Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92065f68-15cb-3193-8f30-3a5079f02ec7.roa
File:                     92065f68-15cb-3193-8f30-3a5079f02ec7.roa (raw, json)
Hash identifier:          g+k5DQhtKf19fmRA42KObVP7pgInNHuzDl2cHVlZ9G0=
Subject key identifier:   88:3A:25:5D:F6:8E:52:D6:A8:54:9C:67:0E:5C:1C:44:F8:E2:8C:AE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0FB3BF7092F8E246C5070
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92065f68-15cb-3193-8f30-3a5079f02ec7.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        104.201.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fb:3b:f7:09:2f:8e:24:6c:50:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=ce08f147-e209-481a-a288-445c3e8c284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:5e:58:7a:ae:07:c6:d9:14:b2:16:31:81:
                    0e:22:c8:14:f9:23:97:26:1f:b4:b8:8d:2d:7b:91:
                    99:f1:19:32:67:ff:cc:b5:26:e2:71:d9:bc:ce:cd:
                    64:4b:e5:c9:c8:d7:57:a4:0f:ec:69:42:4a:3d:e6:
                    11:aa:11:a9:66:45:1a:a4:ea:ba:0d:95:ba:28:e8:
                    1b:2e:c9:e3:f5:6e:a1:69:d3:4a:08:54:74:ed:c6:
                    8a:01:e6:1c:42:2d:e3:8c:88:0c:63:96:9d:10:a8:
                    59:6e:20:29:61:f5:15:f7:3c:c6:c5:56:f1:67:26:
                    3e:33:d3:ce:86:d5:b9:dd:33:c4:42:25:72:8a:c1:
                    cf:ff:42:b9:e5:e4:7f:0e:7c:08:c5:f2:66:13:05:
                    6a:4a:5b:85:a8:44:12:a9:2c:4e:79:e6:a0:39:bb:
                    e9:35:88:db:e4:e8:3f:97:ad:cc:7b:8a:9c:fd:e7:
                    3f:d6:6e:65:0f:71:ba:d9:c3:e4:88:a0:1b:7a:ff:
                    70:99:90:55:9d:c2:68:90:b4:05:10:08:0a:04:6b:
                    70:b9:43:16:09:4f:e8:c6:35:0e:5f:cd:67:9f:7e:
                    ad:a1:28:c3:47:8b:37:d3:45:65:2a:cb:ef:a6:ae:
                    75:69:b2:fe:6d:8c:f3:b0:2c:62:f3:85:c6:9f:73:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:25:5D:F6:8E:52:D6:A8:54:9C:67:0E:5C:1C:44:F8:E2:8C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/92065f68-15cb-3193-8f30-3a5079f02ec7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:df:07:8c:eb:e5:21:33:47:02:ab:58:c8:30:33:5b:2a:
         93:5b:00:fe:18:fa:47:1e:bf:d7:61:03:58:76:bf:61:51:41:
         f4:5a:27:b3:97:0f:65:fd:00:57:a6:e1:a9:fd:5b:77:07:c3:
         5f:29:46:89:5a:56:5b:8b:c6:a9:63:1b:67:9c:4f:45:01:a3:
         32:86:c9:d6:6e:b5:59:55:5a:9b:24:0b:4e:87:32:4b:01:d5:
         3f:10:34:9a:a8:92:f4:42:ba:31:aa:7d:1d:68:b0:80:03:2d:
         a2:2e:b0:bc:01:15:c4:7a:57:39:f4:ac:ba:bd:ff:7c:2e:09:
         f5:e0:c7:69:d2:4d:e0:6f:e2:72:71:47:34:69:0d:19:40:52:
         26:50:7f:8b:ce:bc:0e:8d:2d:97:84:09:9a:3d:6c:62:a7:41:
         64:11:b4:7b:07:34:4a:18:35:f6:c6:77:3b:36:c6:de:b2:00:
         75:9f:2b:c9:5c:30:ff:e4:52:64:55:6b:84:85:2a:63:cc:87:
         47:d3:f2:e8:29:f1:e3:02:41:6b:bb:52:fe:92:52:3e:ef:76:
         62:29:e9:52:fb:4c:ea:68:a8:dc:b3:0c:91:e3:6c:b4:f6:2d:
         2a:e7:5f:0f:05:5d:20:a7:f5:92:fb:dd:78:fa:46:d1:06:43:
         38:6c:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:57 2025 by rpki-client