Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4479f573-4aac-376c-96f0-93dc722ed614.roa
File:                     4479f573-4aac-376c-96f0-93dc722ed614.roa (raw, json)
Hash identifier:          4ye0HeIeAmSvE1PM4767iHjxIe75Bb3WPi6QBaco8Jg=
Subject key identifier:   17:C7:04:A9:DF:6B:82:57:08:4F:CD:6A:79:6A:BE:21:45:A1:77:5F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C9106E4669354778B4CB3EBA0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4479f573-4aac-376c-96f0-93dc722ed614.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:06:e4:66:93:54:77:8b:4c:b3:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=cebbce6c-19c8-403f-9954-4003cf32a598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:0d:26:0e:88:22:b6:18:d4:e0:5d:68:61:
                    d5:a5:07:b2:bb:92:3c:83:a3:dc:b7:99:af:be:a1:
                    5d:eb:fd:8b:c5:26:a0:a6:91:42:05:39:04:f2:c1:
                    1b:dc:36:b7:56:ea:26:69:87:95:66:d0:a7:cc:5f:
                    d3:24:28:54:7c:dd:06:6a:67:fb:0d:a9:08:b7:31:
                    11:55:ed:0a:77:97:72:ca:ec:f3:54:da:2c:97:b9:
                    68:d3:bb:e1:30:cd:dd:53:14:ac:5d:99:9b:3e:0c:
                    1b:f9:19:aa:2d:02:7d:66:42:33:56:ba:82:f7:2b:
                    59:23:cd:a4:f7:4c:c1:71:38:da:35:da:77:a1:44:
                    11:e5:51:b8:6e:47:80:d4:32:d6:13:93:e8:12:c2:
                    a2:51:fe:e9:c0:ef:c4:b3:4c:cf:d4:a0:db:89:ee:
                    bd:19:36:19:e4:bc:b2:e9:04:33:25:d4:dd:f3:54:
                    99:84:2e:5c:1b:08:a6:08:3f:68:b3:37:ca:4c:b2:
                    79:9b:df:e5:7d:1a:a0:52:92:77:ee:3f:fe:4f:f1:
                    90:c7:53:bc:c1:1e:70:f5:0f:a2:40:7c:bd:74:6a:
                    e6:9a:03:03:64:aa:a1:2f:4e:30:f4:c8:3e:ef:dc:
                    18:ce:91:75:2e:e9:3d:de:6c:fa:2d:c1:4a:ba:f8:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:04:A9:DF:6B:82:57:08:4F:CD:6A:79:6A:BE:21:45:A1:77:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4479f573-4aac-376c-96f0-93dc722ed614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:cc:ba:a5:b7:e2:54:21:7b:d3:8d:73:b2:20:97:11:d4:
         b8:6a:e5:1a:ff:6e:ae:58:f8:7f:88:05:bb:37:94:9f:a3:05:
         59:31:db:ac:a6:bf:22:43:1c:73:7e:49:6d:39:bc:64:94:31:
         11:ff:15:29:46:f3:5c:b5:2a:35:72:4e:ef:cd:8c:d9:78:9a:
         e3:b7:86:cd:06:fa:0f:68:53:83:22:c8:a3:4a:d5:99:08:23:
         c0:84:d3:d0:22:f3:5c:48:60:5c:36:92:d1:e2:54:d6:7b:0d:
         61:e9:5f:64:be:b5:90:fb:37:7d:ec:1a:cc:2b:b7:96:ef:7b:
         1e:37:02:b1:b1:28:44:8a:fc:9e:7f:78:75:c9:df:19:47:02:
         f3:a4:9d:9c:d1:40:97:97:c3:c5:f5:7e:fd:7d:ee:81:b6:9a:
         47:67:f6:94:77:99:29:91:55:d5:e1:bf:ba:27:4b:36:3e:af:
         11:fd:57:3f:ba:d5:d3:9e:70:f6:71:98:34:57:1c:d5:3b:87:
         84:aa:fa:f9:31:65:30:c7:50:8a:3a:7c:04:5b:f6:44:33:85:
         80:ab:82:a9:b8:0c:23:22:cd:0e:d3:c5:dc:b0:90:75:08:e8:
         37:64:cf:c6:c7:51:1a:f2:20:72:88:cd:d8:ee:fb:8e:47:55:
         ea:de:06:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBuRmk1R3i0yz66AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk
Y2ViYmNlNmMtMTljOC00MDNmLTk5NTQtNDAwM2NmMzJhNTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+YNJg6IIrYY1OBdaGHVpQeyu5I8g6Pct5mv
vqFd6/2LxSagppFCBTkE8sEb3Da3VuomaYeVZtCnzF/TJChUfN0Gamf7DakItzER
Ve0Kd5dyyuzzVNosl7lo07vhMM3dUxSsXZmbPgwb+RmqLQJ9ZkIzVrqC9ytZI82k
90zBcTjaNdp3oUQR5VG4bkeA1DLWE5PoEsKiUf7pwO/Es0zP1KDbie69GTYZ5Lyy
6QQzJdTd81SZhC5cGwimCD9oszfKTLJ5m9/lfRqgUpJ37j/+T/GQx1O8wR5w9Q+i
QHy9dGrmmgMDZKqhL04w9Mg+79wYzpF1Luk93mz6LcFKuvhoawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfHBKnfa4JXCE/NanlqviFFoXdfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDQ3OWY1NzMtNGFhYy0z
NzZjLTk2ZjAtOTNkYzcyMmVkNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExTzLqlt+JUIXvTjXOyIJcR1Lhq5Rr/bq5Y+H+IBbs3lJ+jBVkx26ym
vyJDHHN+SW05vGSUMRH/FSlG81y1KjVyTu/NjNl4muO3hs0G+g9oU4MiyKNK1ZkI
I8CE09Ai81xIYFw2ktHiVNZ7DWHpX2S+tZD7N33sGswrt5bvex43ArGxKESK/J5/
eHXJ3xlHAvOknZzRQJeXw8X1fv197oG2mkdn9pR3mSmRVdXhv7onSzY+rxH9Vz+6
1dOecPZxmDRXHNU7h4Sq+vkxZTDHUIo6fARb9kQzhYCrgqm4DCMizQ7TxdywkHUI
6Ddkz8bHURryIHKIzdju+45HVereBrA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:32 2026 by rpki-client