Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa
File:                     cf073435-3e42-3d47-9b1a-352d76f1337b.roa (raw, json)
Hash identifier:          2pTBXw193/0xUVi/aeEWwAz2+XCJq4u5X2xUC6eD67g=
Subject key identifier:   D1:6F:26:86:1B:D6:8A:40:E8:12:CA:DC:AF:50:CD:74:5A:6B:1A:19
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC01623B9964D132036701F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        192.119.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:23:b9:96:4d:13:20:36:70:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=61eba0e2-b1a1-434b-8cc9-8d6c9edf37fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:cd:97:c3:b0:77:04:41:d6:05:e8:fd:97:
                    70:c2:dc:0b:5b:ee:26:a8:21:2e:b8:91:d8:3d:9a:
                    ee:08:b0:d7:c0:e3:63:da:e7:40:9f:e9:62:1c:2d:
                    6b:e7:4c:1f:2f:de:f7:ee:db:2e:5f:e7:8c:12:85:
                    e7:a3:1d:6f:57:1d:ce:a6:41:bf:f1:8a:df:15:8c:
                    66:dd:29:f9:5e:a6:c3:4b:2d:7a:0e:9e:69:04:52:
                    b1:3f:13:40:4a:b6:d7:1e:9c:b9:c1:1e:d4:ae:4a:
                    e6:34:d7:92:46:2b:a0:af:ea:d3:ae:de:89:39:6a:
                    41:bd:a6:14:50:ab:87:59:01:ec:0d:ea:96:6d:ee:
                    8a:f0:72:01:b2:28:7f:77:95:1a:a3:73:cb:33:a0:
                    ab:38:b8:46:8e:b1:1f:36:31:c7:44:16:a7:fa:03:
                    2a:6c:d5:ca:c0:2e:6e:a7:83:74:6d:18:69:7f:83:
                    93:2b:59:4f:3a:92:19:3b:9a:eb:e2:86:6e:95:6b:
                    23:32:5c:4e:e3:9f:00:fd:ef:70:9c:d0:ce:b1:5c:
                    0b:82:3c:01:2e:10:28:31:fb:5f:8b:f7:b7:b8:dd:
                    87:73:c1:16:77:ca:59:a0:8d:51:88:72:e7:57:1a:
                    35:cc:dd:f8:9a:93:17:cd:e7:69:df:8e:c7:dc:b9:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6F:26:86:1B:D6:8A:40:E8:12:CA:DC:AF:50:CD:74:5A:6B:1A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf073435-3e42-3d47-9b1a-352d76f1337b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:83:10:eb:c3:fe:1d:c5:ae:36:e8:3a:27:66:23:86:74:f5:
         aa:9d:aa:65:bc:57:b4:37:28:34:78:6b:f3:0f:5e:f9:25:50:
         5a:5e:e0:40:1e:6b:b3:15:d9:a0:4b:15:5b:75:af:a3:35:be:
         ed:f7:14:65:0e:9a:2f:36:8f:50:41:32:4c:a0:f0:2f:5e:dc:
         9a:7e:4b:0a:f9:cc:61:63:35:03:8b:47:b3:5c:2a:18:3b:32:
         04:e3:5a:11:b3:e0:61:25:6e:cf:de:c0:ee:87:1d:8c:26:90:
         8a:d6:27:c2:c5:80:e8:ad:51:dc:e9:2a:73:fa:8f:df:42:05:
         d1:50:63:d2:2b:4b:17:d4:4d:20:fb:9d:f8:95:8b:32:31:75:
         7b:8d:e7:bd:4d:4e:1c:4e:75:b8:01:ef:5b:73:24:2e:3a:fd:
         0f:fe:b9:77:79:10:66:06:1d:84:a2:2c:1d:a9:b9:7e:26:57:
         af:02:cd:06:5b:4d:20:86:ea:8b:62:a2:b9:d4:b7:6e:1d:1c:
         58:6f:71:94:2a:e3:81:57:f2:df:ed:ee:13:be:e3:10:7f:83:
         8f:37:c8:e7:a0:68:33:5d:9f:43:11:92:47:60:4e:62:44:ea:
         86:7e:c4:69:8c:87:3e:7b:a7:0c:f7:8d:42:ba:4a:63:1d:f2:
         3e:03:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:07 2025 by rpki-client