Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/024376e5-8e7b-30f8-81bf-85daad1c4673.roa
File:                     024376e5-8e7b-30f8-81bf-85daad1c4673.roa (raw, json)
Hash identifier:          ju2umxPkoGnc9YrrSrsj3rFUN8DauhjIAef4XJW7zL0=
Subject key identifier:   99:1A:0A:30:76:8E:E6:BD:8C:FD:A5:AD:81:DA:DC:2F:3D:A7:3D:A1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4BAF54B1792BFD9CE76D70
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/024376e5-8e7b-30f8-81bf-85daad1c4673.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        72.255.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:af:54:b1:79:2b:fd:9c:e7:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=371c7729-3465-4c6c-863d-cf7af93d8d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:7d:2e:73:44:49:f6:5a:96:55:d5:b6:8e:
                    48:dd:fd:ac:7d:6c:cd:70:8e:99:cb:82:3a:1f:0d:
                    f5:74:1d:85:22:18:30:45:61:ab:c2:f0:f8:ff:2d:
                    3a:65:83:3a:7b:64:5f:94:4f:ee:e7:7d:0c:3e:d1:
                    f1:13:08:ea:64:c3:c1:04:ea:b7:df:f7:d9:4c:09:
                    3a:54:f2:79:51:49:dd:19:fd:ce:3c:4d:c7:74:6b:
                    bd:f4:52:33:82:ef:24:ec:3f:aa:0d:aa:d4:3b:07:
                    51:5d:7b:b7:b8:e0:4e:ae:7d:02:af:c6:4e:85:d8:
                    2a:d7:98:80:c1:9a:22:04:f5:5d:9d:28:68:76:2e:
                    7b:d0:9c:81:b1:f3:91:a2:cc:04:86:3b:c5:29:e5:
                    17:25:c2:83:77:b6:83:2e:9c:84:3d:f5:c9:b5:92:
                    35:b9:ab:82:a3:78:ac:1c:94:b9:8c:22:07:e0:09:
                    12:41:65:46:79:cb:f8:24:4c:c9:11:d9:49:d1:bd:
                    61:b1:b9:82:78:5e:f4:9d:8e:0b:85:fe:1b:fd:99:
                    af:9a:66:a6:82:72:82:af:d5:a3:26:8d:a4:61:96:
                    02:64:66:48:63:e5:f5:35:b3:36:88:a2:6a:d1:e3:
                    e4:67:7a:20:4c:06:6c:9a:81:93:24:dd:51:9c:97:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:0A:30:76:8E:E6:BD:8C:FD:A5:AD:81:DA:DC:2F:3D:A7:3D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/024376e5-8e7b-30f8-81bf-85daad1c4673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:3e:5f:e6:c8:07:9e:cb:de:98:24:97:2b:b4:2b:80:ac:
         b3:ab:38:63:a7:17:e4:37:91:7f:46:70:2e:99:2b:1f:1b:24:
         8d:f6:bf:11:bb:c6:ab:20:6a:ff:f1:82:ef:d8:6f:04:d7:68:
         e7:1d:1b:f5:e4:33:a8:60:26:2a:f4:e2:cf:03:de:35:53:37:
         be:93:2a:20:1f:61:0e:9c:ec:93:0d:a1:29:92:3f:82:79:5e:
         84:ae:f3:a5:32:64:b0:58:7b:b4:0a:4d:4c:4e:a4:06:77:59:
         d5:58:f7:06:a7:a2:9d:36:18:83:52:22:be:ee:44:8c:d7:f4:
         e2:ce:d6:b9:bf:de:e8:4a:fd:2f:8a:d8:52:21:c0:67:6b:36:
         f4:73:a8:5e:26:e7:08:86:5a:7d:25:db:bf:26:1f:18:fd:c9:
         89:a6:e0:b8:35:20:ce:2f:61:38:71:a1:94:64:7a:86:34:9d:
         20:b1:9d:e8:cf:99:e7:0b:01:6a:f0:95:6f:81:16:b5:ff:8c:
         92:e6:c5:c2:de:3e:b1:be:31:17:2e:d1:d5:5b:db:4e:7b:b4:
         24:cd:bd:d1:49:07:e6:3e:ce:df:25:88:9b:d9:ff:02:71:a7:
         2f:59:f8:88:9a:5c:c1:c4:40:a5:04:dd:50:cd:9b:51:00:10:
         06:98:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:12 2025 by rpki-client