Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2756d690-5916-3770-a8df-c64d94136268.roa
File:                     2756d690-5916-3770-a8df-c64d94136268.roa (raw, json)
Hash identifier:          a1dLkoDF6yfIZcPvI8TskE48EtDf/7fn9FBXeLhKr4o=
Subject key identifier:   8F:3B:8E:CC:28:8C:1E:3E:3B:7C:8E:9E:36:0A:B6:ED:E4:90:C3:5D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D71A5267235327E054AB514C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2756d690-5916-3770-a8df-c64d94136268.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        108.178.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:26:72:35:32:7e:05:4a:b5:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=fef11ea7-4fcb-4717-bb2d-15cbf4ad12e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:72:7c:b5:31:c3:59:9c:a1:0a:a3:f4:6a:
                    3c:24:b4:cd:cb:5c:ec:f7:45:58:c0:0a:90:5c:c4:
                    51:bf:f5:1d:7e:8d:3b:09:bd:b4:13:10:5f:d9:25:
                    a9:b3:a1:e9:e4:55:c4:a7:d6:54:bb:95:87:3e:ae:
                    dd:23:29:a8:76:cd:41:1f:b0:d4:87:cb:85:df:b6:
                    b6:e1:02:30:61:c4:64:b1:25:e1:9c:ce:68:52:94:
                    17:bb:ad:24:07:2d:3d:4f:da:d1:c5:28:5d:3e:19:
                    0a:3e:60:62:ec:1c:90:06:01:a5:2f:1b:52:76:e2:
                    77:6e:b8:c1:b6:dd:ac:de:16:04:71:14:bf:1e:0b:
                    4f:20:50:e1:3a:de:1f:bf:a2:50:bc:c7:b3:ff:91:
                    69:dc:53:aa:b3:00:68:b1:08:d4:b2:5a:18:49:73:
                    51:50:00:e7:22:6f:4d:61:91:37:1a:0a:5a:ca:a9:
                    d6:5a:ba:cf:c0:c3:31:6e:2f:2c:e2:e9:ad:51:5b:
                    29:50:62:d7:27:d7:9b:88:35:14:55:66:1d:ca:e8:
                    7a:e4:59:08:b6:17:6b:bc:fa:cf:bd:e1:9d:6b:5d:
                    56:f0:0b:36:a4:a5:ae:b6:58:95:32:8d:fa:9c:dc:
                    c2:6e:2a:09:73:2b:36:1f:c2:ee:84:fb:ab:17:87:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3B:8E:CC:28:8C:1E:3E:3B:7C:8E:9E:36:0A:B6:ED:E4:90:C3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2756d690-5916-3770-a8df-c64d94136268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:dc:44:8d:80:1f:c0:00:c1:f2:72:a8:68:ea:d7:28:73:
         da:8a:4f:86:4c:7c:c5:12:39:88:8c:83:de:2a:9a:d1:3d:9b:
         77:2d:b4:a9:84:1a:9e:1a:03:ed:7d:70:55:26:11:0a:54:f1:
         a5:03:f0:bb:1f:f1:4d:9d:fc:5d:23:88:73:ac:e1:d0:a1:48:
         1e:3e:04:50:ab:44:79:72:07:66:b3:b3:9b:7f:de:60:67:10:
         3a:d1:4c:3e:5a:17:e5:c2:37:4c:37:2e:bd:ae:59:9a:a6:72:
         92:1e:3f:5a:9a:a6:ca:8e:da:d8:3d:5e:cc:96:a9:4b:74:89:
         dd:26:ea:64:d5:31:cd:80:2a:d3:a9:58:4e:09:0b:f5:4e:43:
         c0:3a:f7:1f:39:62:18:7b:f5:98:5f:31:a0:33:7f:00:41:3e:
         05:77:4d:d8:85:5c:60:5d:15:2c:08:db:ff:c2:0f:14:b0:bc:
         f3:67:63:9b:1c:a5:5d:0c:45:2d:93:05:a2:07:06:b0:74:9b:
         6b:8d:4a:36:1d:63:f3:76:99:f2:81:c0:a0:0d:79:ff:33:28:
         37:78:9f:70:0a:50:f2:cb:5b:f0:44:d6:45:db:c7:7a:f9:ba:
         f3:e0:72:9d:92:c2:87:a1:3c:8a:d6:e6:64:c9:46:4c:45:b6:
         c9:13:d8:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSZyNTJ+BUq1FMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk
ZmVmMTFlYTctNGZjYi00NzE3LWJiMmQtMTVjYmY0YWQxMmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA159yfLUxw1mcoQqj9Go8JLTNy1zs90VYwAqQ
XMRRv/Udfo07Cb20ExBf2SWps6Hp5FXEp9ZUu5WHPq7dIymods1BH7DUh8uF37a2
4QIwYcRksSXhnM5oUpQXu60kBy09T9rRxShdPhkKPmBi7ByQBgGlLxtSduJ3brjB
tt2s3hYEcRS/HgtPIFDhOt4fv6JQvMez/5Fp3FOqswBosQjUsloYSXNRUADnIm9N
YZE3GgpayqnWWrrPwMMxbi8s4umtUVspUGLXJ9ebiDUUVWYdyuh65FkIthdrvPrP
veGda11W8As2pKWutliVMo36nNzCbioJcys2H8LuhPurF4erPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI87jswojB4+O3yOnjYKtu3kkMNdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjc1NmQ2OTAtNTkxNi0z
NzcwLWE4ZGYtYzY0ZDk0MTM2MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzo3ESNgB/AAMHycqho6tcoc9qKT4ZMfMUSOYiMg94qmtE9m3cttKmE
Gp4aA+19cFUmEQpU8aUD8Lsf8U2d/F0jiHOs4dChSB4+BFCrRHlyB2azs5t/3mBn
EDrRTD5aF+XCN0w3Lr2uWZqmcpIeP1qapsqO2tg9XsyWqUt0id0m6mTVMc2AKtOp
WE4JC/VOQ8A69x85Yhh79ZhfMaAzfwBBPgV3TdiFXGBdFSwI2//CDxSwvPNnY5sc
pV0MRS2TBaIHBrB0m2uNSjYdY/N2mfKBwKANef8zKDd4n3AKUPLLW/BE1kXbx3r5
uvPgcp2SwoehPIrW5mTJRkxFtskT2EU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:34:09 2026 by rpki-client