Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
File:                     a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa (raw, json)
Hash identifier:          99+GYOJdhCz/HFFB7KQx1Q9ff9KgjFGgWToX2vi5hoc=
Subject key identifier:   BD:C8:4C:95:BE:1B:6A:31:A6:FE:47:31:3F:BA:2B:EA:99:96:DC:AD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA39D3BF0302284211922EB90
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     30036
IP address blocks:        104.201.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:3b:f0:30:22:84:21:19:22:eb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=adb03c75-2f23-4c81-a9b6-fd544da9405a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:7b:9e:cd:ea:30:40:41:2b:4b:2c:3c:b9:
                    bb:6d:c9:cb:6a:7d:2b:39:7f:52:da:8c:93:58:56:
                    73:04:b6:ad:1c:ba:5e:3c:ab:c2:4c:af:1a:65:fe:
                    99:33:4a:f5:c4:8e:77:9d:86:a9:66:94:72:82:e2:
                    d7:c7:4e:a3:57:a4:de:be:26:bb:73:b5:85:ec:9e:
                    4f:c8:a8:28:b6:24:8c:6a:44:cd:68:6a:86:6a:c8:
                    60:e3:fd:8d:bf:68:a4:39:a2:c3:96:de:9a:8e:2a:
                    c1:ed:f2:3f:a1:96:c9:5d:dd:8e:34:d5:07:c5:b3:
                    f7:e5:e8:9d:f4:7e:f8:e6:d7:45:e4:c7:ef:fc:bf:
                    2b:b3:83:09:a3:86:83:2a:38:6e:86:7b:f7:18:5b:
                    3d:20:88:c3:4c:db:f0:db:1f:3d:d3:f2:e0:ef:bf:
                    c2:1a:53:71:20:22:38:3a:21:c9:80:f9:00:be:8e:
                    2a:b7:2a:ac:fb:1a:7c:cc:4f:a7:b0:fb:30:f4:63:
                    61:af:db:56:88:03:3b:fe:b8:61:42:81:04:30:1e:
                    d8:1e:ad:04:82:15:cb:87:92:bd:27:0a:43:2c:35:
                    4b:a6:12:07:8d:f3:c2:64:10:1b:ae:81:15:83:02:
                    7d:19:14:d5:ce:c9:fb:75:dc:2e:2e:6c:60:0b:24:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:4C:95:BE:1B:6A:31:A6:FE:47:31:3F:BA:2B:EA:99:96:DC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:2e:64:31:75:d6:af:44:25:86:0a:77:be:42:dd:97:e3:
         5f:23:23:2c:90:3e:44:eb:f7:cf:84:85:a3:57:72:f6:00:e4:
         e4:2a:ad:ca:bb:ba:ba:5c:63:cf:67:3c:72:98:22:96:d8:57:
         f8:1e:19:a5:f3:1b:6e:f6:4f:70:83:03:50:14:2d:30:b9:d4:
         5b:84:04:e2:30:9f:97:c3:21:91:0d:69:33:49:c9:ee:e6:18:
         bd:d6:a7:96:0d:f7:06:bf:6d:6f:cd:40:6b:80:5b:2e:da:ca:
         e4:9e:ed:6e:60:93:5f:80:8a:d3:86:1a:82:59:cd:f5:58:a9:
         7b:cf:de:21:bb:fa:f2:23:1d:d6:94:5e:f7:2d:a9:ba:3f:fc:
         92:0d:ba:85:22:03:9f:7c:c3:a3:b6:b0:6b:a7:4f:48:f1:0c:
         8c:4e:de:f7:88:b3:01:d4:30:f2:69:6e:67:e8:07:d0:41:ce:
         67:79:06:29:fc:ba:f9:bd:6e:5c:ca:a7:e5:40:b3:d6:48:c0:
         63:e9:14:92:0f:21:37:c5:eb:92:74:d7:83:d6:77:62:b4:d4:
         7d:8f:99:b0:2c:fa:30:3f:aa:3e:92:cf:94:63:c8:9f:07:ae:
         fb:df:af:52:0e:ce:18:65:42:b9:93:b6:9d:4e:d5:a0:d0:37:
         fa:a0:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:08:46 2025 by rpki-client