Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa
File:                     00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa (raw, json)
Hash identifier:          CWyQ4Qx6Yt+1irO/F/VeQ6FJbaNl5tyz47dqP30sQGI=
Subject key identifier:   42:15:82:00:28:02:74:2A:79:CF:B7:41:7F:58:7E:75:9A:73:BA:E6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E11F7B2545E527B76C9900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        107.167.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1f:7b:25:45:e5:27:b7:6c:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=d120bbfd-ccde-4ea7-afee-1893f4963275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:d0:27:3e:56:4c:ef:6a:cb:9a:3e:f2:d3:
                    66:b5:5a:c2:2f:f3:b7:fa:5c:29:56:24:05:fa:9b:
                    57:84:f6:60:16:ac:25:d1:36:d7:b2:ec:cc:5a:8d:
                    41:5c:16:05:91:1b:fd:90:6d:05:b5:06:e8:8e:32:
                    3e:50:0f:63:a9:d8:8d:2a:65:2f:55:65:bd:1c:3d:
                    8d:a4:47:da:bb:a3:59:0d:47:ee:5a:04:c8:03:a6:
                    60:d7:e6:b4:64:db:10:99:0a:c2:19:1a:01:93:bc:
                    b6:b9:64:a4:88:e5:62:4a:14:43:d2:51:d9:ae:b5:
                    1c:3d:27:48:bd:e4:35:3f:ad:42:88:e5:4e:e9:89:
                    23:cd:b7:14:f9:d0:1a:d8:5d:e0:44:09:26:81:00:
                    a7:c5:e2:78:94:bb:9c:36:25:76:57:19:dd:53:19:
                    09:96:0e:30:3e:16:4d:ae:0f:03:00:f4:ab:f1:12:
                    a2:7a:f9:4c:71:39:05:17:ad:1e:ce:53:87:f7:dd:
                    ff:77:d7:8a:a7:93:b2:08:26:f4:d7:28:f1:8e:23:
                    03:0d:8a:4c:25:cb:f5:3c:aa:82:cb:50:b3:56:32:
                    ba:7e:21:72:30:f2:95:62:69:26:19:bb:c6:77:65:
                    7f:89:9b:d2:cc:15:c2:21:c1:f0:cf:3f:38:ae:a0:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:82:00:28:02:74:2A:79:CF:B7:41:7F:58:7E:75:9A:73:BA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00e50e5f-6fdf-332c-afe3-5d6c74795bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:8a:79:e7:c3:0e:6a:49:0f:a7:84:5d:0b:aa:5b:a1:55:
         e4:b5:8a:97:64:1f:c2:af:76:4b:db:1d:fc:8e:1b:06:6f:c9:
         0e:c8:e0:ce:17:92:e8:96:6c:0e:73:b1:f9:6c:b4:e7:c6:25:
         d6:cd:35:42:73:27:1f:b3:bf:36:03:2a:22:a8:f3:14:38:f7:
         6a:4c:86:c8:5e:24:4d:2c:dd:d2:c5:02:73:15:81:a4:82:9a:
         4e:2c:46:b3:0e:1f:ab:b5:bb:1b:fc:57:e0:c1:34:bc:58:5d:
         cd:51:dd:19:a7:93:1d:96:cf:4e:b5:8e:6d:e9:3a:9b:7a:4f:
         b2:59:d1:fb:79:4e:df:09:cd:91:51:36:8b:97:bb:42:6d:75:
         db:21:49:87:36:0f:f7:90:b0:74:f3:b7:cd:ce:57:3c:81:1f:
         0f:ff:ed:99:8e:85:1a:4c:4a:44:14:6c:5d:40:95:66:1b:08:
         53:01:4c:d8:47:03:eb:7e:0e:d8:ed:0b:6d:93:cf:3d:26:dd:
         26:a1:56:4d:7d:c2:89:ad:96:3e:52:64:2f:c7:0c:61:66:a4:
         3c:99:8f:b9:72:ba:73:64:43:98:4c:89:5d:6f:d6:d1:71:17:
         44:b5:30:f2:69:ee:2f:19:95:97:41:2e:3d:82:4d:16:12:96:
         d9:bd:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:12 2025 by rpki-client