Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a3c9c2b-30e7-3d95-9f6c-c3356be8d55b.roa
File:                     7a3c9c2b-30e7-3d95-9f6c-c3356be8d55b.roa (raw, json)
Hash identifier:          bG3Pz89HvW6laH9wMD63PVxp6ddBkuGiESOLtESfnKE=
Subject key identifier:   3D:F2:C3:2A:C4:F5:C5:1E:E0:FF:1A:76:C9:78:BB:A4:88:57:C1:A3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB45303F0E1C67AF010AAB60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a3c9c2b-30e7-3d95-9f6c-c3356be8d55b.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        108.161.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:30:3f:0e:1c:67:af:01:0a:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=758f3431-79ec-4433-ac2c-a7223c473fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:d6:7a:24:62:9d:c5:fd:b7:8c:a5:1d:c4:
                    fc:0d:07:7e:65:85:b6:d0:c7:1d:3b:d3:e9:67:8d:
                    41:6d:e9:4a:40:46:1f:66:d6:f2:80:19:3e:f4:5e:
                    c3:e5:61:28:1a:fc:2a:16:8a:b3:c2:8c:44:16:b9:
                    e0:91:7b:74:df:14:42:c3:bf:c3:c3:0b:7d:7e:3d:
                    47:3e:cd:9e:0c:84:b4:75:d5:39:43:15:57:61:31:
                    e6:7c:5b:84:a2:ce:25:6e:e9:0d:ef:f0:28:d0:1a:
                    44:39:95:a3:d9:80:44:4a:12:74:91:b5:4c:35:95:
                    be:09:34:84:b0:27:ee:53:a9:46:f3:40:2d:ea:4f:
                    b2:6f:bd:79:b8:30:35:a9:e8:2a:00:21:e5:73:c9:
                    e9:bb:30:35:07:16:6c:9b:ea:57:f2:1d:38:ef:1b:
                    60:ba:a0:2c:87:64:af:a6:fe:5e:f2:c4:d7:2b:e4:
                    54:0d:8a:57:fe:a3:65:85:5d:df:f4:d4:2c:3f:c1:
                    b4:59:8e:63:b3:4b:0c:6c:16:c0:d6:a5:d5:12:ac:
                    5e:50:af:33:89:02:bf:61:5e:9a:96:aa:98:53:d3:
                    b6:22:35:fd:4a:77:88:9a:07:7e:aa:a4:db:6b:bb:
                    cf:ef:46:55:7f:36:df:ff:ad:3d:fd:9f:6c:eb:6b:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F2:C3:2A:C4:F5:C5:1E:E0:FF:1A:76:C9:78:BB:A4:88:57:C1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a3c9c2b-30e7-3d95-9f6c-c3356be8d55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:59:d8:0d:db:81:98:41:94:fe:12:f6:f8:da:09:28:c0:
         22:3f:7f:3e:00:09:b3:d6:26:2a:10:56:8a:be:98:73:e6:28:
         58:90:2d:a2:f4:9e:57:9c:23:92:e7:ea:dd:7a:01:bd:a9:ef:
         15:ba:01:73:3a:3b:47:97:32:de:23:4e:f3:39:d0:f0:df:21:
         70:8c:9f:64:92:86:8f:ee:21:df:3d:83:53:64:cf:be:d6:6c:
         33:d8:55:24:63:1a:4d:73:29:9a:b9:0e:9c:47:fe:64:b4:61:
         9d:67:ac:b1:36:44:d6:6f:98:13:a2:63:0c:95:8f:18:b0:8d:
         f2:95:e9:cb:15:cf:bd:85:9d:f1:aa:71:cd:59:a9:71:ee:7f:
         f4:61:36:a7:53:c9:47:8a:33:34:2b:b7:f1:a3:45:c5:f3:f2:
         3a:a5:28:4f:f0:ea:d8:a0:c5:87:84:50:32:38:bd:44:d4:54:
         bb:95:d3:03:63:36:23:41:3b:21:3d:a0:6f:b1:2c:72:79:92:
         88:09:35:67:93:e7:5e:b6:38:f8:48:24:63:aa:ca:67:8c:f1:
         a4:4c:5d:9c:3c:b7:39:6b:87:b4:8a:38:e3:57:54:2c:c4:cb:
         72:d4:6a:95:97:2b:9d:56:00:46:fb:f3:fa:15:38:d4:98:6a:
         9b:4b:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:52:39 2025 by rpki-client