Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb39088b-60af-3c0c-a937-2d549ff21dfd.roa
File:                     cb39088b-60af-3c0c-a937-2d549ff21dfd.roa (raw, json)
Hash identifier:          cfmNtm0hH0ZrJI+yguvQFeG85H+n0o6Ny4SFFIlZRqs=
Subject key identifier:   AD:95:37:66:F5:91:AD:1C:A1:35:9A:20:6F:22:9E:E7:EA:E0:7F:46
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ADC00FE4DF2A835BF25B75B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb39088b-60af-3c0c-a937-2d549ff21dfd.roa
Signing time:             Fri 15 Aug 2025 01:00:32 +0000
ROA not before:           Fri 15 Aug 2025 01:00:32 +0000
ROA not after:            Thu 13 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        108.161.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dc:00:fe:4d:f2:a8:35:bf:25:b7:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 01:00:32 2025 GMT
            Not After : Nov 13 02:00:32 2025 GMT
        Subject: CN=631bfea1-8fba-4215-b902-8aaf98d47ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:6b:cc:68:82:4d:2f:1c:52:5c:b8:18:c7:
                    3a:c0:ce:c0:17:bb:4f:21:94:d4:b7:7f:dd:72:39:
                    b4:2e:7e:b6:a3:42:2b:37:1d:9d:d7:fc:be:80:57:
                    c7:52:81:df:37:2f:ee:18:6c:4d:69:42:8f:35:bd:
                    ab:c1:69:d0:51:24:83:f7:42:b1:e8:40:f5:a6:be:
                    dd:4e:ad:35:39:ae:e1:3c:6c:b4:0d:f6:00:67:ca:
                    bd:0c:b1:dd:3f:4f:29:8d:1a:d8:4c:66:67:af:e2:
                    a9:09:aa:bc:1f:6b:91:06:21:1d:21:86:4d:64:fd:
                    d4:5c:ce:f3:8c:d8:d6:ba:6f:96:61:4b:09:24:86:
                    48:71:85:72:9a:12:e9:77:0c:01:ef:f5:8d:b9:ca:
                    2a:f2:82:77:1c:15:f2:e3:02:e3:fb:d1:7a:f1:cc:
                    27:72:74:e5:46:33:f3:82:47:44:3b:01:84:e0:06:
                    23:25:8d:44:13:2d:28:a7:2c:59:6b:17:fe:3d:40:
                    4c:0d:87:99:7f:d6:08:2b:2d:ae:cb:7e:15:7a:b9:
                    7c:0e:aa:1e:ee:35:75:5c:d9:ab:da:01:bb:8f:42:
                    be:eb:01:a6:ec:bd:4e:7f:d2:45:96:fb:e3:81:60:
                    25:93:64:15:67:83:b8:ea:1e:2c:d3:bb:59:65:b4:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:37:66:F5:91:AD:1C:A1:35:9A:20:6F:22:9E:E7:EA:E0:7F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb39088b-60af-3c0c-a937-2d549ff21dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:47:19:e5:92:d6:d2:cc:98:71:f6:46:c7:82:eb:01:a6:c6:
         19:13:3c:1b:44:a4:b0:0d:ec:9f:6a:3a:e5:52:2f:d2:67:ca:
         b3:8a:2a:82:ba:a4:15:3f:be:2c:d4:38:9a:fc:8e:c5:b0:c9:
         da:21:da:9a:5a:6d:a2:23:b1:05:5f:ec:67:81:00:47:34:ef:
         9c:30:69:95:2a:f1:27:f0:29:a9:87:f7:88:2e:b2:ab:5b:e5:
         e7:58:ac:f9:51:5a:df:fa:44:8e:68:61:01:48:8a:6b:3d:f6:
         ad:cb:65:11:cc:f5:fa:a0:d4:b0:f5:0d:27:25:fa:57:e1:14:
         9c:06:0d:1c:c2:e7:92:69:2c:65:c3:a4:c5:69:b9:72:04:c8:
         18:6a:5a:4a:c6:8f:b3:64:b7:e7:95:3c:11:c6:ad:20:55:b7:
         77:33:22:68:0d:25:41:b6:02:95:61:ca:24:c2:e9:14:56:cf:
         8e:0b:9e:a1:55:a2:a0:01:09:3f:db:5e:b1:02:87:17:25:f5:
         67:c6:43:25:ea:89:11:6a:4a:73:be:29:c7:71:c0:ba:3b:2b:
         87:12:e4:dc:f0:c8:f1:f0:cf:62:98:06:cd:0f:2f:fe:f1:0e:
         dd:02:df:83:7e:d1:85:07:8c:b6:22:08:2e:8c:fc:48:5c:56:
         4a:9e:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:47 2025 by rpki-client