Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c2b00f3-8a08-385c-8a24-94b316f5b135.roa
File:                     3c2b00f3-8a08-385c-8a24-94b316f5b135.roa (raw, json)
Hash identifier:          b0ZPGOAhW5SgEOw77wMtT9f1ZMWbdUQPa0lNWPbWlls=
Subject key identifier:   27:23:23:FE:38:9B:4C:04:D4:78:51:25:02:6D:57:79:AA:9E:C4:63
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE0C22296D9320133A89BF5F0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c2b00f3-8a08-385c-8a24-94b316f5b135.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        63.142.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:22:96:d9:32:01:33:a8:9b:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=7b0a9d1e-895d-4c5d-9eba-c6ea397912c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:dd:3b:49:14:cc:b2:bd:1c:47:e3:66:fa:
                    39:e1:51:f1:04:11:ce:0d:a1:73:3b:ab:0d:ad:61:
                    5e:55:3c:b0:9e:a2:3c:53:91:ee:43:45:ff:f0:e0:
                    cf:d3:79:16:19:a2:fb:d0:d4:6f:1d:31:a2:21:34:
                    e2:b0:f7:b3:01:62:c2:23:50:98:b3:2c:c3:f1:0e:
                    21:71:ae:8c:f1:26:e5:00:d1:3d:d1:e8:33:53:4e:
                    5a:30:2e:93:72:0f:8b:1c:15:fb:e1:06:16:eb:51:
                    93:7c:9f:bf:e5:47:ef:51:76:83:34:c9:0e:8b:34:
                    ff:49:a0:c2:79:44:98:87:43:49:24:45:91:b7:41:
                    b9:1a:06:71:0b:d8:3d:eb:a1:f7:ad:62:c0:e6:f3:
                    c2:9e:ea:a2:72:98:36:7d:02:cf:bb:e3:59:c1:4d:
                    f9:f7:11:b2:0b:14:39:49:05:13:63:ca:51:d5:96:
                    f9:4b:1c:52:4b:a2:c3:3e:b7:9f:a5:24:01:95:9e:
                    2b:53:14:8b:e5:d1:7a:1a:96:9e:1d:38:1b:e1:b7:
                    ef:03:7a:a2:36:a6:f3:16:fa:6c:a6:75:48:16:81:
                    2e:33:a9:64:40:cf:8c:fc:28:b9:7d:26:c5:e0:f8:
                    64:45:4d:86:55:86:52:e1:f5:67:f3:01:38:e6:f6:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:23:FE:38:9B:4C:04:D4:78:51:25:02:6D:57:79:AA:9E:C4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3c2b00f3-8a08-385c-8a24-94b316f5b135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:64:9e:52:6e:25:75:3d:eb:0c:04:b7:41:96:d2:9c:10:
         c4:18:ec:12:d0:b6:8f:99:a0:51:d9:70:17:a7:b3:8b:39:1b:
         b4:20:ce:b4:77:cb:69:76:f7:b5:9c:d6:11:2b:cb:02:81:46:
         90:4c:87:ca:16:9d:3d:eb:83:a7:d8:30:1a:a6:13:2a:0f:e2:
         dd:7d:6b:9c:3a:b4:db:11:4e:2b:d9:52:fc:9b:d0:5b:93:6a:
         3c:f8:39:de:56:21:31:55:f8:05:54:e0:da:ac:a0:38:e1:37:
         3c:e0:91:3d:2c:3b:a7:ae:46:75:25:ba:9f:72:b3:01:f1:84:
         24:aa:7d:7c:d3:85:ad:18:ee:6b:f4:0c:89:2b:97:20:ea:ef:
         78:f6:7f:7c:c9:77:a4:c9:bc:77:77:43:a0:3e:45:94:97:41:
         8a:f6:ab:1e:e1:a4:0a:bd:32:59:94:90:23:e4:b6:34:f6:f5:
         a4:d6:22:29:44:cf:66:2a:e1:12:6d:09:33:d7:8e:78:dd:99:
         aa:84:56:9e:97:e8:1a:3e:f4:c7:8c:1d:6e:52:12:96:66:fa:
         81:1b:4f:4a:8c:30:56:d1:ca:5d:b2:cf:b8:c7:6f:99:3e:bb:
         c6:8b:b3:76:95:dc:8b:6b:19:6a:d1:7b:7c:cb:4f:59:40:9c:
         13:8c:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:07 2026 by rpki-client