Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa
File:                     f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa (raw, json)
Hash identifier:          lElQIdMOt/txIqwB2xaJmrGQ8DlSpYYJ08I7ajAIm/M=
Subject key identifier:   10:DB:BD:8B:14:67:DA:82:98:40:AA:8E:AB:60:B9:C6:DC:08:86:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AC2E0D559C6BA6BB4C6B435EC
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        108.166.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d5:59:c6:ba:6b:b4:c6:b4:35:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=369ba203-8088-48de-b203-b87cafb0e8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:7d:98:45:67:db:96:a6:10:4e:27:cb:34:
                    cf:55:72:de:8e:18:b4:91:77:23:d0:4e:ac:19:ca:
                    85:79:cc:06:36:ae:fa:03:ab:2f:6b:c0:3d:47:e5:
                    49:be:ec:58:f8:97:52:28:cc:4e:ad:58:59:23:a1:
                    95:f1:cf:7d:88:40:9b:44:12:17:d7:c4:cb:f5:c1:
                    56:3a:39:9f:de:02:8c:df:4a:86:4d:fc:a2:c4:54:
                    aa:55:39:ed:e3:21:2f:8d:2a:dd:9c:a0:da:10:0e:
                    12:9f:c4:9d:72:ca:1a:9f:b3:fa:38:fd:05:66:7c:
                    89:b3:e9:8f:89:30:8b:25:41:f1:1b:f0:bf:6c:d6:
                    87:ef:22:cb:d4:84:d7:79:aa:41:5e:de:91:c3:07:
                    cb:d7:45:de:eb:65:45:94:f1:8e:f1:ba:80:e3:c2:
                    6a:74:48:7f:b4:93:a1:c9:d8:d1:03:10:f8:5e:20:
                    c9:ef:5b:7f:77:20:99:28:7b:3c:92:82:bc:1f:5d:
                    1f:b8:9d:be:34:02:6e:0c:63:4b:f5:44:e4:55:e0:
                    39:40:b9:bf:94:00:6a:70:69:dc:02:2b:91:cf:d7:
                    23:7d:47:cb:8c:a8:24:f1:ec:c9:8d:17:a5:67:a1:
                    0d:5b:a5:04:54:1b:40:d8:ea:6b:b9:ec:29:10:9c:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DB:BD:8B:14:67:DA:82:98:40:AA:8E:AB:60:B9:C6:DC:08:86:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3011cef-8ab3-3a46-a6ca-135ff7565dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:ee:a8:07:ae:77:53:9c:32:82:90:c3:b8:38:b9:30:fa:
         5f:b4:3d:bf:be:fe:44:09:d1:df:70:62:54:fd:b1:cc:4b:f9:
         a2:f5:f0:4b:a7:f8:1c:0c:6a:d8:b3:dd:86:37:2a:54:13:82:
         aa:53:9d:13:a9:48:d4:98:e7:1c:e4:8a:53:ec:f3:82:3a:84:
         00:b0:ac:3b:e7:e1:c1:ec:66:bf:50:9e:e8:e1:c9:96:49:ed:
         71:64:b1:c0:d8:6d:eb:61:85:49:ee:b9:4d:40:18:ab:fb:9c:
         0b:e5:81:eb:e8:db:bd:8a:19:cb:cf:22:82:b0:48:ed:73:ca:
         8d:fd:5c:79:0e:b4:76:7e:31:89:ad:39:d9:9f:68:3a:1c:6a:
         4a:b4:42:48:4f:c9:d6:d6:11:16:ce:48:a5:0b:53:de:7f:6f:
         c3:7c:74:ac:2f:41:a2:81:61:25:3f:81:0c:85:2c:44:a5:f0:
         c8:d3:11:c3:58:0a:17:97:9e:59:ee:12:16:c2:5e:64:fd:0e:
         d1:dc:83:8c:b7:03:4f:0a:6b:95:3d:7c:96:4f:c1:55:09:a2:
         70:9b:2d:2e:51:fb:ea:9b:d6:24:dc:a7:56:a6:31:a2:59:60:
         6f:fe:a7:ca:39:0e:6b:6b:06:a8:15:9d:61:75:b0:cc:8b:d6:
         f3:37:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:45 2025 by rpki-client