Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa
File:                     60eed75d-7064-34bb-a4b9-b4135d48551b.roa (raw, json)
Hash identifier:          rWBSbw0F3pLSAzrtBCmWaoyKeb4AJlJ6wV0DL1nZp8M=
Subject key identifier:   D9:D5:5A:D0:59:96:8E:41:3F:DA:1A:BC:14:56:8C:86:F4:B7:33:BB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849E2250DB34F1140C517AA2318
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     30036
IP address blocks:        108.166.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:0d:b3:4f:11:40:c5:17:aa:23:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=3e3e9d48-a677-4a40-bc53-87864c3bd59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:32:fa:83:91:f2:c1:08:b1:fb:02:f6:14:
                    0b:ac:83:6e:91:77:71:7a:bb:c2:85:04:15:92:29:
                    0b:48:ef:e7:82:37:13:d5:2d:b0:6f:99:e1:7a:03:
                    66:7b:c8:6e:f4:97:d2:4b:ea:b8:42:18:fc:8c:fe:
                    cb:7a:73:7b:64:16:8b:4b:56:90:a0:19:70:62:eb:
                    e1:68:cd:13:5c:4d:5d:82:6a:90:09:47:c9:0f:51:
                    13:69:8d:b7:b9:f7:c9:49:d7:2f:b7:c0:48:93:6f:
                    b2:50:13:8a:01:9e:5d:82:35:76:75:35:52:34:83:
                    38:ad:85:f9:2f:2e:88:3c:86:a7:6d:a7:fe:18:62:
                    e6:aa:f2:9c:1a:84:cd:cc:58:a8:5c:04:3c:c9:88:
                    85:d6:94:dc:9a:a9:f2:5d:f8:a2:89:25:40:f1:e4:
                    62:a8:e3:cd:53:c1:a3:3a:db:c0:f4:ab:b2:6e:fc:
                    ad:cd:cf:32:b2:53:62:12:56:fa:f7:08:05:3e:5e:
                    b7:2c:e8:23:5e:a0:66:00:55:0c:94:a0:d6:d1:f2:
                    fc:90:78:bf:f1:08:0e:c7:af:fe:fc:8c:cb:c2:05:
                    f8:b4:f1:6c:92:ee:05:34:b9:a1:4a:6e:f7:be:3b:
                    ec:cb:ee:11:33:50:45:96:26:ad:6a:17:0e:71:2c:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D5:5A:D0:59:96:8E:41:3F:DA:1A:BC:14:56:8C:86:F4:B7:33:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/60eed75d-7064-34bb-a4b9-b4135d48551b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:03:ab:7e:3e:fe:22:9a:b2:f3:b7:31:3b:d4:51:49:78:05:
         e3:11:8c:87:11:e2:31:cf:49:63:79:8c:d1:89:15:aa:4e:17:
         ba:f0:f1:11:4f:db:fb:14:39:21:7e:18:87:e2:af:49:ac:80:
         e6:33:d7:e2:55:ab:03:b0:5b:a9:c1:f8:63:81:79:af:51:da:
         fc:b1:5c:2b:19:25:6c:04:9b:db:f9:9e:84:93:de:3e:eb:c8:
         4a:f2:58:26:5d:a8:11:03:33:da:9d:7c:a3:5c:a6:9e:2e:ff:
         82:9f:c7:ab:21:aa:46:94:39:95:88:32:be:8d:d0:7b:2d:10:
         e7:9f:bc:57:c7:2f:f1:c8:e5:dc:b7:af:e8:4a:0f:f7:84:86:
         32:2f:d4:be:86:88:e7:f9:e3:e6:2d:33:a2:27:ae:28:e4:87:
         2b:0b:b5:29:77:06:47:45:f1:d1:c3:d7:bc:bf:6b:6a:d3:c1:
         06:2c:56:e7:da:cf:63:80:c5:7b:f6:8a:82:71:d3:70:61:6d:
         58:ed:c3:3e:42:1e:b1:66:3c:95:3f:35:1a:38:b2:62:29:88:
         ce:da:73:23:56:63:30:f6:32:6a:51:84:b1:6f:93:b4:d5:a6:
         2a:e3:82:2c:52:89:de:ba:8f:9a:eb:cc:f8:4e:23:01:53:5b:
         6b:2d:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:56:42 2025 by rpki-client