Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/deb5b47b-58f8-3d71-96be-d093db3221c5.roa
File:                     deb5b47b-58f8-3d71-96be-d093db3221c5.roa (raw, json)
Hash identifier:          H34SB1Q0EDRisjvdq9ROrGlmEN5DMYWg+8ntEr9NiXA=
Subject key identifier:   B8:CB:F1:E1:7A:0F:D8:B4:39:A3:81:DD:21:AA:9D:18:02:08:00:3D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849FB452F7117A8F3C3C394E100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/deb5b47b-58f8-3d71-96be-d093db3221c5.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        108.161.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:2f:71:17:a8:f3:c3:c3:94:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=7b90139a-428b-4f2c-aa94-cc8cc2ff8567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:d0:73:70:14:31:43:71:1d:fd:b0:bc:86:
                    01:d2:04:69:4e:2d:59:f0:a4:c5:f9:f1:fe:b5:c3:
                    2b:f8:c6:f0:66:ee:ad:ef:63:33:3c:db:50:d8:c3:
                    ce:fe:53:c3:ce:cd:2f:5b:86:5b:22:69:ae:67:c6:
                    42:9a:cd:ff:d5:56:cd:82:3a:56:9d:9d:75:cc:31:
                    68:60:ac:75:a9:c6:90:a0:4e:da:69:a3:ae:73:5d:
                    a8:7e:67:fc:44:5a:00:70:2e:75:63:a3:91:32:e8:
                    a7:ac:8d:31:2b:e8:be:c3:1a:6f:29:6c:dd:ee:e3:
                    dc:fe:b2:0f:a1:4e:48:33:84:85:41:6c:91:e9:70:
                    32:b4:79:de:58:5d:d5:a8:d6:0b:2f:e8:cf:80:db:
                    e7:92:66:16:3b:83:0e:1b:79:25:76:0b:8a:c6:8b:
                    a7:7d:db:ab:5c:ce:24:4b:1c:2c:a0:35:ee:83:39:
                    a0:59:6e:14:cb:d5:39:fc:50:1b:8a:36:44:b8:f5:
                    88:4c:8c:22:b2:20:57:bd:e2:89:e3:96:d9:99:9c:
                    91:8a:27:12:fd:86:95:18:12:0e:12:a1:59:09:69:
                    32:f8:dc:31:03:d7:24:93:0a:c6:00:a2:39:15:69:
                    5a:d6:25:89:c0:e8:26:a7:29:ec:0b:92:13:1d:b9:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:F1:E1:7A:0F:D8:B4:39:A3:81:DD:21:AA:9D:18:02:08:00:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/deb5b47b-58f8-3d71-96be-d093db3221c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:13:40:0a:f2:cb:5b:74:09:7a:0e:7f:00:e5:03:71:f2:
         29:f5:ea:10:40:59:68:24:ea:ed:63:46:e3:cc:b5:73:1d:09:
         27:11:df:53:d1:fe:23:36:fc:66:db:01:1d:13:4a:8b:58:b3:
         99:04:1d:9e:9a:29:bb:61:77:cf:b7:24:83:58:ed:59:1b:23:
         51:da:27:c7:56:6c:02:df:c9:80:6d:50:2c:fd:c7:ab:16:36:
         b2:43:33:0c:d3:9f:ae:2b:fc:bc:02:78:2d:c2:db:3b:c7:36:
         fb:75:81:68:17:e4:87:f7:9a:48:27:b5:c0:c3:9a:bb:06:0a:
         39:a9:21:05:86:62:21:65:3a:02:e1:c7:19:19:8f:74:11:af:
         67:d0:a7:da:e3:b6:51:6c:9d:b6:9f:03:55:a4:62:15:19:b0:
         73:0d:35:e7:7b:47:4f:c6:80:41:d5:1d:fa:c0:a8:81:c1:21:
         87:7d:18:a0:64:8f:f8:43:4c:97:9c:e7:ef:e2:33:27:fb:60:
         2f:85:f5:cc:34:9e:80:8a:9e:0a:72:b4:e4:ab:fc:45:bd:38:
         f8:e1:4a:99:b5:0b:f1:eb:8e:d3:7b:22:9f:ff:97:af:1f:d7:
         5a:fd:e6:af:0e:5d:b4:fa:2b:ab:ab:63:24:ba:c5:fa:62:cc:
         8b:48:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:27:03 2025 by rpki-client