Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed9edbf4-2f1c-32fc-89d2-b338b5e12b98.roa
File:                     ed9edbf4-2f1c-32fc-89d2-b338b5e12b98.roa (raw, json)
Hash identifier:          d5hEmH4XH6Q+pgLpGRRWECtIM186/cfWj50NxPxRyMM=
Subject key identifier:   DA:34:57:02:CD:D2:D1:86:D2:E4:53:4F:1C:19:F6:1E:B8:CE:FB:05
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0F9C450E7FE6F76BE7540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed9edbf4-2f1c-32fc-89d2-b338b5e12b98.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        107.167.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f9:c4:50:e7:fe:6f:76:be:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=62fb0fcb-35fc-4ca9-8b5b-5f9c9c3bb10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:d4:6e:15:c9:51:60:be:e6:f7:17:24:79:
                    18:bc:af:44:ca:f7:de:1f:5c:d1:23:99:06:d7:41:
                    1d:16:c6:54:64:a9:88:71:da:0a:7d:fa:a2:78:44:
                    f6:27:8e:b4:ba:5a:65:a7:ba:3a:79:d3:0a:57:70:
                    76:a1:c1:3f:eb:cd:ed:16:32:1b:a2:bf:d7:fb:6a:
                    51:d5:ee:e0:f3:f2:fc:fd:fd:93:89:3c:52:86:52:
                    61:8a:ad:42:7c:e1:69:ce:63:a5:a3:bc:be:ec:1f:
                    d5:55:7a:62:59:16:ac:f8:01:31:71:5d:44:e6:16:
                    72:41:27:ac:d8:25:1d:85:0e:6c:72:73:2b:0e:ff:
                    d4:dc:fd:9c:49:e9:a5:67:6b:65:35:ad:6d:6d:3b:
                    c6:1a:b0:dd:0f:3a:92:2e:41:d3:b2:76:b0:1e:5b:
                    6b:13:3a:5f:09:5f:3f:84:ce:a9:4a:be:c5:18:53:
                    f0:77:f6:30:cc:e1:ec:2a:b3:1d:ae:65:f7:47:f2:
                    99:5c:74:65:97:6a:fe:da:85:eb:4f:da:99:aa:81:
                    0a:c7:4d:a6:60:7e:dc:e5:29:bb:b9:06:97:8a:58:
                    5f:14:08:4f:b8:0c:06:ff:47:07:d3:6d:c8:b5:3e:
                    ca:04:cc:c3:71:74:7a:83:5c:20:bd:fd:68:d2:f0:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:57:02:CD:D2:D1:86:D2:E4:53:4F:1C:19:F6:1E:B8:CE:FB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ed9edbf4-2f1c-32fc-89d2-b338b5e12b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:bd:30:14:15:fc:df:bb:4f:c7:72:27:72:95:2a:94:ac:
         e9:3c:38:c9:bb:5c:59:3c:2d:0d:13:d2:e6:3e:9b:e5:f9:95:
         68:3d:17:cc:32:ee:18:27:24:84:90:c6:b4:87:ca:6c:18:d5:
         0e:7a:cd:7a:b6:d9:89:65:6e:81:0c:79:2a:1d:d5:d4:7e:b0:
         d5:8f:0b:10:b6:54:9f:c9:48:b1:28:c7:2d:cd:e7:f1:13:f6:
         bb:39:f1:c1:5c:2a:13:fd:44:53:0f:23:af:27:53:7c:b0:fc:
         3f:42:5a:2d:be:63:80:24:e1:17:5c:8b:8c:d6:a1:d6:6f:35:
         6a:22:73:f9:29:3f:c8:16:52:22:0c:c0:be:ec:11:57:fa:60:
         ba:12:0a:c7:e1:f1:94:e9:b8:78:5b:0f:7e:6c:f7:0f:82:39:
         3b:66:85:a1:53:b7:2a:0b:bd:bf:87:6c:1c:03:a0:13:4f:b4:
         38:f1:07:88:ac:78:3a:e4:0f:a2:cc:98:85:7e:6e:81:99:7f:
         6b:64:94:4f:29:bf:1a:0a:f6:dc:f4:0e:fd:11:09:9a:4b:fd:
         65:78:f9:ea:51:fc:83:3c:53:2e:bc:b5:76:d6:cc:90:0d:7a:
         75:90:4e:87:6a:3a:ef:0e:cc:f5:11:40:f6:66:60:1a:9f:9a:
         37:66:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:02 2025 by rpki-client