Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ae30734-14bf-38dd-9fe8-02ffb090a212.roa
File:                     9ae30734-14bf-38dd-9fe8-02ffb090a212.roa (raw, json)
Hash identifier:          zfVSownLJZDHwNlrS85OZKO4IHzeNOWIxUz90eG6stQ=
Subject key identifier:   51:33:6D:53:A4:81:59:80:8D:19:4C:1E:33:A8:B8:EC:DC:E9:0A:01
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ADC00FEBFCC824DC41B2A5480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ae30734-14bf-38dd-9fe8-02ffb090a212.roa
Signing time:             Fri 15 Aug 2025 01:00:32 +0000
ROA not before:           Fri 15 Aug 2025 01:00:32 +0000
ROA not after:            Thu 13 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        45.59.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dc:00:fe:bf:cc:82:4d:c4:1b:2a:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 01:00:32 2025 GMT
            Not After : Nov 13 02:00:32 2025 GMT
        Subject: CN=8abe5e41-27ba-4410-863a-7368cd748746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8e:b6:a2:19:6f:d0:37:8c:f9:23:e4:7b:27:
                    c6:fe:ec:a4:88:57:88:02:98:6f:59:c3:5a:cc:73:
                    aa:a8:a8:fe:a0:8e:1d:49:38:1f:14:c7:6f:62:3c:
                    c2:99:13:ed:7d:48:4f:01:69:32:7f:24:c9:fb:ac:
                    cc:8a:c0:8a:13:b2:93:de:dd:ee:2d:85:20:01:ed:
                    f6:0a:65:36:6c:57:93:a7:57:16:f3:9f:c3:ec:3d:
                    74:bc:03:61:bb:92:0a:59:0e:fb:15:d9:a9:b3:c1:
                    93:96:3d:c9:3a:a9:ab:f0:47:1f:eb:6e:e6:ac:35:
                    1b:02:40:53:6d:10:d7:1f:cf:11:d7:78:02:c0:9b:
                    e9:ee:fe:01:dd:6a:aa:52:47:51:74:d3:49:f5:67:
                    11:5d:10:30:28:b6:7e:8e:a0:85:70:0e:a9:f0:1c:
                    42:3a:0e:95:e1:bb:32:dc:2b:2a:5e:4c:e0:b5:6a:
                    88:98:4d:2b:8d:b0:d3:89:97:de:61:e6:55:82:11:
                    47:83:01:64:d9:2e:90:04:38:be:92:79:d0:31:3a:
                    b3:d0:59:34:8f:af:af:68:8d:00:50:74:9f:2f:50:
                    80:66:e4:ad:0f:23:d6:1e:66:8c:6a:77:3e:31:e7:
                    fe:1a:8b:f6:79:d2:49:08:21:7e:bf:4b:c0:58:17:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:6D:53:A4:81:59:80:8D:19:4C:1E:33:A8:B8:EC:DC:E9:0A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9ae30734-14bf-38dd-9fe8-02ffb090a212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:31:e0:ec:2a:3c:39:aa:57:ad:c4:3e:4e:17:2a:66:d7:f5:
         a2:73:f7:7c:cf:f8:db:7a:8d:e6:e2:27:ed:4c:ab:72:39:c1:
         5f:3d:f2:7f:eb:c7:92:6d:8f:49:ba:2d:42:05:9c:b8:f3:88:
         10:22:6a:7d:0e:a5:64:e1:9e:9d:91:d2:e6:d9:24:7d:1d:3c:
         1b:13:0d:9a:c7:6e:e5:8a:85:f2:88:cf:a2:b7:a0:ec:23:a0:
         f8:36:c3:db:f0:ca:4c:2d:14:ee:d2:13:9e:11:24:4f:76:0b:
         f6:cd:1e:f4:46:7a:b3:60:f0:af:37:9e:8c:ab:f8:36:70:d2:
         bd:7d:fe:c0:af:a6:76:65:60:6a:76:64:5c:14:6e:e9:81:98:
         10:8c:7e:da:d6:02:5d:ef:58:37:70:94:d4:74:3e:85:eb:2e:
         dc:c7:43:e1:e4:b7:14:91:a8:5e:88:24:78:52:53:f6:24:72:
         f6:66:eb:33:e6:c7:81:7d:61:d8:b7:55:d2:af:fd:5a:4b:b7:
         b6:29:33:01:42:bb:d4:18:77:b2:f5:25:0c:b7:a1:70:77:d2:
         76:27:03:d3:b7:81:c2:f1:1e:5f:cd:f4:95:f0:e1:86:6b:51:
         3e:a9:fa:6e:8c:89:8e:a8:b8:e7:bf:2e:05:04:e3:31:60:fa:
         12:13:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:44 2025 by rpki-client