Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa
File:                     76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa (raw, json)
Hash identifier:          SjS5ukAZEDPddCZj2Esz9euo11VJoQhL7xA6fyWYBDI=
Subject key identifier:   A9:61:4B:35:23:88:EC:44:31:4B:0D:C4:21:2A:32:5E:07:3A:6D:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0FA9618E2145D13D14240
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        108.166.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fa:96:18:e2:14:5d:13:d1:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=1836f431-73e4-4826-8f8d-b2c92bf1d3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:28:27:95:5a:a7:b1:ad:e5:57:7a:fb:40:
                    1f:e0:3b:1e:61:c4:80:aa:7c:d2:6a:a8:b5:a7:a7:
                    7d:59:f1:4d:29:eb:b1:05:df:00:de:d2:be:d1:81:
                    35:29:94:99:64:4c:db:07:f8:62:31:5d:4f:0e:d6:
                    04:68:41:62:d0:0c:3d:d0:e5:dd:64:0f:ab:1c:b8:
                    04:91:f7:d1:e1:64:62:e4:0d:74:b4:90:ec:2e:f1:
                    b5:b9:ef:2c:e0:7a:4d:06:ab:30:ee:ef:94:a8:03:
                    ca:a7:69:8e:68:ef:2c:be:a2:37:f5:27:cb:0f:de:
                    ac:44:23:f4:63:7a:17:d9:44:c0:c8:7a:28:2c:63:
                    65:f0:53:b9:8a:cb:de:70:b9:1d:8f:6d:d7:44:7b:
                    e2:bb:9d:1a:4e:80:b4:41:73:fa:2b:08:8c:c5:bb:
                    ea:2f:14:ec:e3:48:c5:c8:df:1e:67:30:6f:25:3c:
                    cc:a0:01:d1:73:81:7e:6d:5b:d0:e6:60:6d:ed:4d:
                    ea:28:55:e6:c0:8e:30:03:68:69:9e:49:91:79:d6:
                    63:a3:87:de:b3:dd:8e:78:89:d3:ee:f7:fd:fd:31:
                    20:ae:ce:cb:98:6a:98:19:bd:7e:87:a5:94:ce:e1:
                    c4:f3:5c:3f:04:00:d2:5e:c1:5e:1e:53:93:82:0f:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:4B:35:23:88:EC:44:31:4B:0D:C4:21:2A:32:5E:07:3A:6D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76da758a-14a6-3e8f-a348-7e08aee7ea3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:de:80:24:58:e2:ae:73:1f:c8:74:ff:93:dd:bf:89:f6:2b:
         2d:46:91:a9:e1:25:c3:a1:b6:03:63:23:db:7a:51:ae:0f:b2:
         cf:c5:31:d7:aa:3d:c1:36:e2:db:cc:c1:2a:3c:f1:31:3b:91:
         38:b6:53:c2:9b:bd:78:c0:03:9c:5b:ec:cc:db:ea:79:f1:42:
         d8:8a:42:7a:0d:e9:bb:51:8d:3e:9e:ef:48:97:8c:c4:80:52:
         1f:d7:3e:91:f9:5c:04:fe:29:d5:a2:66:88:7f:2b:72:a2:27:
         f1:a9:7b:62:f5:37:08:b4:12:94:68:7f:bf:cd:06:8d:08:1d:
         c6:b7:39:45:9a:81:d3:25:e4:01:32:20:9f:12:b4:c2:4e:c2:
         d6:e3:97:63:9a:f3:b8:12:e4:85:82:70:95:5d:86:e3:1b:01:
         01:83:f2:45:75:d1:70:1e:56:24:22:48:dc:35:0b:8f:c4:96:
         bb:11:d5:e4:c7:2e:fa:ae:8f:96:9a:34:35:0c:d6:01:54:6c:
         80:18:df:51:9d:c6:df:57:24:cc:51:6f:7c:a8:af:c7:c7:04:
         cb:a3:ee:c0:58:27:e8:8c:a7:72:04:5f:d8:60:cf:34:38:0c:
         cc:e3:c7:b0:23:b3:1b:a2:c9:26:65:4b:d7:05:d3:97:55:29:
         f7:3d:9d:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PqWGOIUXRPRQkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MTgzNmY0MzEtNzNlNC00ODI2LThmOGQtYjJjOTJiZjFkM2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU0oJ5Vap7Gt5Vd6+0Af4DseYcSAqnzSaqi1
p6d9WfFNKeuxBd8A3tK+0YE1KZSZZEzbB/hiMV1PDtYEaEFi0Aw90OXdZA+rHLgE
kffR4WRi5A10tJDsLvG1ue8s4HpNBqsw7u+UqAPKp2mOaO8svqI39SfLD96sRCP0
Y3oX2UTAyHooLGNl8FO5isvecLkdj23XRHviu50aToC0QXP6KwiMxbvqLxTs40jF
yN8eZzBvJTzMoAHRc4F+bVvQ5mBt7U3qKFXmwI4wA2hpnkmRedZjo4fes92OeInT
7vf9/TEgrs7LmGqYGb1+h6WUzuHE81w/BADSXsFeHlOTgg8c1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlhSzUjiOxEMUsNxCEqMl4HOm3NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzZkYTc1OGEtMTRhNi0z
ZThmLWEzNDgtN2UwOGFlZTdlYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGregCRY4q5zH8h0/5Pdv4n2Ky1GkanhJcOhtgNjI9t6Ua4Pss/FMdeq
PcE24tvMwSo88TE7kTi2U8KbvXjAA5xb7Mzb6nnxQtiKQnoN6btRjT6e70iXjMSA
Uh/XPpH5XAT+KdWiZoh/K3KiJ/Gpe2L1Nwi0EpRof7/NBo0IHca3OUWagdMl5AEy
IJ8StMJOwtbjl2Oa87gS5IWCcJVdhuMbAQGD8kV10XAeViQiSNw1C4/ElrsR1eTH
Lvquj5aaNDUM1gFUbIAY31Gdxt9XJMxRb3yor8fHBMuj7sBYJ+iMp3IEX9hgzzQ4
DMzjx7AjsxuiySZlS9cF05dVKfc9nes=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:47:08 2025 by rpki-client