Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
File:                     cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa (raw, json)
Hash identifier:          1qONnv/rxCIwB6ZKrbSo/1H3RGRSOnfvOOvmypJCnqs=
Subject key identifier:   E7:B4:7D:88:E2:8F:93:3C:1F:F2:22:34:F5:91:8D:DD:5E:69:83:48
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B9E07917CA30EF36384415080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        72.255.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:91:7c:a3:0e:f3:63:84:41:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=763288bb-a437-4cd3-a53b-a985478d18dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:4c:92:3f:fc:67:fc:2b:43:f2:27:3d:bf:
                    98:40:24:ba:e5:d7:4e:02:b0:7d:2d:bb:f0:61:1c:
                    f9:ff:45:23:9b:c1:b4:30:fa:07:1e:53:f4:5c:95:
                    d6:2b:25:31:37:ad:4a:fb:c5:6c:03:fa:1a:7f:c6:
                    d2:d8:16:cd:75:29:a3:55:68:e6:7c:04:07:c3:50:
                    61:12:01:46:9a:2e:ea:d1:84:6f:20:65:8e:09:ca:
                    a3:6a:d0:41:58:64:4b:06:2a:ce:9c:df:57:f5:93:
                    b6:d9:48:ab:aa:3a:bd:1d:09:4f:d6:92:e4:34:37:
                    6a:af:fa:57:1a:74:a5:c2:4b:bb:bc:16:27:be:bb:
                    15:26:fa:a7:bf:ad:88:b5:43:c5:9c:86:c1:ec:ff:
                    33:98:cd:5d:bf:e2:5f:09:58:e9:1a:dc:01:5c:a2:
                    5f:cd:13:e5:5c:c0:e5:44:03:5d:4b:b7:2a:7b:c5:
                    04:83:08:51:85:b1:b0:9e:36:4a:f3:55:52:8f:38:
                    68:83:ab:c1:15:64:88:12:6b:8d:90:05:a1:93:de:
                    d7:2f:e4:10:f0:33:56:e1:18:ae:e2:78:31:ce:c6:
                    90:32:87:da:1a:13:2e:83:79:a5:d2:db:ed:47:6a:
                    72:7e:7d:71:54:3a:39:ef:61:34:3d:3c:e1:23:3e:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:7D:88:E2:8F:93:3C:1F:F2:22:34:F5:91:8D:DD:5E:69:83:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:32:0c:e3:b8:d3:d3:d5:4a:35:78:d1:ad:5e:27:57:39:
         f2:69:81:ee:16:03:46:20:92:35:8d:4b:7a:d4:9e:b9:6f:e6:
         48:9d:30:27:65:d1:cd:35:12:50:ba:5f:2b:37:2b:0d:7d:38:
         be:b9:c1:78:19:ac:29:54:d3:ad:1b:5b:1a:0f:08:2e:18:45:
         f9:32:e3:0c:e1:4b:c5:5a:37:29:be:f2:e4:38:14:17:b8:e5:
         4e:cb:76:36:d6:99:a8:14:02:fe:c3:69:5b:d6:c8:6c:7e:5a:
         61:6f:d9:49:bc:9d:b6:55:60:55:28:91:ad:d9:d7:e5:c1:8e:
         6f:fe:bb:33:c1:0d:eb:21:a8:cc:b4:a9:7b:d4:2c:0e:54:20:
         74:72:7f:f3:8f:b4:88:65:13:b6:60:9a:db:f8:fb:10:39:68:
         21:f8:72:3e:84:22:f4:4e:cb:fa:e9:19:d5:1c:9b:eb:f1:f6:
         71:5e:62:4b:ab:36:b2:f6:fe:c8:9e:d6:5b:09:f6:3a:19:ee:
         9b:df:0b:a0:c0:3d:7d:5b:fe:d2:dd:10:f5:34:ba:c9:52:1e:
         40:96:a3:8c:5e:9b:2d:61:c7:44:4a:ba:22:7f:58:0e:6e:0a:
         97:ed:08:8b:95:23:bd:62:92:5d:cc:a2:76:32:bc:9f:11:81:
         bf:da:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:33:43 2025 by rpki-client