Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/213d6a61-8b91-33ba-a95d-12f8c0bdc145.roa
File:                     213d6a61-8b91-33ba-a95d-12f8c0bdc145.roa (raw, json)
Hash identifier:          OY3EAFqb4VRc+zbqmwBkEXiedLN1JgXMEWiRC0nQTKw=
Subject key identifier:   30:AC:DE:EF:34:8B:51:E2:2E:30:D7:17:7D:DB:38:E1:AC:27:A8:2F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C9106E570C94D96A689C63B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/213d6a61-8b91-33ba-a95d-12f8c0bdc145.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:06:e5:70:c9:4d:96:a6:89:c6:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=b24ac36b-67a0-46c8-bdfa-24c046770afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:40:1a:2f:f6:c4:af:ea:40:52:f1:ae:af:
                    5a:cc:ea:47:63:cd:af:16:13:f8:d2:6a:9d:96:3e:
                    a2:83:b4:b9:b4:0c:ec:59:95:f9:9e:e5:74:bb:4e:
                    c0:68:56:89:fe:26:97:86:97:28:28:19:bb:a4:07:
                    76:a5:2d:6a:7e:8a:d1:46:b1:93:84:cb:74:d0:5f:
                    da:1f:80:63:d9:8f:14:89:44:e1:e9:9b:fd:c4:0d:
                    eb:f9:b2:29:1e:11:b3:24:cb:09:1f:ba:09:a2:45:
                    58:2a:de:87:b3:e8:c2:73:c1:f1:28:38:a8:bc:10:
                    b0:a3:f9:7f:53:29:06:46:5a:69:82:c1:4a:cb:61:
                    11:4d:87:bb:10:b3:13:87:5d:fe:64:9a:71:71:28:
                    bf:68:ca:0f:cf:52:19:ca:6b:cf:77:a4:48:43:f1:
                    22:5d:1c:81:e6:16:95:97:db:8c:45:d8:a1:f4:de:
                    40:85:2f:ec:08:0a:86:d7:bd:e5:e8:e1:b5:04:e1:
                    56:76:05:35:be:f8:d9:1e:fe:56:e0:96:aa:e7:0d:
                    49:93:e1:b5:f0:aa:1e:7a:65:e0:c6:70:ff:ab:d6:
                    fb:0d:38:3c:78:88:8e:41:cc:04:a4:97:04:59:aa:
                    88:f5:71:94:93:22:94:9a:d6:63:54:46:c7:44:46:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:DE:EF:34:8B:51:E2:2E:30:D7:17:7D:DB:38:E1:AC:27:A8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/213d6a61-8b91-33ba-a95d-12f8c0bdc145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:72:19:bb:2c:f5:02:44:e0:bf:b8:19:50:b8:4a:96:1e:0c:
         ff:72:b7:45:75:b1:13:e6:85:b9:db:b0:6a:9a:ff:23:62:d6:
         51:fe:ab:6a:9e:14:68:3c:9e:76:ab:46:f8:77:49:a5:a7:e5:
         fb:18:09:76:43:e6:30:8d:69:21:ff:cd:0d:ba:82:a0:5c:7d:
         b6:50:6d:ee:d0:28:92:d5:70:60:14:68:a8:48:b6:4d:36:20:
         93:b7:3d:bf:46:26:8e:29:ec:cb:c1:9c:0a:20:d7:2c:1b:ad:
         c4:5f:b5:fb:b9:b4:77:ae:1f:03:39:7e:d2:d8:7b:09:e9:88:
         ca:ab:a0:f7:05:de:c4:4f:4b:a6:ad:87:df:bc:81:9c:a8:95:
         63:d2:52:9f:ee:52:85:c0:57:e8:54:d9:0e:fd:cf:ab:97:0b:
         22:30:7b:ad:54:e7:11:ab:b0:79:55:82:6c:56:b1:c3:ef:88:
         66:a5:1d:f8:a9:b3:ca:68:c8:40:e7:7a:9e:a8:50:a5:83:be:
         b2:c9:bf:57:31:59:c8:71:18:d1:6c:1c:8a:9f:11:00:be:4b:
         f7:9c:15:ee:c2:0c:a2:7b:82:88:cc:16:fc:b3:8f:70:7b:da:
         33:24:39:ce:11:9a:ba:f5:b4:e3:b7:dc:bb:01:21:3d:bc:00:
         50:87:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:27 2026 by rpki-client