Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa
File:                     39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa (raw, json)
Hash identifier:          0Gy7kkOAbuIjzq3x2qXggUUej/pjm1agzKXXtjuTiSc=
Subject key identifier:   9A:3A:1B:D3:54:44:47:40:17:82:10:77:C6:2B:B0:E6:8F:E5:50:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C910706E0885905CEDFF29540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:07:06:e0:88:59:05:ce:df:f2:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=83fef53e-7bc3-4539-914d-a78aa5a217ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:f5:5c:bb:d2:da:cf:8e:da:f6:45:1a:fd:
                    f9:68:db:c9:46:e2:0f:02:83:01:ad:e4:9e:04:8d:
                    6d:86:e8:e2:ef:7b:06:e3:0f:c1:f2:ee:71:90:67:
                    44:22:86:ce:94:52:e9:c4:db:a2:54:0f:36:c6:ce:
                    3e:21:ca:1b:da:04:2a:9c:10:10:b5:3b:57:86:07:
                    dd:52:61:9d:55:d1:1f:b6:d2:f3:ab:ea:2c:e9:df:
                    59:84:df:16:9f:6b:b5:88:be:8e:77:c0:fc:73:84:
                    f9:f5:2c:09:bb:57:a3:19:d3:34:f1:d7:e0:d9:00:
                    1c:6d:d1:ad:f9:c6:18:47:1d:31:61:66:b8:01:30:
                    cc:93:2f:a0:9b:bc:14:67:18:e1:57:c5:96:7f:f3:
                    29:ee:a7:53:1d:51:35:22:de:cd:5e:79:c7:29:65:
                    c9:a9:ca:c0:56:e3:71:17:e5:00:58:c4:61:ae:49:
                    3c:ff:6c:cf:d5:1c:28:45:c6:50:08:85:4c:eb:06:
                    3f:5d:fc:f9:8a:7b:58:de:3d:30:80:a2:18:c8:02:
                    32:aa:15:28:e2:5c:ed:b6:96:48:58:99:67:a9:61:
                    aa:e4:5c:d0:b1:7d:7b:4e:64:67:3b:69:5f:6b:db:
                    cb:9a:b9:01:e1:f0:4c:23:db:e7:c3:ed:fc:3a:ef:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3A:1B:D3:54:44:47:40:17:82:10:77:C6:2B:B0:E6:8F:E5:50:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:30:38:06:2b:61:1e:f7:41:ff:60:a6:38:cc:dd:4b:b8:
         5f:9b:2a:bf:cc:3e:97:65:5e:d1:46:b5:dd:44:63:fc:1c:0d:
         ba:b1:57:82:88:59:d8:6a:7b:7e:2b:de:35:70:70:e9:0f:9c:
         51:05:2b:47:24:a7:73:ba:d2:57:03:25:e1:56:da:b3:04:84:
         cc:8f:cc:05:ac:75:f4:d3:48:bc:9d:c6:8e:a4:2a:0f:3a:c2:
         06:d1:a9:b2:be:ee:11:08:af:4d:28:a7:ae:ad:fc:7a:b8:0b:
         29:31:2b:68:a4:b4:03:fa:0c:c9:50:0e:18:f1:b5:19:16:64:
         f9:19:77:3c:57:45:97:54:5e:16:03:be:ae:f0:f9:ea:bc:0f:
         5b:df:85:2a:b5:65:a1:e3:84:b8:67:a4:27:0d:26:95:95:ef:
         5c:cc:3e:27:be:35:2d:fe:50:f2:34:cf:ad:28:38:38:e1:96:
         ae:4a:c6:e4:a7:7c:a3:18:f0:41:f4:71:68:fc:3c:be:d7:ab:
         a6:8c:1c:10:ea:9b:b6:f5:93:97:c4:6c:8a:fe:d3:ed:28:44:
         31:94:a9:06:c8:b6:9d:10:18:09:e0:11:56:dc:d0:d8:98:3c:
         6d:fa:e4:29:2a:8d:c7:51:7e:77:cb:c6:29:06:8a:11:d4:a2:
         bd:b3:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:17 2026 by rpki-client