Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e852efcb-851c-322b-b280-4ab786bbefa0.roa
File:                     e852efcb-851c-322b-b280-4ab786bbefa0.roa (raw, json)
Hash identifier:          QkhRY1r6tWLxFah5J+3gwXN3al4i4mSEPidgbhvi+CY=
Subject key identifier:   56:14:FE:C4:A9:BA:45:42:BE:4B:F5:2C:06:D0:47:89:4F:BA:C7:F1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849E2250B0C107D36DB210DC840
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e852efcb-851c-322b-b280-4ab786bbefa0.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     30036
IP address blocks:        107.167.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:0b:0c:10:7d:36:db:21:0d:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=403cc39d-c397-4730-9498-8b45e6edf8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:17:bd:4f:16:c8:0a:00:f5:a1:53:f9:7c:
                    9b:6c:b5:d4:ca:22:6f:97:e9:49:a3:c9:4e:9a:43:
                    77:11:73:6f:49:3d:2b:a1:0d:8c:73:d9:52:fc:6d:
                    28:24:35:bf:e3:00:9b:80:04:a2:58:b3:80:b6:03:
                    42:61:97:eb:da:88:5c:33:40:7b:e0:41:a0:71:2c:
                    5b:f8:dd:43:8f:c4:63:e4:e0:bb:ad:0d:0e:cf:89:
                    1e:79:7f:6f:05:b6:f3:4c:87:4e:ce:0a:1a:e3:ac:
                    0b:c2:a4:64:2c:cc:fc:6b:8a:45:f4:ed:1e:79:6d:
                    3a:3f:74:0c:96:c8:84:99:ff:b8:ff:73:b4:8c:5f:
                    cd:0a:0a:7f:e1:6e:7c:16:9b:61:e9:bb:dc:51:49:
                    5c:42:3f:8e:a1:1b:d1:5b:07:f7:b4:af:95:7e:67:
                    0a:52:25:94:7c:c5:ec:b8:b8:9d:10:bb:b1:1b:8e:
                    a5:f3:1c:1d:26:8a:95:e5:2f:64:74:e8:46:9f:7e:
                    91:e1:fb:3f:bd:92:9f:b9:06:06:5a:38:d1:1f:03:
                    6a:68:da:59:a0:6c:68:e6:f6:8c:e4:00:b9:2b:06:
                    1c:f5:64:08:eb:86:10:12:57:9d:bd:a3:c4:13:5c:
                    89:32:c8:ec:bd:a7:0a:65:3f:2b:b7:7d:9b:1e:22:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:FE:C4:A9:BA:45:42:BE:4B:F5:2C:06:D0:47:89:4F:BA:C7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e852efcb-851c-322b-b280-4ab786bbefa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:76:61:64:16:81:7c:51:d6:73:c5:15:f9:b3:bb:5a:33:b6:
         76:0c:fe:59:9e:e3:2d:ae:30:84:d3:25:69:5b:49:05:8a:e1:
         66:12:f5:73:58:c0:02:22:4a:9d:59:5a:86:54:af:38:93:6c:
         50:a8:99:e6:34:9d:7b:25:60:a1:18:10:17:de:2e:16:8e:a7:
         85:30:ff:84:10:44:48:9d:05:8d:a7:95:3f:b4:f3:8e:d0:1e:
         e0:13:6c:bf:22:91:72:85:bc:c9:a0:3b:c4:6c:6b:85:c5:f8:
         34:8e:3e:30:99:9a:50:72:4a:9d:98:1f:33:d3:17:5b:27:13:
         2f:ed:45:a8:68:17:38:7e:40:62:6a:f1:55:fc:5a:d1:be:d1:
         0e:62:b4:58:6b:3e:04:62:d6:e8:96:08:85:81:36:6e:92:d9:
         ff:5e:e5:10:96:3a:0f:18:a2:74:74:cf:d6:2b:39:b9:05:96:
         74:cb:cd:c5:bd:22:ce:47:a6:8e:cc:65:76:2b:9d:c3:f0:01:
         17:e4:6f:de:16:96:0d:ac:51:c4:08:0e:16:c3:50:34:fe:f2:
         35:2a:cd:28:cb:65:2e:40:72:ad:91:1d:32:a4:19:24:c1:01:
         91:a3:dd:7f:65:c9:fb:c0:23:fa:5b:4f:e6:ab:fe:98:e3:d8:
         4e:45:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:53:40 2025 by rpki-client