Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b50da040-064e-37d7-889e-01ee3cdd159a.roa
File:                     b50da040-064e-37d7-889e-01ee3cdd159a.roa (raw, json)
Hash identifier:          CvycdJEyt4AMkgsG4j5ne+mhBwxc2agwX9ZF9k+sLmg=
Subject key identifier:   E5:B9:6B:94:57:9F:41:51:B2:96:7A:13:16:BF:07:39:61:E3:44:80
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A534F5A1BFD0D9F89D700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b50da040-064e-37d7-889e-01ee3cdd159a.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        198.40.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:53:4f:5a:1b:fd:0d:9f:89:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=4f670e4e-cca0-4080-b8a0-fc3326bf7872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:b9:10:62:e6:b5:f1:be:5f:56:7e:27:bf:
                    d6:ef:ab:ce:6e:2c:c9:f4:19:e9:68:65:55:96:1b:
                    a6:51:c3:23:15:c6:14:a9:d1:d1:ba:a6:27:59:46:
                    27:22:90:89:8e:f5:a1:27:5e:11:78:d9:68:2f:0f:
                    a5:87:0c:4b:56:4f:63:6e:07:b1:65:54:cf:5c:e0:
                    af:85:0b:81:26:b3:29:09:3a:5d:e9:53:f0:e0:23:
                    b0:74:39:d6:72:78:5a:a7:ce:2e:a1:ab:67:83:85:
                    3c:c9:ca:57:45:df:50:12:17:de:5c:75:39:91:66:
                    c1:da:8b:bd:28:2a:a2:79:9b:c7:c2:c1:5e:8c:fe:
                    3d:c9:8b:4d:de:09:7f:d4:bf:c2:67:e5:9c:2b:01:
                    03:f3:9c:9d:4d:39:66:0f:b1:80:f6:fc:06:51:ac:
                    1c:fe:ff:c3:1e:7f:21:45:53:85:0b:75:db:dd:f4:
                    6b:24:80:78:96:fa:46:0f:bf:e3:2c:d5:35:6a:f3:
                    5c:2a:dc:b1:e6:ff:32:12:97:64:7c:2a:b0:ff:08:
                    49:ea:c7:7a:98:54:1e:dc:70:79:c8:fe:d5:c0:4b:
                    04:e6:f7:c2:9e:a3:16:77:c4:7c:89:da:00:60:03:
                    d2:d4:63:c9:ed:63:c4:dc:e7:df:f0:99:00:71:d0:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:6B:94:57:9F:41:51:B2:96:7A:13:16:BF:07:39:61:E3:44:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b50da040-064e-37d7-889e-01ee3cdd159a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:41:d6:00:5f:10:d2:14:97:3d:46:12:c8:90:e6:68:c0:32:
         a4:15:2c:4e:30:af:3a:24:20:8e:73:3a:1f:55:72:18:66:cd:
         ea:16:fb:d4:c6:4b:8f:a0:33:36:ff:77:07:b0:8b:ab:35:1e:
         c6:0e:2f:27:ef:8a:ee:5d:96:55:ca:44:d2:31:da:c2:69:96:
         71:5c:08:de:18:ec:b4:c1:c2:f2:4e:2b:11:f8:8f:64:5f:0a:
         1f:71:5a:af:e3:bf:5f:7c:09:03:18:4d:70:42:50:9d:76:95:
         8c:b8:65:e2:37:78:92:df:cb:71:b9:b0:72:69:86:d5:72:7c:
         82:b2:d9:8d:fd:10:c7:c6:16:e2:5a:70:a8:8c:0e:b3:c3:79:
         d5:69:c0:a8:75:8e:df:4b:1f:35:b1:92:00:18:96:a4:c2:16:
         e7:09:05:fd:a3:a4:75:78:72:3c:5c:13:8b:88:39:a5:9e:d1:
         8c:e2:af:d6:60:8e:3e:04:54:61:cb:b5:c4:7d:2b:fa:a6:82:
         f3:72:39:09:df:c1:7a:ad:b8:61:e7:0c:bb:d9:17:eb:4b:aa:
         79:37:f6:57:d0:1a:4b:69:d3:4b:fb:08:e7:79:aa:af:a1:4b:
         1d:ec:d1:d0:0b:dc:ec:10:10:65:17:6a:ee:c4:94:a5:b8:2e:
         3f:a1:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:31:07 2025 by rpki-client