Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/001664ca-515c-30f0-aabc-2397b0f97651.roa
File:                     001664ca-515c-30f0-aabc-2397b0f97651.roa (raw, json)
Hash identifier:          lC4F4v2U1SEWYYwV/OO+k/Yfirs8NS1p/dpCCoocZsE=
Subject key identifier:   5D:A6:43:29:4E:9E:2A:7D:76:E3:C7:C9:AB:33:4C:46:F2:CF:36:CB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B004BEADBD74B2C289F75D300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/001664ca-515c-30f0-aabc-2397b0f97651.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        72.255.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ea:db:d7:4b:2c:28:9f:75:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=77345514-36af-4f78-80e5-9251fc19de25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:f9:33:1d:eb:80:18:e4:6f:ed:71:25:a0:
                    3f:39:ad:b9:f2:3b:10:fb:9a:a2:a1:1c:f9:cb:59:
                    19:c5:36:9c:30:6c:f8:4c:d8:d5:85:25:74:8f:c4:
                    2f:70:42:ba:95:78:59:2a:43:5a:dd:12:ef:df:f1:
                    e0:88:ef:70:31:64:10:9e:c3:cd:36:a0:63:b3:9d:
                    6d:f6:d7:81:14:91:87:c3:92:45:1f:94:7f:cb:99:
                    68:ee:21:55:36:b0:e2:c0:a0:7a:e1:53:94:4a:ca:
                    06:f6:aa:b6:c7:28:7a:18:83:2e:e1:9e:f1:77:85:
                    c6:5a:ac:b2:2c:a4:f0:44:a5:88:11:5f:66:e5:04:
                    10:a1:40:f7:17:cb:c1:14:08:0f:e0:78:12:77:fc:
                    d1:51:e9:94:e2:a3:93:22:55:fd:a2:46:71:5b:02:
                    43:03:ec:e3:a2:d3:0d:7a:18:02:2c:5c:7b:89:25:
                    cf:ed:eb:6b:fc:82:fb:0c:83:87:0f:e1:1a:46:0b:
                    40:eb:00:92:b1:26:6f:2c:6e:94:b8:68:b7:1a:c5:
                    71:e7:f0:44:34:34:45:21:c1:c7:23:f0:f8:02:20:
                    d0:1a:94:e5:58:14:12:4c:ea:40:3e:4d:32:bf:d8:
                    8c:31:9b:92:3b:f4:f7:1c:d1:fb:06:01:95:17:8e:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:43:29:4E:9E:2A:7D:76:E3:C7:C9:AB:33:4C:46:F2:CF:36:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/001664ca-515c-30f0-aabc-2397b0f97651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:0b:57:c6:cb:c9:be:39:32:12:c2:c8:f9:f1:19:13:03:
         5e:24:2a:e2:be:b0:09:4d:1f:68:56:8e:a9:6f:86:de:9b:c5:
         e0:ac:e1:a4:5c:e2:18:1c:03:98:4c:34:1d:2e:ee:1d:6d:4d:
         59:06:7e:41:19:4e:40:90:01:9a:af:94:7c:42:7a:81:7e:ad:
         87:29:12:10:39:59:23:8e:91:9c:46:f6:37:2c:41:f3:4a:d1:
         43:c5:75:c7:4b:74:c7:35:d8:fe:26:1a:eb:26:5a:a0:6e:a9:
         8e:46:73:3e:65:7c:6f:2c:c7:0a:70:c5:26:07:e7:57:3d:1b:
         41:da:1b:f0:21:37:5d:c9:37:b9:e8:d4:8d:67:4b:39:d4:71:
         c5:7d:ca:d4:fb:f8:9a:d8:4c:bd:96:45:43:c4:20:ef:ab:f1:
         87:bd:d0:a8:d0:a9:f8:be:c1:40:d8:54:f7:9e:1b:98:03:0b:
         89:31:8e:93:91:fa:c8:c9:dd:9e:e7:83:3a:3e:28:15:85:e1:
         e5:94:e0:5e:d2:f3:70:7b:65:d6:93:d7:51:03:52:ed:82:1c:
         65:e7:f3:09:71:a1:d8:07:1f:a2:e0:7f:6a:f6:e2:5e:3b:e2:
         32:01:ec:c9:e1:bb:7e:4c:ea:33:28:9f:b0:6f:47:09:13:30:
         d7:3c:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:18:14 2025 by rpki-client