Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ebb701e-5a8c-38b6-82b0-4ffc34459c44.roa
File:                     3ebb701e-5a8c-38b6-82b0-4ffc34459c44.roa (raw, json)
Hash identifier:          aW+rG5KeuGBDDcLgnb8tW9E5xzZWrQoHRJDms7PvQeI=
Subject key identifier:   FE:FF:04:06:0B:BA:B1:58:C9:7A:1A:AC:4B:C5:21:AF:E9:AA:5E:DF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BB1925BAF359EB5485392BA00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ebb701e-5a8c-38b6-82b0-4ffc34459c44.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        108.178.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:5b:af:35:9e:b5:48:53:92:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=955cdd84-1a92-4b1b-aafb-9b1f20064c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:ac:5e:d8:bb:28:8c:be:31:49:17:5d:76:
                    e6:76:22:a9:6a:1d:21:51:5e:4f:3a:0b:9d:9b:20:
                    f4:c5:ae:73:5e:31:d0:ef:fd:d8:03:98:5f:40:e2:
                    27:83:82:b9:12:cb:19:c0:4c:29:ba:36:9f:2d:32:
                    83:94:96:0f:ea:21:e1:33:c2:62:45:49:2a:92:d5:
                    9d:21:01:da:9e:67:e4:aa:28:e4:37:b4:32:c0:74:
                    fe:ca:76:3e:9f:3e:f0:34:df:38:22:df:6c:ef:2f:
                    28:cc:a0:56:00:a5:51:f0:b7:1f:d3:4c:78:05:bf:
                    bb:27:93:2f:a2:71:c7:8d:ca:c5:bb:6a:ae:70:9f:
                    41:53:3c:46:7b:91:73:65:5e:6e:74:0f:93:5e:24:
                    64:ab:c9:e3:e0:3d:9c:f8:1c:52:02:8f:1c:64:54:
                    97:8d:1d:cc:0a:db:03:bd:70:a9:d4:ce:90:1b:34:
                    55:f7:0b:0d:8e:f1:8e:64:d1:7c:0a:dd:b8:53:74:
                    a3:f2:83:cf:66:79:a1:66:45:27:df:fb:87:24:de:
                    2a:1f:61:80:3f:24:d4:5e:f8:9f:01:bf:bc:23:2f:
                    b4:73:dd:f9:f9:ce:3b:04:fb:be:d3:bd:c3:63:9a:
                    4d:4b:b0:29:e5:d9:bb:08:66:30:de:8f:ad:c5:de:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:04:06:0B:BA:B1:58:C9:7A:1A:AC:4B:C5:21:AF:E9:AA:5E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3ebb701e-5a8c-38b6-82b0-4ffc34459c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f9:5f:b6:a1:b2:87:83:1b:71:0d:71:2d:c4:08:b6:05:56:
         3e:d9:57:17:29:c5:52:c8:72:46:e2:de:95:14:ab:62:f5:c0:
         60:2d:39:0f:35:10:1f:06:46:03:91:c4:6d:1e:64:f1:3b:03:
         72:09:3c:ba:44:f8:bc:e9:ad:74:2c:13:55:b4:ba:b1:a4:e5:
         e1:28:91:ad:de:bc:2b:37:04:14:be:6f:02:ed:7e:17:36:1b:
         5c:ee:b1:67:1e:36:a7:6e:a7:15:ba:19:e3:da:ff:13:42:c3:
         46:11:0c:59:2b:3a:92:ed:6c:67:f1:3e:18:1d:66:18:72:b9:
         2f:68:0c:53:fe:32:9e:3a:22:80:43:47:73:1d:c8:58:78:1d:
         45:f9:a8:9a:4f:64:66:9a:e8:75:cc:cc:3a:14:82:ff:e0:f0:
         37:20:4e:e4:03:0f:e0:b4:1c:22:65:d4:3d:d2:c8:bf:90:8a:
         91:e0:f9:f9:f6:35:6e:ff:f1:f6:e5:7e:71:15:07:08:aa:71:
         33:12:8a:b5:08:21:8b:68:11:de:b4:45:56:4d:53:dd:f9:4e:
         f5:5f:c3:e6:e0:e2:b5:6e:f5:d3:29:3c:f3:cf:cd:79:e2:c1:
         d2:ef:9e:4c:84:70:19:66:05:f9:2f:71:5c:9c:a3:d4:5f:e9:
         91:a6:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:17 2025 by rpki-client