Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6998e83e-d304-3559-82ff-7a8639c6535f.roa
File:                     6998e83e-d304-3559-82ff-7a8639c6535f.roa (raw, json)
Hash identifier:          yxf0kizBUER7E+ihE385qiCN4nqf0sXjWLB86xBc5MM=
Subject key identifier:   FF:A7:D7:C4:E4:79:2C:40:60:7E:04:C5:AB:F5:42:25:6F:8D:90:6A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0D458D3C285913358E620
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6998e83e-d304-3559-82ff-7a8639c6535f.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        107.167.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d4:58:d3:c2:85:91:33:58:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=052f50dd-af82-483f-97fb-aecc9d70d123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:84:11:f4:be:f1:1e:17:81:77:42:b4:d3:
                    c1:62:e7:07:8c:b7:e4:ed:37:e1:d0:b2:b6:2d:47:
                    4d:9b:fe:aa:e3:cd:db:53:fb:94:0e:5e:f8:36:f1:
                    60:f3:7e:d6:5d:e3:3c:50:bc:8d:16:b1:37:5e:92:
                    3e:75:cc:44:42:d7:4d:65:c4:97:24:99:a4:fe:d4:
                    08:d5:0f:65:80:52:d5:7f:2f:2c:dd:1e:ee:1c:c6:
                    a8:76:ea:ec:54:10:83:5e:b8:70:6c:be:65:27:49:
                    34:35:59:03:ef:53:11:84:86:0b:bc:9b:a8:ae:c1:
                    71:ec:27:55:e5:66:3f:72:2d:b1:63:26:6d:7e:16:
                    fa:81:ef:c8:8b:08:ac:e7:23:a2:ff:13:24:b9:40:
                    00:a2:c4:fc:b6:56:3c:cd:3c:4d:97:86:5d:fd:62:
                    76:4b:0a:75:74:31:92:34:49:d9:c7:35:bc:bf:f0:
                    2e:37:e6:27:49:4d:4f:9d:7e:36:4c:f6:b0:ae:93:
                    0c:85:fc:6f:e9:e1:8f:06:3c:40:7f:99:67:e1:0d:
                    10:fe:b1:cb:f1:a4:f3:e0:a1:d3:c3:d4:b7:28:37:
                    82:6d:be:93:b3:7b:f5:09:9e:b4:b3:76:f2:f9:a0:
                    46:5e:e7:28:a5:72:fb:7b:17:1e:c8:88:b9:3b:0b:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:D7:C4:E4:79:2C:40:60:7E:04:C5:AB:F5:42:25:6F:8D:90:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6998e83e-d304-3559-82ff-7a8639c6535f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:84:fd:ec:05:6a:83:f8:3e:ea:7c:9c:55:ad:9f:e7:2f:
         10:11:18:a5:cf:08:07:53:52:cd:f8:ad:73:0b:ee:87:48:01:
         db:01:04:87:ec:a7:3a:b8:16:e8:76:4e:a8:37:08:4c:4c:35:
         fc:36:49:d4:28:ef:28:c8:2b:18:68:27:35:f3:e1:6d:86:dc:
         a5:d3:9b:d9:23:3c:6d:a7:8c:ae:80:1f:93:af:30:61:58:45:
         84:05:a0:91:41:4e:bb:87:1f:75:1d:e8:a0:90:b4:f1:c7:3c:
         eb:d4:bc:b9:53:2f:4f:6e:21:b6:ad:2f:37:07:3f:3d:d7:fc:
         52:47:46:f8:be:03:2a:f7:0b:50:08:55:d5:3d:1b:db:2e:d8:
         b1:2a:03:4b:1d:50:fe:79:22:79:74:be:0c:aa:a5:46:e5:ff:
         f9:75:a2:a0:e9:2f:df:b1:22:8f:0a:a2:cf:7a:da:fb:67:90:
         39:9d:fc:2d:5b:3f:d5:8d:06:d2:40:7b:a5:35:fc:ec:b0:ed:
         a8:99:66:98:a5:57:ed:00:af:d3:b5:ea:fc:be:31:1a:f8:83:
         92:c1:15:7c:a4:7b:e4:c9:6a:9c:67:f7:49:02:ec:f7:27:87:
         06:31:a9:e0:1f:86:41:af:cd:5a:79:ea:45:46:79:95:5b:b8:
         fc:2b:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:40:17 2025 by rpki-client