Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/15e55ac7-6d93-3d5c-8bcc-8053e8f557d1.roa
File:                     15e55ac7-6d93-3d5c-8bcc-8053e8f557d1.roa (raw, json)
Hash identifier:          vaF9crxUjFFlaMkjrbp8+GaWpZNMojz2GTqcGJtD17U=
Subject key identifier:   27:74:B2:D3:9A:F4:EF:74:13:E4:AC:52:48:D6:DD:17:B9:49:43:9C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BBCDAE341C06D179558283900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/15e55ac7-6d93-3d5c-8bcc-8053e8f557d1.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        108.161.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:e3:41:c0:6d:17:95:58:28:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=e9c9c6b8-ea79-46c1-aaab-7ca283dee801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:63:7d:3c:02:0f:28:a0:ad:12:f0:b8:b6:f9:
                    69:19:4b:34:73:3c:50:fa:8d:2b:50:eb:fa:8f:14:
                    56:bd:ff:21:c0:83:91:9e:8a:16:a6:62:d2:b8:7a:
                    51:d4:eb:b3:27:89:2f:19:60:de:12:5d:15:31:1b:
                    6a:81:c2:06:21:4b:7e:76:35:29:66:71:7d:fa:fb:
                    11:ba:f2:d8:71:dc:db:92:ce:42:13:3b:3f:74:aa:
                    81:c9:03:c1:f0:d6:96:71:1d:d3:57:60:b2:16:f5:
                    62:a7:20:62:3c:b2:ae:f3:d0:77:a4:a9:44:b6:0f:
                    bd:4e:0a:e6:02:b0:05:01:53:36:fa:ab:3b:ed:cb:
                    34:f1:de:5c:68:52:0c:6b:5e:49:01:b7:29:1c:70:
                    9f:39:a8:f9:e4:42:eb:5e:1c:1f:c5:89:a4:1c:8c:
                    49:2a:c4:4f:7d:a5:20:9a:3e:48:0b:cd:0a:2e:03:
                    f4:a4:97:f2:00:f9:ce:15:48:30:b0:bb:0c:8f:d6:
                    cc:ce:71:39:ab:77:72:57:e8:6f:1b:7c:db:a9:46:
                    83:23:23:bc:c8:e3:07:b9:79:cc:78:b5:e4:16:30:
                    6f:90:45:4d:dc:b5:0f:6c:c1:f8:9d:bb:2b:db:1d:
                    88:a6:c2:2c:bd:85:34:51:4e:95:cf:29:f9:b7:2b:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:B2:D3:9A:F4:EF:74:13:E4:AC:52:48:D6:DD:17:B9:49:43:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/15e55ac7-6d93-3d5c-8bcc-8053e8f557d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:06:48:7d:5f:0c:7e:cb:ef:95:46:45:97:e5:87:cf:f1:52:
         7d:4f:0b:d0:6f:9d:0b:f6:19:fa:e8:b6:ae:7b:38:cd:92:5d:
         14:c6:e5:34:bf:55:90:3f:3a:93:7e:ad:e7:b5:7a:7f:32:8a:
         20:46:1f:e9:66:4d:b2:ff:b5:af:30:c2:ab:08:77:c9:0f:ba:
         d2:c7:2b:9e:25:ab:26:d0:73:1c:fb:85:b4:cf:75:36:8b:15:
         c2:9b:8a:00:9b:dd:5c:dd:5e:88:8c:8e:75:4d:89:cd:3d:55:
         5a:b8:61:77:2d:2a:30:36:9a:42:e6:41:9e:26:7f:44:e4:3f:
         d8:5b:75:04:80:da:d0:c3:e1:bf:56:d2:b1:7f:b8:73:2b:48:
         46:21:57:d9:ec:32:7d:e8:f5:40:00:cf:03:7f:c0:20:54:45:
         5b:74:51:12:9f:10:fe:17:77:f8:91:c1:8c:0f:df:4f:4f:69:
         7f:a9:86:e2:3a:17:13:82:c5:ea:b2:d7:76:2e:3f:f8:4f:8d:
         90:c4:d3:ac:3e:e8:b3:80:ec:9d:24:8a:ff:6d:9a:d9:74:6a:
         3e:57:a1:21:47:40:1d:92:c5:fd:dd:47:2f:bb:d1:ff:11:14:
         28:c7:7a:91:d2:eb:75:2c:ed:2a:f2:a7:6b:fb:64:88:44:33:
         92:a2:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:24:31 2025 by rpki-client