Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fb8a922-e552-3825-b185-2c8d81d78c46.roa
File:                     1fb8a922-e552-3825-b185-2c8d81d78c46.roa (raw, json)
Hash identifier:          nJ/qx1hRy8zUdeiK31U+cdrAOS1uYMlAE2yjzuVCzbU=
Subject key identifier:   31:FD:4B:FD:57:44:53:45:F2:E0:91:3E:00:D5:A4:9E:DF:24:4F:BE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EF44CB24A6E6BF81376703B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fb8a922-e552-3825-b185-2c8d81d78c46.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        108.178.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:b2:4a:6e:6b:f8:13:76:70:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=57ed58d4-2daf-420d-8758-4d9e997d0d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:c4:86:b1:09:e5:7b:bf:fb:26:f3:39:fc:
                    e2:c1:98:2e:03:65:59:dd:50:b5:3e:a0:1f:01:59:
                    35:e1:59:26:7d:38:8f:60:45:74:c9:b1:f5:90:e6:
                    eb:a4:a2:34:cf:11:5b:97:41:5d:4d:0b:53:b9:63:
                    dc:e4:32:90:fc:59:3b:42:a5:f3:b7:4d:3e:05:cf:
                    b5:79:d4:1a:af:63:b0:36:68:fb:88:2c:74:fe:2c:
                    fe:06:66:bb:c0:b4:ce:23:8a:71:41:f6:da:e7:81:
                    12:8d:8d:09:68:08:fa:c6:bc:10:37:51:3d:0e:de:
                    3b:0c:cf:6f:d6:b0:4e:b8:4a:2b:5b:d6:a5:d7:49:
                    e7:00:d6:15:c2:24:c9:1c:3c:87:1e:fc:cb:cc:68:
                    77:92:f6:da:5b:c8:96:e1:aa:83:de:55:d1:f8:35:
                    b3:0b:02:01:50:05:d0:84:70:0e:e5:3f:9b:d6:b1:
                    1c:3e:10:92:43:25:95:6b:44:ca:e8:ec:e7:30:d4:
                    08:27:dd:b2:10:ed:84:30:1f:58:e0:60:06:89:54:
                    a1:94:4d:59:d4:db:80:e7:3b:cc:98:87:60:06:cd:
                    a9:cc:66:4f:70:7d:6a:f4:42:c7:7a:db:70:03:df:
                    2c:2b:1c:8b:77:af:b7:05:63:ee:c7:ea:15:fe:ea:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:4B:FD:57:44:53:45:F2:E0:91:3E:00:D5:A4:9E:DF:24:4F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fb8a922-e552-3825-b185-2c8d81d78c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:69:33:7d:8e:1b:9b:ea:40:06:1e:24:26:fb:88:78:ba:
         72:c9:08:c7:a2:f9:f1:b6:14:34:b0:fc:e2:a6:bc:04:c1:88:
         9e:68:2d:83:fd:d2:25:71:59:81:41:4c:a1:3f:56:7a:c7:0c:
         4c:9b:39:7c:a0:17:df:e1:e6:b6:16:8f:4c:f3:52:b4:b3:f5:
         11:6b:56:59:6b:e7:36:92:f5:88:b8:0c:ae:17:6b:df:57:3b:
         07:c8:bd:6a:e5:32:86:90:97:2b:0c:7a:59:36:c6:2e:af:37:
         e9:a4:c6:ff:16:b6:d6:45:26:e3:15:38:44:0b:8b:3d:a9:91:
         a2:4f:a3:9f:24:a4:27:24:fd:f0:2f:b2:15:76:84:0c:39:c6:
         f6:45:f5:81:68:96:45:96:5a:8e:c7:4f:18:14:cb:56:2f:95:
         c3:45:0f:d8:4c:d2:65:6b:59:b8:41:00:fb:83:25:88:41:d0:
         4d:6f:b2:f1:49:bf:6c:5f:0b:8c:84:67:02:a1:86:3a:ed:16:
         3b:fd:53:c4:79:84:aa:ff:e4:cb:0e:8c:81:aa:9f:bb:0f:c6:
         f1:75:5d:9f:e2:a0:c2:74:5e:25:0d:e6:90:da:1b:b1:6f:48:
         36:80:3e:4a:cc:30:8d:46:f6:a6:c4:00:02:5c:a9:82:7f:c6:
         a3:42:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:06:31 2026 by rpki-client