c:04:5e:1c:ae:da:38:fc:eb:bc:d2:25:68:
         a3:d4:c9:15:99:f2:35:a9:3a:6d:51:5c:6a:64:a8:06:b8:8e:
         72:38:82:24:d4:c8:b7:8d:14:a4:cd:53:03:b8:3c:71:bf:57:
         4d:8e:ec:1a:68:fe:31:82:2b:d5:76:6d:9b:cc:cb:6e:01:a4:
         4e:7a:1e:02:bb:a9:db:23:26:ae:50:3d:5f:d9:a6:2b:01:21:
         fe:1d:21:6a:ba:3b:71:47:d7:bd:42:c1:d7:60:f4:ed:76:63:
         1e:f7:a5:02:12:1e:03:0b:92:89:75:fe:ac:2c:e9:84:b9:4c:
         ea:0f:10:3d:67:f2:b4:33:e4:38:68:6f:a9:f4:72:6e:a7:e6:
         51:b9:c6:0e:36:35:1a:3f:5d:56:5a:1b:25:83:1b:d3:7c:50:
         a8:7c:13:0a:c0:b5:32:fd:99:b7:29:8b:4e:74:b2:aa:fa:b3:
         5a:c1:56:41:6c:ee:c2:5e:2b:da:e8:6e:a1:90:c6:9d:8f:be:
         9a:36:b1:e1:2d:b6:de:b0:d9:00:3f:73:94:d1:8a:f3:be:f5:
         8a:3b:2b:b5:82:23:2a:75:74:63:58:32:06:b0:57:c2:ef:19:
         74:9d:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:25 2025 by rpki-client