Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa
File:                     89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa (raw, json)
Hash identifier:          uFQSA9tlCj0KskPqfhazhbyLvfWD/+a6hs7jf4gMXXQ=
Subject key identifier:   3C:13:84:4A:98:32:5F:DF:03:C1:5C:A5:98:FE:D7:01:32:65:2D:F7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E11FBBA9A45A7951C8CB80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        107.167.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1f:bb:a9:a4:5a:79:51:c8:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=16641391-09a8-491d-babe-ab0577ee276a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:ed:8e:67:25:96:ad:17:f1:31:eb:d3:94:
                    6a:98:f9:8d:b4:43:96:d0:53:f2:53:e8:ca:f4:43:
                    21:68:c0:d8:62:be:29:02:f6:14:b4:17:08:6e:1a:
                    39:0e:b5:f3:2e:18:00:95:e2:62:f9:07:e3:e5:bd:
                    2d:05:89:95:53:99:e0:85:7f:7b:c6:a6:2e:58:d3:
                    70:e7:fa:a7:13:42:55:48:df:c2:b2:20:d2:bc:91:
                    c2:b6:00:d6:97:e9:72:89:c2:3d:b1:8e:d7:18:95:
                    e9:66:18:f0:07:d6:6f:56:ec:8a:c1:73:1c:38:07:
                    15:28:32:b4:03:f0:ec:60:9a:ca:6a:0e:ff:55:01:
                    dc:e3:1c:82:ee:4f:64:2c:dd:2c:4b:46:f6:22:ec:
                    67:c4:7f:a3:ac:08:5a:64:7a:95:ad:47:83:f7:e3:
                    07:4c:5e:d0:16:9d:a7:83:fe:70:32:f3:96:6d:50:
                    fa:53:6c:4e:82:ba:7d:23:ba:6a:52:71:89:70:af:
                    ba:8a:e2:c8:cf:75:c2:b0:2e:8d:56:6c:b6:48:a1:
                    bd:9b:c4:20:01:d4:53:0f:04:4f:32:5d:69:da:3d:
                    15:5b:2e:30:3b:9a:22:a7:b6:62:fc:7c:43:a2:da:
                    0b:28:b0:b1:83:6a:ed:9e:76:a6:f0:7e:92:79:b4:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:84:4A:98:32:5F:DF:03:C1:5C:A5:98:FE:D7:01:32:65:2D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/89780e9e-c40a-3af7-bf0a-a15c1a4f8daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:17:d6:c1:f7:e8:ea:c4:b7:8b:db:04:33:ee:8a:ae:67:54:
         d1:8d:1f:d0:95:17:b7:29:a6:85:f7:1c:14:04:9a:2d:e5:bb:
         73:aa:50:52:ff:7b:f0:9b:da:17:b2:7e:d6:d1:65:4e:d1:23:
         c8:a6:a7:0a:d0:82:e8:08:1e:48:0d:e6:0d:f5:4f:6f:98:3e:
         49:49:4a:e8:e4:d8:ab:a8:c2:37:e3:b3:4a:ec:ab:d5:bc:07:
         17:f3:89:01:c0:7c:e7:e7:b9:aa:d8:cd:2d:0e:58:2c:08:b0:
         76:a5:75:0f:8c:76:f8:cf:88:a3:07:8e:db:1a:0f:ed:ce:8c:
         9f:bf:9b:b9:ba:6f:fc:f5:b6:66:13:c8:56:66:71:bd:1e:2b:
         bb:ca:d0:5d:9e:08:29:7b:69:c4:3e:76:a7:31:24:6e:d0:4a:
         25:c1:c5:7b:27:7f:26:61:0e:c4:71:48:50:cb:ab:c5:08:59:
         05:fa:31:5a:4d:6e:88:9a:7d:94:b6:64:00:7d:c4:e6:b6:0a:
         9f:95:13:cc:c7:e6:0d:6b:32:64:c7:26:a5:c0:fd:8c:0e:e4:
         ee:85:b1:ba:f8:78:d3:d7:22:6a:7e:e4:be:5b:82:54:b1:52:
         7b:86:75:87:ca:3f:2c:e8:43:84:cd:83:48:83:2c:7c:3b:dc:
         b9:bf:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:53 2025 by rpki-client