Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/251276b4-3167-3579-af00-cc9a0495d8ba.roa
File:                     251276b4-3167-3579-af00-cc9a0495d8ba.roa (raw, json)
Hash identifier:          lMSRg4sF0TCjsixdTlRjOr1dj2issyXXIg8pfiTig/8=
Subject key identifier:   C9:80:F3:B1:7D:4B:71:09:15:C8:69:39:89:94:72:3F:5A:FC:75:B7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C9106E60C5EBCC6AB1597F880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/251276b4-3167-3579-af00-cc9a0495d8ba.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:06:e6:0c:5e:bc:c6:ab:15:97:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=c2f7630c-8fb7-4f7e-ad09-1911e1462ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:24:f9:54:56:e4:09:15:1b:91:c7:67:19:
                    7c:8c:41:23:25:80:ba:a6:7e:06:25:76:a0:2e:2a:
                    fd:7e:2f:26:cd:04:9d:36:0d:ad:9c:39:e1:cf:7e:
                    09:56:be:b3:af:d3:ec:c4:b1:01:85:76:63:7b:bb:
                    8b:23:f7:1e:31:30:4b:60:cf:d1:c7:aa:92:91:4b:
                    61:e3:56:b7:9f:9c:37:41:e0:5c:a3:48:ac:40:81:
                    d7:03:96:4b:3c:37:ce:b6:66:e7:57:5b:56:8e:b2:
                    14:a1:c6:ec:6b:8e:9d:d4:d2:9e:72:cc:a6:3b:20:
                    b2:f0:63:71:7a:83:4c:49:f6:6c:47:9c:66:af:bf:
                    0f:fd:e7:9f:d1:f4:5a:75:19:4c:cc:fa:d9:49:38:
                    fd:7e:73:aa:63:96:5b:0e:6b:e6:6a:92:1a:d3:97:
                    ca:4d:b2:8e:0e:4c:2b:7e:79:32:43:50:86:3d:d9:
                    28:57:98:72:09:45:99:32:12:0f:55:3b:fb:24:d4:
                    21:43:4c:d2:67:31:ee:d7:07:30:0c:f8:5a:df:5c:
                    ba:a4:2c:fd:4f:8f:3c:8b:50:dc:e0:db:f6:53:99:
                    30:b3:5b:04:3b:2a:d1:a3:cf:5c:59:76:9b:07:1c:
                    39:5b:f9:da:11:56:cb:a5:76:cc:2c:83:a3:0c:93:
                    af:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:F3:B1:7D:4B:71:09:15:C8:69:39:89:94:72:3F:5A:FC:75:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/251276b4-3167-3579-af00-cc9a0495d8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:55:80:02:53:97:3a:3a:4e:ff:02:09:41:ec:d5:ac:68:6a:
         33:a0:68:bf:7c:13:fe:22:47:48:54:21:d9:af:42:fa:68:46:
         a5:10:55:7c:f8:d4:13:06:62:3d:3b:4a:d2:f6:e1:4c:26:0d:
         d8:2a:35:a3:57:0d:ff:8d:76:62:34:71:dd:75:90:1f:8b:7c:
         31:24:c5:f2:69:56:e0:5e:2c:83:46:97:3f:ed:d7:33:5e:ca:
         84:15:ec:ee:1b:d2:30:c4:18:f0:d7:ff:ab:d1:1a:8b:e2:0d:
         42:bf:3c:b1:7c:2e:06:e7:35:8a:89:00:8f:d0:9e:b0:ac:46:
         d2:38:9c:99:85:5f:e1:99:02:bb:10:a9:67:ec:01:b8:d9:52:
         aa:ba:56:71:3c:68:f8:18:96:a5:c9:d8:be:f7:7f:e4:cf:54:
         6d:c8:0a:83:01:18:65:3e:81:02:7f:8c:93:03:10:4b:c0:28:
         5a:b1:2f:11:d6:11:85:de:d7:b4:99:30:5d:34:72:75:35:33:
         01:e7:ec:6f:e4:0e:99:af:4a:e8:2a:e8:b4:5e:0a:8b:f4:d0:
         0f:6a:42:97:95:0d:0c:12:a2:63:4f:5d:47:f9:29:ee:8b:94:
         77:8d:05:4d:1d:cd:05:28:f0:21:46:0c:a2:5a:31:60:02:98:
         07:63:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:02 2026 by rpki-client