Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
File:                     248a1fbf-b60e-3527-b32d-4b51452afa6f.roa (raw, json)
Hash identifier:          FQ1olcTNqRgWkKKIqARwpyVlxWlPZw2mou/wspR9wnU=
Subject key identifier:   3A:FF:EF:C9:8C:55:9E:1A:97:C5:25:27:92:49:A8:7E:C8:BB:6B:3D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0D31398B4E9680759ED80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        104.201.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d3:13:98:b4:e9:68:07:59:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=8765ef16-f6ac-4d5a-b583-b6a8c54d7d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ed:ab:a5:2f:ec:55:a8:57:df:93:89:8e:07:
                    95:8b:61:41:82:62:4c:7e:cf:67:f7:21:e5:ba:2a:
                    0a:cb:fb:97:fd:92:e0:07:f3:ff:6b:72:1c:69:fb:
                    9c:dd:56:cf:56:41:c4:a6:77:d4:42:65:97:f3:54:
                    12:33:f8:ac:8e:b7:b9:fa:a1:44:ea:96:ff:c4:b9:
                    91:ac:4c:5a:9c:72:04:60:86:c5:b2:57:f1:95:e4:
                    65:41:5f:63:3a:1e:5d:21:03:9d:42:9b:b4:ef:00:
                    a2:35:cb:84:f4:ee:46:66:aa:ad:8f:23:6f:04:2b:
                    d5:52:76:0f:e8:b6:e9:aa:3f:ed:61:41:fe:bb:30:
                    12:3e:75:18:d0:da:af:b5:63:ba:76:d3:ea:9d:2d:
                    66:c3:ae:16:d2:23:ee:ae:e0:ea:a7:89:60:d2:f5:
                    b4:8f:eb:1c:ec:93:71:64:4e:ab:13:be:4b:9f:d4:
                    2f:7f:17:7e:8d:aa:b7:83:92:c2:dd:f3:d4:b2:2d:
                    9e:6b:67:7a:56:a4:38:d4:b0:45:08:f9:6b:95:16:
                    82:fd:36:27:34:c5:30:a8:5c:ee:d0:96:22:4b:02:
                    af:2e:1d:2b:fe:0c:98:32:a7:0e:98:35:9a:00:ef:
                    00:61:57:1e:d8:ee:1c:a4:bc:65:60:b4:3d:59:00:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FF:EF:C9:8C:55:9E:1A:97:C5:25:27:92:49:A8:7E:C8:BB:6B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/248a1fbf-b60e-3527-b32d-4b51452afa6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:35:c8:d2:6a:5e:24:d1:ee:1a:ee:07:e5:ce:fc:f6:27:30:
         f3:66:58:2a:05:a4:4f:bc:86:50:17:a9:c0:8f:1a:2a:0e:b9:
         88:42:7d:ab:73:da:97:46:3b:85:ab:2f:f0:0d:35:2f:81:20:
         b7:00:35:c1:c4:6a:23:21:ad:25:65:5e:9d:71:fc:43:02:51:
         e3:b1:03:34:c0:95:d8:1f:1f:57:ff:a8:77:f2:d7:fc:c5:86:
         63:57:22:de:00:50:28:d6:a2:c8:7f:46:08:ee:95:12:91:de:
         43:b2:07:9a:2b:0f:1d:f5:d7:b0:62:fc:70:c4:0b:90:1f:aa:
         75:57:cf:60:27:b6:1b:f9:ad:4f:d3:70:a4:9e:da:0b:72:e6:
         18:ca:03:68:cd:0f:97:b4:56:cb:09:b7:81:5e:91:e4:89:62:
         2b:56:47:4e:7e:2a:82:04:ba:a0:0e:fd:c3:8a:0a:c0:52:36:
         2c:15:f2:09:f3:07:6e:38:6e:dd:ae:c7:cf:94:bd:a8:b2:a3:
         ba:08:1e:33:35:53:7d:fc:e7:c4:b4:86:fb:e2:a7:c4:02:2e:
         40:b2:61:81:0d:48:04:5a:ec:56:03:53:90:aa:c1:0f:dd:e3:
         08:e6:ff:06:43:cf:04:96:31:d2:59:24:cc:71:09:28:b1:d7:
         7e:c5:15:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NMTmLTpaAdZ7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ODc2NWVmMTYtZjZhYy00ZDVhLWI1ODMtYjZhOGM1NGQ3ZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+2rpS/sVahX35OJjgeVi2FBgmJMfs9n9yHl
uioKy/uX/ZLgB/P/a3Icafuc3VbPVkHEpnfUQmWX81QSM/isjre5+qFE6pb/xLmR
rExanHIEYIbFslfxleRlQV9jOh5dIQOdQpu07wCiNcuE9O5GZqqtjyNvBCvVUnYP
6Lbpqj/tYUH+uzASPnUY0NqvtWO6dtPqnS1mw64W0iPuruDqp4lg0vW0j+sc7JNx
ZE6rE75Ln9Qvfxd+jaq3g5LC3fPUsi2ea2d6VqQ41LBFCPlrlRaC/TYnNMUwqFzu
0JYiSwKvLh0r/gyYMqcOmDWaAO8AYVce2O4cpLxlYLQ9WQAxHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDr/78mMVZ4al8UlJ5JJqH7Iu2s9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjQ4YTFmYmYtYjYwZS0z
NTI3LWIzMmQtNGI1MTQ1MmFmYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFE1yNJqXiTR7hruB+XO/PYnMPNmWCoFpE+8hlAXqcCPGioOuYhCfatz
2pdGO4WrL/ANNS+BILcANcHEaiMhrSVlXp1x/EMCUeOxAzTAldgfH1f/qHfy1/zF
hmNXIt4AUCjWosh/RgjulRKR3kOyB5orDx3117Bi/HDEC5AfqnVXz2Anthv5rU/T
cKSe2gty5hjKA2jND5e0VssJt4FekeSJYitWR05+KoIEuqAO/cOKCsBSNiwV8gnz
B244bt2ux8+Uvaiyo7oIHjM1U33858S0hvvip8QCLkCyYYENSARa7FYDU5CqwQ/d
4wjm/wZDzwSWMdJZJMxxCSix137FFY0=
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:01 2025 by rpki-client