Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
File:                     ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa (raw, json)
Hash identifier:          S145TMfQ9tjzle3bVVRccafOO5FmCXkaBtDbLVpHl08=
Subject key identifier:   9B:C0:B7:4F:83:30:E7:18:CE:CE:2E:AD:14:B8:F1:D4:C6:D7:20:DE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0FACF02EC4F72D0C015A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        107.167.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fa:cf:02:ec:4f:72:d0:c0:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=0cc6091f-431b-4ecf-a5f8-c363b9ab5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:8c:2a:95:14:ea:5f:e4:74:1a:03:5a:f2:
                    d0:9e:74:89:fb:70:01:a6:fe:7d:34:aa:0f:f8:9b:
                    3e:87:d2:c2:e3:68:bf:17:ea:1f:52:fe:70:dd:91:
                    8e:f0:73:0a:2c:cb:d7:1c:70:cd:3d:e2:9d:50:99:
                    27:ad:94:4c:da:44:bf:97:e4:93:1d:19:de:00:7f:
                    22:98:d6:d3:e7:26:0f:98:bc:b2:43:df:1f:2a:1c:
                    ef:9f:c9:8a:b8:b0:f1:12:60:0e:6d:90:46:a6:2a:
                    46:5e:92:c0:04:18:29:4a:68:61:c1:33:ed:04:5f:
                    f3:47:3d:e7:56:12:d0:6b:57:02:3d:07:5b:6e:4a:
                    6d:4f:27:26:1b:e0:3b:9c:c3:c5:fc:b2:62:34:f6:
                    ed:ce:62:0a:be:99:92:5a:85:0a:b8:33:e9:4e:8d:
                    ee:34:c4:11:72:4d:a3:02:d0:d5:0d:d2:ae:67:86:
                    ea:d2:87:53:84:3a:e2:e2:50:49:0d:fb:d1:97:2e:
                    f0:ee:fd:1d:ce:f8:b3:be:15:b2:e6:09:e7:6e:d5:
                    db:1b:d6:a1:03:ea:0d:6d:ce:c7:c1:af:f9:e7:5c:
                    13:6b:8a:63:26:02:e4:b5:a8:19:3c:43:9e:8c:df:
                    07:45:25:80:6c:c6:1b:c6:ee:26:b4:23:0f:72:f7:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:B7:4F:83:30:E7:18:CE:CE:2E:AD:14:B8:F1:D4:C6:D7:20:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:48:1e:0b:76:46:e6:0c:8c:b4:d1:a7:9c:33:21:e8:72:5c:
         42:a9:33:40:56:96:3b:6a:eb:6e:a6:05:62:f8:b2:32:f9:73:
         e5:3b:9b:a1:76:9b:db:43:79:b3:e1:84:be:32:96:22:47:47:
         27:78:bd:d6:5d:e5:33:0f:51:09:f0:7a:4d:b1:52:58:9a:49:
         c7:14:25:e4:c4:35:28:62:c1:c0:66:e5:e2:4f:f8:d0:8f:cd:
         6b:4c:e4:94:d8:55:0b:3b:52:42:f6:87:cd:c5:e2:ca:b4:7c:
         38:ec:81:b7:61:c3:9d:b4:7c:48:70:fa:1d:62:af:4e:70:58:
         8d:58:ae:aa:30:17:f7:ee:7e:3b:fe:de:b5:a9:83:50:df:4f:
         8d:4c:27:dc:ff:e4:7b:dc:ef:9a:14:ce:99:1b:3e:85:45:6a:
         7b:95:9a:dd:c8:48:1b:b0:39:6d:d3:18:6a:96:c7:a6:40:67:
         8f:c8:94:4c:ce:14:36:e9:f0:89:42:87:2f:b4:b5:0d:18:b9:
         6a:46:67:be:13:78:9f:8e:28:98:e0:31:b0:7c:a6:1a:6c:04:
         d6:f5:8b:ff:89:8a:11:fc:d5:b2:af:0a:eb:33:c8:2a:df:7f:
         a7:a5:60:26:47:e0:cd:10:45:03:f4:57:03:52:f4:06:a4:3e:
         b8:90:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:31 2025 by rpki-client