Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
File:                     906dd976-e486-3c9e-8eba-5d9aec5ba475.roa (raw, json)
Hash identifier:          H78Yqst855QmB3zZRxaSS9iUNyFgaF8lAGPLRmtZtmQ=
Subject key identifier:   13:AD:F9:03:C5:49:70:3C:F7:3C:45:15:35:39:90:08:88:E9:7C:4D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E11E240175D4083DB8C000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        108.166.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1e:24:01:75:d4:08:3d:b8:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=641530bd-935b-42db-bd98-b0c435208b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:76:86:92:5f:3a:1d:d8:3f:3c:8f:e2:95:
                    17:d7:cc:6c:ae:08:0d:08:dd:77:af:78:c7:28:9f:
                    e8:8f:24:24:24:3f:a5:40:5d:8d:37:fc:59:4e:1f:
                    96:b1:04:3f:8e:bf:37:69:ad:0c:d8:53:19:79:19:
                    b2:28:bb:96:1c:b0:5b:7b:74:be:d0:a0:6e:f8:00:
                    aa:e1:60:35:e5:e2:14:9e:06:3b:f7:dd:cb:1a:75:
                    e7:d2:50:5b:22:2c:f4:0e:f1:54:80:1d:83:f2:9e:
                    27:e7:3a:1a:46:0d:2b:d0:4b:55:f3:99:25:93:5b:
                    13:2c:ed:7c:13:73:3a:88:96:ab:1d:3c:30:b7:72:
                    94:17:59:2a:97:e8:8e:0a:71:3e:06:9d:28:4d:b6:
                    a8:c9:c7:20:da:3b:27:ce:82:99:02:34:62:6d:65:
                    3d:ee:09:21:e4:ff:57:ef:0d:72:a6:c3:76:b7:6e:
                    7d:eb:e8:83:fc:70:db:19:70:8c:09:30:98:1e:df:
                    d1:4e:7b:ea:fc:73:0d:78:84:f1:91:b4:f5:40:07:
                    94:0a:8d:66:81:19:c1:dd:9a:49:fa:89:4c:5e:c5:
                    8a:72:c8:95:56:46:65:0c:99:10:47:c4:d0:a0:b2:
                    09:02:b6:a2:bf:1d:f8:c0:e3:d7:09:ac:5e:7e:69:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:F9:03:C5:49:70:3C:F7:3C:45:15:35:39:90:08:88:E9:7C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:10:2e:14:04:2b:ee:aa:83:e3:cf:83:6c:68:28:f7:b4:
         a2:df:f5:24:d0:c3:e4:c8:13:2a:a3:0b:c2:dc:ac:5c:72:1c:
         d6:75:96:d8:4c:17:21:6e:d4:a1:56:6f:bf:e7:21:b3:f1:39:
         e7:f1:79:7a:c5:86:93:4c:f5:95:30:92:13:ac:5e:18:aa:9d:
         bd:9b:66:11:92:81:eb:f9:57:26:ea:af:b7:6d:8e:8d:bb:2a:
         67:ed:4e:90:04:4e:00:73:69:d3:10:cc:f6:51:e8:5e:a3:c8:
         6c:68:1f:eb:52:15:aa:d0:c3:e7:b9:67:df:88:16:7a:20:57:
         cc:50:1a:24:38:33:8c:ec:a8:e4:3b:72:5d:27:e0:89:36:e8:
         c1:6f:bc:96:67:a8:5c:29:5b:9d:db:ae:1c:e3:f3:d1:1e:94:
         b8:21:ee:68:bc:98:94:3e:9d:52:0a:2b:1d:24:d5:79:0d:30:
         80:5e:82:59:12:5e:5e:b9:60:bc:26:9b:58:34:17:9b:b5:56:
         95:5c:45:e4:29:ba:64:40:1a:29:7f:36:d3:33:7c:f6:2f:c2:
         d2:3a:ab:0e:5c:d5:88:96:46:70:ec:d5:43:a2:60:3c:c7:72:
         55:18:87:53:4c:18:d9:85:26:2e:ff:df:93:b8:24:18:b0:08:
         0f:1f:ab:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4R4kAXXUCD24wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjQxNTMwYmQtOTM1Yi00MmRiLWJkOTgtYjBjNDM1MjA4YjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUN2hpJfOh3YPzyP4pUX18xsrggNCN13r3jH
KJ/ojyQkJD+lQF2NN/xZTh+WsQQ/jr83aa0M2FMZeRmyKLuWHLBbe3S+0KBu+ACq
4WA15eIUngY7993LGnXn0lBbIiz0DvFUgB2D8p4n5zoaRg0r0EtV85klk1sTLO18
E3M6iJarHTwwt3KUF1kql+iOCnE+Bp0oTbaoyccg2jsnzoKZAjRibWU97gkh5P9X
7w1ypsN2t2596+iD/HDbGXCMCTCYHt/RTnvq/HMNeITxkbT1QAeUCo1mgRnB3ZpJ
+olMXsWKcsiVVkZlDJkQR8TQoLIJAraivx34wOPXCaxefmmukQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOt+QPFSXA89zxFFTU5kAiI6XxNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTA2ZGQ5NzYtZTQ4Ni0z
YzllLThlYmEtNWQ5YWVjNWJhNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDpEC4UBCvuqoPjz4NsaCj3tKLf9STQw+TIEyqjC8LcrFxyHNZ1lthM
FyFu1KFWb7/nIbPxOefxeXrFhpNM9ZUwkhOsXhiqnb2bZhGSgev5Vybqr7dtjo27
KmftTpAETgBzadMQzPZR6F6jyGxoH+tSFarQw+e5Z9+IFnogV8xQGiQ4M4zsqOQ7
cl0n4Ik26MFvvJZnqFwpW53brhzj89EelLgh7mi8mJQ+nVIKKx0k1XkNMIBeglkS
Xl65YLwmm1g0F5u1VpVcReQpumRAGil/NtMzfPYvwtI6qw5c1YiWRnDs1UOiYDzH
clUYh1NMGNmFJi7/35O4JBiwCA8fq7I=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:25 2025 by rpki-client