Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2c17948-634e-3078-a17d-f62f56477988.roa
File:                     d2c17948-634e-3078-a17d-f62f56477988.roa (raw, json)
Hash identifier:          vzJ1KTiHPk6eEs1Dx/fLDFChcePVB1LdSVj2T17sFaY=
Subject key identifier:   82:60:CE:7B:8D:88:00:DE:44:39:8E:F2:D5:F6:82:6B:1C:FA:53:9A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DC8F9E557CD7CDD55A603340
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2c17948-634e-3078-a17d-f62f56477988.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        72.255.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:9e:55:7c:d7:cd:d5:5a:60:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=50a5a772-8894-464b-843f-f493eaf99df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:79:c0:51:68:41:60:e3:31:72:76:6f:3d:
                    40:25:70:c7:fa:5c:81:ec:3e:65:c3:b7:cd:28:03:
                    06:c5:22:6c:50:59:cc:10:01:ad:cc:8f:a1:7e:14:
                    cb:99:c5:5a:ba:f2:f6:77:b7:c5:76:d5:a6:9e:df:
                    b8:c7:0a:1e:1c:a3:81:45:85:32:7b:dd:3f:b9:14:
                    05:88:30:f4:2c:c6:de:92:57:56:fa:ed:7a:46:f1:
                    d7:96:c0:71:d9:36:ea:cd:67:19:c1:21:36:8c:42:
                    8f:8a:ed:e5:71:15:ef:ca:de:83:a8:3d:eb:6c:01:
                    4c:b0:83:6f:e8:45:aa:2b:47:25:f0:69:30:67:f1:
                    a7:25:e0:81:b0:b0:d5:ab:ca:d4:a5:bd:0b:bf:6c:
                    01:0c:16:55:ba:6a:31:b2:83:64:eb:fc:b1:a2:9f:
                    35:5a:5c:8b:cc:37:f2:3b:02:c5:ed:f0:a0:b6:1c:
                    cd:aa:c8:9c:38:df:2c:b4:8a:74:e7:6e:36:cb:45:
                    f3:dc:ff:83:53:d1:51:2a:e3:a0:c9:aa:d5:9a:af:
                    5d:5e:5e:37:08:f4:14:fe:a2:70:9b:2d:21:c9:b5:
                    e1:b7:ae:66:53:96:ec:ac:17:ef:61:d7:f5:e0:a2:
                    17:a5:a9:ee:1b:20:86:b0:ab:ef:d0:40:f9:64:48:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:CE:7B:8D:88:00:DE:44:39:8E:F2:D5:F6:82:6B:1C:FA:53:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d2c17948-634e-3078-a17d-f62f56477988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:86:9d:78:f4:fa:2e:ae:24:80:a7:27:fc:09:12:2c:da:e0:
         74:01:81:d3:8a:e3:24:be:e2:ed:3a:5c:cb:d7:e2:ed:a6:b5:
         64:ee:09:0a:4c:36:c2:76:ac:68:d0:a2:a2:3b:fb:5e:c4:97:
         db:96:f1:8f:55:25:69:cc:28:dd:ee:40:14:8f:0a:8c:0a:e5:
         ac:39:f2:95:8b:31:d7:ce:8b:b1:37:cb:d1:16:43:fd:d2:09:
         3a:12:1c:dd:02:cc:ad:65:38:78:f8:3e:c3:62:e9:5d:25:0a:
         7f:59:ea:f0:6b:96:66:f2:46:f7:51:6c:ac:d5:e3:15:a0:80:
         61:ec:87:03:84:23:3e:27:23:e0:ff:68:d0:0d:04:aa:49:63:
         4e:06:91:a6:e1:72:a1:aa:80:8d:e3:89:d2:00:2b:73:fa:ba:
         9e:0c:0a:06:53:6d:3d:d6:d7:c5:24:23:22:60:48:79:bd:a7:
         ee:31:92:e9:68:27:3e:4e:1d:b6:0d:4c:5f:af:6d:01:75:0a:
         88:17:8a:11:1a:e8:be:95:45:d0:70:49:3e:11:21:d1:26:6e:
         22:b4:ab:3b:1a:0a:34:50:a6:53:46:7f:d1:dd:28:67:82:8c:
         4a:b2:ac:7f:9a:33:a9:de:40:87:2a:b7:55:66:2b:0c:ec:86:
         0b:6a:b4:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj55VfNfN1VpgM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
NTBhNWE3NzItODg5NC00NjRiLTg0M2YtZjQ5M2VhZjk5ZGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoF5wFFoQWDjMXJ2bz1AJXDH+lyB7D5lw7fN
KAMGxSJsUFnMEAGtzI+hfhTLmcVauvL2d7fFdtWmnt+4xwoeHKOBRYUye90/uRQF
iDD0LMbekldW+u16RvHXlsBx2TbqzWcZwSE2jEKPiu3lcRXvyt6DqD3rbAFMsINv
6EWqK0cl8GkwZ/GnJeCBsLDVq8rUpb0Lv2wBDBZVumoxsoNk6/yxop81WlyLzDfy
OwLF7fCgthzNqsicON8stIp05242y0Xz3P+DU9FRKuOgyarVmq9dXl43CPQU/qJw
my0hybXht65mU5bsrBfvYdf14KIXpanuGyCGsKvv0ED5ZEhYYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJgznuNiADeRDmO8tX2gmsc+lOaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDJjMTc5NDgtNjM0ZS0z
MDc4LWExN2QtZjYyZjU2NDc3OTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiGnXj0+i6uJICnJ/wJEiza4HQBgdOK4yS+4u06XMvX4u2mtWTuCQpM
NsJ2rGjQoqI7+17El9uW8Y9VJWnMKN3uQBSPCowK5aw58pWLMdfOi7E3y9EWQ/3S
CToSHN0CzK1lOHj4PsNi6V0lCn9Z6vBrlmbyRvdRbKzV4xWggGHshwOEIz4nI+D/
aNANBKpJY04GkabhcqGqgI3jidIAK3P6up4MCgZTbT3W18UkIyJgSHm9p+4xkulo
Jz5OHbYNTF+vbQF1CogXihEa6L6VRdBwST4RIdEmbiK0qzsaCjRQplNGf9HdKGeC
jEqyrH+aM6neQIcqt1VmKwzshgtqtOw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:22:17 2025 by rpki-client