Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fb8a922-e552-3825-b185-2c8d81d78c46.roa
File:                     1fb8a922-e552-3825-b185-2c8d81d78c46.roa (raw, json)
Hash identifier:          I4z2L2Ubkx7vB4zC1VwPVHoTB/1ut7AUXXDdJDHpdtk=
Subject key identifier:   2B:0A:01:80:5D:A1:49:16:A1:42:4D:83:DE:E6:8F:71:60:60:D6:95
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BB19260FD2AE4151ECA03EE80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fb8a922-e552-3825-b185-2c8d81d78c46.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        108.178.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:60:fd:2a:e4:15:1e:ca:03:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=d005c2d0-da99-4376-b6b7-f41078425bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:3e:01:81:dd:1a:55:3e:b5:a1:44:51:fd:
                    8e:6b:b3:9e:f2:f5:d4:42:9f:02:59:11:4e:dc:e2:
                    32:39:a7:52:ff:14:b7:6e:85:ca:bd:aa:c9:43:e4:
                    17:7c:0a:8b:c1:b2:72:ae:02:80:a1:0f:6c:2e:24:
                    3e:2a:b1:61:27:37:96:d4:8d:6f:b9:4a:2c:6c:47:
                    8f:c8:b8:14:c2:92:9b:ac:b0:ca:4e:33:67:f4:ee:
                    ca:54:6a:2c:f2:7c:53:8d:4f:84:ab:2f:0f:09:9b:
                    eb:2c:0a:5f:41:54:1a:69:8a:d5:b0:d2:54:c9:99:
                    68:ad:33:cb:84:0f:ab:3e:88:b1:87:b3:3c:7e:87:
                    f4:62:4e:44:47:70:01:c0:9a:0b:63:aa:0f:f1:ac:
                    ee:25:db:18:1d:15:b7:a2:8a:e4:e5:35:36:14:f0:
                    cf:d6:4d:81:0c:16:26:99:87:08:6d:df:b4:e7:e8:
                    d6:e2:9d:74:ae:b4:b7:9b:54:cd:08:3a:f7:88:c7:
                    a6:01:7c:47:8c:21:a2:a5:b2:f4:1a:17:6d:42:ac:
                    74:7b:e9:20:54:ed:b7:73:56:09:46:66:92:3b:6b:
                    2f:ad:e4:74:b4:2a:cd:e5:02:65:ff:20:46:e7:73:
                    83:2f:ed:10:19:f5:bd:38:28:ad:84:fe:5e:13:02:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0A:01:80:5D:A1:49:16:A1:42:4D:83:DE:E6:8F:71:60:60:D6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fb8a922-e552-3825-b185-2c8d81d78c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:01:55:a1:33:91:27:a3:a4:0f:e5:f3:00:35:4a:4f:ef:71:
         fb:63:1d:f4:2a:55:4c:9e:a3:aa:d9:13:14:bd:87:e6:91:ee:
         8f:ed:62:c0:77:38:b0:52:f0:96:0b:c0:cd:ce:2d:29:42:f0:
         89:b3:0a:fc:2d:5b:1f:3f:97:5e:3a:b5:d0:65:90:49:03:2a:
         d2:39:6b:d1:1d:7d:84:5b:be:06:9a:89:2e:2b:a6:ec:73:2b:
         a5:a4:46:e0:72:b3:19:c4:a1:d5:4c:1c:1b:83:b5:c9:44:ac:
         75:b9:1a:cd:8c:71:3d:46:11:2d:2e:e9:2d:f4:56:d1:26:5b:
         86:5a:38:81:61:5c:23:7c:99:19:d8:f7:e1:20:2d:ee:ba:99:
         12:53:96:31:f3:60:24:10:66:59:c7:c8:13:0c:cf:c2:fc:4c:
         6f:0e:3b:a1:67:75:90:2d:ac:99:45:d2:1a:45:b8:47:20:a9:
         2b:1a:48:5f:19:fa:2d:e9:58:63:f0:e5:8a:f2:f9:85:b2:84:
         67:92:89:e0:2c:77:94:2e:2a:9c:c7:1f:1d:3f:17:d2:76:18:
         c4:28:43:5e:89:e2:ae:21:36:bf:4d:ee:73:10:9c:76:66:28:
         64:39:3b:29:ce:b0:2e:f6:6f:ed:0b:64:d1:bf:c6:b6:0d:a0:
         1b:6e:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:27:29 2025 by rpki-client