Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
File:                     cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa (raw, json)
Hash identifier:          9qetMHt9tqDERaXWTQMOIlJjMAksJTLePMafdgW85Wk=
Subject key identifier:   56:79:78:21:2A:B4:19:59:BC:96:C5:BA:E7:21:50:C9:2B:36:F2:DE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DC8FA28CD59172D5F3A8CE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        72.255.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:a2:8c:d5:91:72:d5:f3:a8:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=b7b2dfbb-77ee-4223-8170-3eb1cab0e330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:6f:39:75:5d:1e:28:43:89:f1:a2:35:af:
                    9a:dd:1c:71:4f:49:98:ba:5f:38:5f:78:a8:c9:d7:
                    36:33:f1:af:72:f1:97:19:df:3b:44:ed:36:9f:b5:
                    99:98:af:3b:ab:d7:1d:bd:31:e8:07:ad:39:9a:08:
                    d0:5f:47:95:ba:19:a4:57:30:74:56:a6:2f:da:6e:
                    6f:71:f8:2c:93:41:ba:4a:49:5e:d5:34:9a:c9:5c:
                    7a:c0:db:e6:83:66:1e:1f:b2:84:07:30:42:50:a4:
                    27:64:a3:04:bf:c2:5b:9c:a8:76:0c:9a:14:7a:96:
                    db:ff:2a:7a:e5:d1:5e:96:ca:e8:ec:af:62:c6:f5:
                    f2:50:d6:90:d1:61:2a:ab:31:5c:c2:96:b3:80:02:
                    3a:fd:51:c6:2f:63:0d:0f:4c:1c:57:60:eb:81:6a:
                    22:c0:06:b2:0f:09:d1:3e:ce:e1:f4:6d:61:bd:7f:
                    0d:39:1d:9c:b4:99:3d:07:58:38:e4:f4:b3:31:22:
                    78:55:55:7a:cd:ae:dc:38:4a:a9:49:20:02:49:23:
                    c4:e3:a2:7e:37:2a:cf:96:cb:ba:57:a2:e2:9e:5e:
                    44:4e:db:ec:e2:50:f5:e0:7f:0e:c0:8c:87:59:e9:
                    33:2f:af:b4:c4:ef:60:47:fa:dc:94:01:8e:3c:1f:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:78:21:2A:B4:19:59:BC:96:C5:BA:E7:21:50:C9:2B:36:F2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:19:50:02:f3:05:e4:ff:42:2d:f6:c0:2b:62:4d:5c:b6:
         c3:3c:ed:c0:6c:ab:38:5c:ec:04:32:b9:d2:4d:00:ea:ed:ee:
         8c:90:3b:ca:f5:8a:11:3e:0b:d0:94:a3:fa:92:78:02:69:b0:
         bd:53:c4:56:f8:ac:d0:9a:0b:51:16:64:ff:b6:c2:d6:e9:27:
         79:46:21:7d:7b:6d:ee:71:c7:17:ea:e9:73:f1:5e:57:1f:da:
         1a:66:3a:ab:7c:60:04:a2:22:e9:5e:ba:41:2f:e9:1e:b1:1e:
         d9:26:e7:3e:72:98:e1:fa:7c:b6:ff:45:94:94:63:80:28:b8:
         d4:56:cb:8f:d0:91:9a:06:96:99:c2:8e:9b:ce:ca:b4:be:af:
         b8:6d:e1:ee:f9:c5:fc:4a:78:ec:75:ea:8c:de:fc:f8:1d:5c:
         77:19:26:4f:05:55:4b:ed:0c:38:67:ea:bd:df:f1:11:94:d0:
         73:23:ff:7b:1d:84:63:1b:9c:ce:d4:b4:e7:ed:b4:97:92:a2:
         f5:2e:fd:2a:9d:13:9c:3a:32:48:07:e3:98:39:36:7e:d1:42:
         4d:d9:60:14:93:1d:cf:e2:d7:e0:ec:ec:db:9a:3d:a4:53:38:
         55:51:18:cd:0d:25:df:4e:3b:24:26:eb:d8:d6:31:6a:f5:db:
         41:a6:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:54:11 2025 by rpki-client