Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
File:                     a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa (raw, json)
Hash identifier:          ErtEmtrXZXIXGtnAKZn7A4hS6BNtqq1fpgO+7xdk5IQ=
Subject key identifier:   B3:5E:7E:73:A4:C6:5D:5C:51:B9:EB:96:A3:A8:F1:9A:68:C1:B7:98
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849028F7D0B2A039FED0DC72500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa
Signing time:             Wed 26 Feb 2025 10:54:33 +0000
ROA not before:           Wed 26 Feb 2025 10:54:33 +0000
ROA not after:            Tue 27 May 2025 09:54:33 +0000
asID:                     30036
IP address blocks:        104.201.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:8f:7d:0b:2a:03:9f:ed:0d:c7:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 10:54:33 2025 GMT
            Not After : May 27 09:54:33 2025 GMT
        Subject: CN=a2c03a0a-c778-428e-a319-1ef188d1dcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:37:4e:95:e9:d6:34:cc:33:24:f5:ed:c0:
                    c1:41:96:b0:3f:d8:27:ef:f9:fd:67:ec:1b:22:3d:
                    16:0d:0d:2b:f6:55:3d:3f:b5:fa:24:30:a3:bf:85:
                    38:29:03:14:fa:b2:04:d8:1e:a1:65:96:88:d9:d3:
                    36:cc:d4:6e:e7:47:cb:56:f1:c3:21:e5:52:3f:a0:
                    04:9f:03:bb:da:ab:0c:99:03:22:b0:50:2b:54:d0:
                    a3:59:3d:3d:f6:92:84:8d:c2:3f:81:56:67:c3:45:
                    bf:a4:cc:5d:15:f2:65:61:54:30:d1:da:44:a7:a1:
                    22:0b:02:d4:a0:42:7a:51:9f:cf:41:e1:ac:f5:83:
                    18:9a:cb:23:96:d8:68:d0:a6:9f:de:16:a8:15:e3:
                    4e:ed:4d:66:26:19:39:7c:c8:76:91:41:2f:a9:82:
                    90:42:75:91:52:60:b3:b6:79:6a:bc:17:b5:ab:f4:
                    24:59:3e:41:c0:be:2d:1e:d1:b1:6f:15:d1:23:17:
                    03:88:c8:b5:cf:fe:ec:fb:2c:db:c3:71:0d:a2:85:
                    7f:69:2a:71:ae:15:7e:2d:e0:5d:55:32:fb:c0:e8:
                    02:fc:ac:65:33:a9:3c:f8:5b:6b:da:11:6d:0d:e7:
                    04:30:0b:f4:42:f0:2b:d3:a1:a9:e9:8e:b9:fe:1f:
                    e6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:7E:73:A4:C6:5D:5C:51:B9:EB:96:A3:A8:F1:9A:68:C1:B7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:17:b7:92:42:9d:0c:4b:10:fd:c7:93:db:0c:a1:c4:d9:
         1a:cd:87:0b:e1:28:4f:8d:23:5e:29:e8:c9:a2:2e:e8:26:64:
         d6:b8:82:1b:68:8a:9a:0a:00:ba:0c:9a:6f:b8:fb:b6:0e:fc:
         ff:04:26:6b:4d:08:7e:54:1a:1d:91:0d:5e:ac:d0:8f:33:0f:
         fc:22:36:2f:15:d1:13:a2:fc:bd:52:39:6a:ca:80:05:04:9f:
         3f:ac:90:cb:5d:64:b4:b1:98:8f:6c:d3:51:3a:46:a9:b6:21:
         e1:1b:1d:ed:f9:7c:e7:ed:0e:f7:86:2d:90:c7:1d:0f:6b:84:
         04:39:85:2a:3b:be:fc:d3:af:8c:f2:e9:67:4e:65:2b:11:77:
         29:ee:2f:3d:f1:f7:93:61:19:dd:3d:14:5c:58:d3:85:29:f1:
         7f:21:79:6d:10:d7:65:94:64:42:0e:c3:72:e1:05:5e:28:ca:
         47:93:96:8f:a1:da:2b:bf:f9:86:42:c9:20:9e:e6:94:2f:f2:
         e2:f0:cd:eb:50:26:28:7a:e4:f9:6d:68:77:c1:22:2f:e9:9d:
         9c:56:ee:5b:b8:ab:ef:32:28:9a:f5:48:f4:b6:09:fb:f3:34:
         d3:ab:62:f8:75:cf:51:74:ff:0a:c0:01:8a:9f:1c:0e:b9:1e:
         47:82:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:55:57 2025 by rpki-client