Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9b248ad-2cfe-327a-ab51-0659965a86f7.roa
File:                     d9b248ad-2cfe-327a-ab51-0659965a86f7.roa (raw, json)
Hash identifier:          c9OEHMmVp2hEs9kV1XFj+3XPQ1my+5DdzHob+MQn+Ck=
Subject key identifier:   0B:82:0B:71:F2:72:D0:31:2A:BC:3A:7F:47:ED:E7:A9:75:92:1A:D1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A51A4B28DC192EE7CD1C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9b248ad-2cfe-327a-ab51-0659965a86f7.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        192.119.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:51:a4:b2:8d:c1:92:ee:7c:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=aed628bf-9e39-4f24-a21f-c7b1c250aa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:87:7f:17:ec:f7:78:16:e3:26:60:7c:ec:
                    7a:a9:a1:e1:1d:17:8a:77:c1:8a:3d:f7:95:6a:c2:
                    8d:f4:ad:42:9d:42:e6:da:26:fd:92:23:a7:c2:8a:
                    45:c0:50:e2:f9:c8:41:d7:b8:90:4d:2e:ac:54:e6:
                    86:ee:61:33:c0:af:e8:7d:55:9a:75:8c:ce:67:3f:
                    b2:6e:ff:7a:ac:f7:4a:68:ad:a7:d7:68:97:96:6f:
                    f3:d6:33:0d:62:5c:7d:5a:b4:90:07:8a:d7:8a:29:
                    c9:94:48:7f:83:ee:d3:6a:31:22:a0:e9:bf:d4:c1:
                    07:c3:2c:f0:5c:cb:7c:ed:9c:e2:8b:e8:4c:8f:6d:
                    f0:a3:6b:8d:66:d6:a6:6e:9a:44:91:91:b2:b1:69:
                    bb:7d:a5:21:7f:68:d8:c3:33:c8:68:2c:38:56:63:
                    5b:dd:38:36:87:98:4a:c2:d0:94:f7:fc:06:ed:4d:
                    f3:03:19:95:33:4e:8f:47:2c:4c:d3:f5:98:fb:95:
                    67:1b:eb:9e:b2:4f:5d:55:ef:28:4a:6c:63:30:ee:
                    d9:fb:a6:f1:2c:6e:1a:7d:94:08:35:61:73:0e:23:
                    ea:df:14:6e:ba:95:1e:1e:23:fd:1a:1a:f2:da:a7:
                    5c:a2:e2:64:0d:df:bc:71:6f:de:bc:1b:23:b0:4c:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:0B:71:F2:72:D0:31:2A:BC:3A:7F:47:ED:E7:A9:75:92:1A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9b248ad-2cfe-327a-ab51-0659965a86f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:68:9e:58:07:96:f4:07:a7:48:a7:54:52:55:1e:e8:1c:
         72:b3:63:4b:b0:1f:5d:25:14:3a:ce:c7:a4:ec:8c:10:f7:81:
         47:70:f4:47:6b:2c:e3:76:51:ee:1e:74:37:c1:40:17:06:f5:
         5e:78:42:c5:2e:63:d6:4c:57:ca:cc:28:fa:1c:8d:14:6e:5d:
         1b:f4:f3:b4:b0:d7:ed:ac:3a:83:21:1f:d2:11:71:1d:7a:1b:
         d8:47:d4:6a:8e:0e:3d:61:49:e4:31:46:55:ca:dd:cd:84:8c:
         bd:5e:94:18:ba:7f:7f:6f:06:c1:7a:c2:da:c7:55:c5:ba:62:
         10:ec:ad:1a:7b:36:9f:3c:f5:cf:b1:d2:71:dd:eb:ff:8f:0b:
         b5:27:45:19:5a:0d:d6:5c:d7:7b:45:f2:2e:1f:d7:0a:ca:f8:
         af:ca:96:9d:aa:09:d5:e8:65:de:4d:a9:cd:5c:74:a0:ae:06:
         83:2e:95:02:49:dd:1d:7b:c3:01:16:17:f5:a3:46:64:31:d3:
         0f:90:01:e8:fe:db:9d:29:92:f9:64:c6:95:dd:dd:34:72:d1:
         6d:bd:9a:db:90:11:d5:40:fa:6a:32:5d:4f:0e:6a:1d:2d:2c:
         7e:79:44:29:d3:bb:bc:62:b6:cb:2f:17:b9:62:f4:3a:29:0e:
         6a:80:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:28:36 2025 by rpki-client