Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d594bf97-bd39-3105-84da-49b97c40c88e.roa
File:                     d594bf97-bd39-3105-84da-49b97c40c88e.roa (raw, json)
Hash identifier:          bttNsygNKEcOzkQ0hOd4fk9yu8RANhbNOe2SjMg3oOE=
Subject key identifier:   03:3B:0B:9B:2C:DC:FB:60:8E:3E:A4:AF:DC:5F:D2:9E:12:AF:01:56
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849E22501C8F00CC598B5FDA280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d594bf97-bd39-3105-84da-49b97c40c88e.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     30036
IP address blocks:        104.201.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:01:c8:f0:0c:c5:98:b5:fd:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=f9cde881-36af-4f43-a705-da654d8c6ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:83:a2:7f:68:97:60:24:26:78:72:91:88:
                    40:83:df:fd:e0:e8:d6:16:2b:ea:d9:62:bf:68:b8:
                    da:ed:be:e6:df:23:74:0a:04:40:da:05:52:45:8e:
                    30:e0:1b:58:e5:7b:1f:4a:09:89:8f:ea:47:95:f9:
                    ed:6c:67:83:10:b4:13:b2:3c:e3:ce:4c:c0:3b:32:
                    1e:49:99:f5:28:78:58:f8:ab:aa:d7:7b:30:b9:6a:
                    66:9e:88:52:fa:93:bf:54:3a:bf:5a:52:9d:a0:b7:
                    b6:aa:e8:29:78:c6:22:48:6a:5f:8c:fc:67:35:4b:
                    12:1f:c1:4a:1e:7d:05:bf:19:15:4c:b2:c7:5f:22:
                    19:3a:93:bc:6e:44:d0:2d:74:39:c0:66:4b:16:7a:
                    e6:ac:b7:57:90:49:14:fd:8c:0c:a0:6e:a1:f1:78:
                    c5:34:09:96:ee:ed:39:f6:f6:31:79:96:2c:eb:71:
                    d3:8b:a1:bc:bf:c7:f2:19:39:6b:36:14:3a:fd:70:
                    8a:14:b3:ba:aa:b7:54:89:c4:7c:08:a4:ae:03:32:
                    1b:de:07:40:2e:46:a7:cf:1d:3b:45:74:a9:8a:be:
                    9e:5d:f9:74:f8:74:e9:33:98:cf:d5:a7:74:71:0a:
                    bb:43:f7:09:b9:a0:8b:89:02:1c:60:aa:7f:7a:3b:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3B:0B:9B:2C:DC:FB:60:8E:3E:A4:AF:DC:5F:D2:9E:12:AF:01:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d594bf97-bd39-3105-84da-49b97c40c88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:99:d4:d3:69:98:93:eb:0a:2b:6b:4d:cf:7b:6d:a7:5b:4d:
         63:d2:20:24:44:9b:36:ed:95:0a:c6:0c:24:7b:5b:f5:cf:dd:
         e0:5a:e7:3f:cb:b1:24:f3:15:f3:c3:89:ef:b4:52:59:3c:8f:
         45:f2:f4:7a:b3:3f:61:ac:41:e6:14:05:8f:34:e6:fd:9a:d0:
         08:d9:37:b7:fa:e9:db:60:c6:3e:17:40:30:cd:b6:42:c2:33:
         70:96:e1:60:64:b3:f2:91:d8:db:c9:57:dd:79:bf:de:09:f6:
         91:cb:e1:51:89:17:0c:b7:24:38:bd:3f:86:18:83:b7:9f:46:
         d7:a4:ee:fd:4c:91:e5:54:b5:f4:f1:ba:90:af:c6:00:66:63:
         18:5d:83:b9:e6:16:73:13:3f:76:03:59:e3:e3:cf:1d:b2:28:
         e3:75:2e:e6:bd:ca:59:7d:e0:1b:eb:6f:54:d5:16:d4:c2:c1:
         04:fb:7d:e9:c0:0c:18:8b:d2:af:cb:c1:73:31:4e:c2:c3:4c:
         a9:b4:80:1d:53:2b:0c:e7:6d:fb:50:cc:eb:89:07:a4:bd:d5:
         41:14:ae:1d:b0:51:96:69:6f:99:29:12:1a:78:2d:d7:ba:35:
         01:7b:d9:be:d8:38:74:1a:f4:49:18:be:fb:e6:e9:1b:db:84:
         6f:0f:22:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJQHI8AzFmLX9ooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
ZjljZGU4ODEtMzZhZi00ZjQzLWE3MDUtZGE2NTRkOGM2ZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+CDon9ol2AkJnhykYhAg9/94OjWFivq2WK/
aLja7b7m3yN0CgRA2gVSRY4w4BtY5XsfSgmJj+pHlfntbGeDELQTsjzjzkzAOzIe
SZn1KHhY+Kuq13swuWpmnohS+pO/VDq/WlKdoLe2qugpeMYiSGpfjPxnNUsSH8FK
Hn0FvxkVTLLHXyIZOpO8bkTQLXQ5wGZLFnrmrLdXkEkU/YwMoG6h8XjFNAmW7u05
9vYxeZYs63HTi6G8v8fyGTlrNhQ6/XCKFLO6qrdUicR8CKSuAzIb3gdALkanzx07
RXSpir6eXfl0+HTpM5jP1ad0cQq7Q/cJuaCLiQIcYKp/ejvAVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAM7C5ss3Ptgjj6kr9xf0p4SrwFWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDU5NGJmOTctYmQzOS0z
MTA1LTg0ZGEtNDliOTdjNDBjODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESZ1NNpmJPrCitrTc97badbTWPSICREmzbtlQrGDCR7W/XP3eBa5z/L
sSTzFfPDie+0Ulk8j0Xy9HqzP2GsQeYUBY805v2a0AjZN7f66dtgxj4XQDDNtkLC
M3CW4WBks/KR2NvJV915v94J9pHL4VGJFwy3JDi9P4YYg7efRtek7v1MkeVUtfTx
upCvxgBmYxhdg7nmFnMTP3YDWePjzx2yKON1Lua9yll94Bvrb1TVFtTCwQT7fenA
DBiL0q/LwXMxTsLDTKm0gB1TKwznbftQzOuJB6S91UEUrh2wUZZpb5kpEhp4Lde6
NQF72b7YOHQa9EkYvvvm6RvbhG8PIrw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:19:36 2025 by rpki-client