Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/001664ca-515c-30f0-aabc-2397b0f97651.roa
File:                     001664ca-515c-30f0-aabc-2397b0f97651.roa (raw, json)
Hash identifier:          8ADjXpuAbtj6cdjU/ZAnVjHbQvg43O5mXTXy4H1T5PM=
Subject key identifier:   89:33:88:0D:BB:EE:03:80:8C:14:03:01:6B:A9:8B:2B:AA:25:CB:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A1F900D4BAD001BBD7107DB20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/001664ca-515c-30f0-aabc-2397b0f97651.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        72.255.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:0d:4b:ad:00:1b:bd:71:07:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=5a710daa-c7a3-4c3c-be79-2f6cffa6dbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:4e:e9:4a:e4:c3:1c:30:ee:2b:f2:71:81:
                    3e:60:de:43:51:d2:b2:d8:84:46:4b:98:4c:c7:55:
                    49:61:a7:74:53:7a:99:5e:e8:68:31:a0:ab:0f:cc:
                    51:4b:ba:3f:21:28:5e:2d:5b:13:59:3b:5e:ed:8f:
                    73:bb:94:ad:9a:75:09:52:90:54:c5:0c:77:c2:5d:
                    b2:7a:3a:84:93:02:2d:1f:2d:c3:a5:4f:69:5c:83:
                    b4:7b:3e:c5:61:96:ce:0a:56:a6:58:f6:b7:65:8b:
                    28:a1:c6:ec:da:e9:50:23:1d:84:ec:1f:2f:95:7e:
                    10:33:fa:71:dc:cd:fb:4f:1c:18:0d:f4:96:5e:72:
                    6f:17:a1:75:b6:74:51:80:1b:ea:af:e6:53:73:f9:
                    1c:70:b9:34:31:42:04:14:e2:f9:4d:0f:c2:42:69:
                    c9:32:5c:6a:ae:af:e5:a4:47:73:5b:c9:27:80:ee:
                    ab:42:3a:c7:f8:6b:19:59:d9:54:13:d2:62:06:4f:
                    f4:f2:8a:a1:7d:42:af:ce:10:b6:a0:de:c2:d3:97:
                    a8:29:77:1d:d4:a2:ea:60:95:93:c2:f4:dc:75:1c:
                    31:7c:fc:f3:4f:b2:d0:85:f7:c4:f2:26:6a:75:8e:
                    93:3c:7a:ec:83:22:3c:04:9d:f8:9f:46:b0:d0:84:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:88:0D:BB:EE:03:80:8C:14:03:01:6B:A9:8B:2B:AA:25:CB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/001664ca-515c-30f0-aabc-2397b0f97651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ac:49:3f:b5:70:aa:2d:72:06:0b:81:7d:0c:9e:42:a6:55:
         74:08:31:6b:3e:4b:c4:7e:1c:0f:09:43:7d:82:d6:06:40:b9:
         92:14:28:27:9e:e6:f8:75:83:5e:23:b1:8f:7e:d1:16:c0:db:
         3e:54:57:99:95:2f:d3:1a:5c:be:d4:75:44:33:00:ce:cf:9a:
         70:18:04:ed:7f:0a:53:a5:13:91:7c:43:b7:10:ed:2d:b3:8a:
         30:dc:24:f3:b1:87:73:c3:97:87:0e:a3:ae:ca:9c:f4:d2:ef:
         34:01:c3:79:1c:dd:cb:46:37:50:00:31:fd:88:ef:df:4a:de:
         93:98:d9:7d:d5:4c:3f:ef:99:77:db:95:42:83:58:16:b3:c4:
         30:af:c4:8c:b9:ca:a8:b0:24:9c:d9:97:54:5a:86:68:80:a7:
         47:ba:7c:39:ee:48:48:87:2e:00:24:b9:15:6b:10:0d:18:bd:
         f2:a3:70:cb:07:53:53:6a:df:c6:3d:82:69:7e:a3:8f:98:07:
         a8:df:99:57:3c:63:a1:2d:d9:88:b9:f6:77:53:a0:d0:b3:db:
         65:4e:9d:00:ee:eb:03:f7:15:7d:7f:ff:da:dd:5d:a3:17:6a:
         dd:5c:e8:e3:04:e0:c0:04:e2:66:e3:df:b0:67:ca:2e:f9:c6:
         1f:77:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:24:59 2025 by rpki-client