Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa
File:                     4a5b4829-2d99-3de8-8efe-3261710e92cb.roa (raw, json)
Hash identifier:          9DfKN8mYE++rxA5b5SWXbCz1myB4mev8i7Sp7PPZwS0=
Subject key identifier:   6C:F0:CE:B2:9F:1C:E6:78:3C:50:92:89:08:3F:B2:EE:EF:5F:FA:17
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D71A5281A1E6239F834D3C620
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        108.178.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:28:1a:1e:62:39:f8:34:d3:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=63aa810b-1b00-46be-a3a6-14a8ab19c7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:87:69:80:5c:63:7e:4a:89:cf:2a:c6:16:
                    3f:9a:46:3e:a4:dd:fe:46:3f:98:f5:b3:0e:b2:03:
                    8e:2b:66:ed:5f:9f:cc:c6:e0:02:41:a0:00:56:7a:
                    a5:37:76:8c:57:d3:1a:ac:98:27:13:2a:a6:ae:0a:
                    7f:c6:f2:2c:a3:22:e3:77:aa:4e:2b:07:42:a5:81:
                    38:7a:56:b3:e3:1e:45:cc:16:20:88:c4:77:05:ff:
                    f1:d8:e5:6e:71:ce:2b:11:2e:e2:70:fe:a7:93:e5:
                    f8:29:2b:f5:ed:e2:c0:b3:a8:d7:00:7e:bc:38:4a:
                    a1:f6:ea:6e:a6:9c:26:b3:98:2b:64:f2:ed:ae:3f:
                    56:75:95:11:bd:87:05:e9:f4:8c:24:ed:b1:37:1a:
                    f6:d9:62:d3:05:cf:d9:24:25:8f:ea:60:f2:47:d8:
                    d2:65:ad:af:71:e0:d0:b3:7a:74:8e:d2:07:e7:22:
                    af:37:e9:c1:68:af:3f:87:28:5d:0a:e1:53:1e:bf:
                    9d:f7:8d:13:4b:45:81:20:51:62:d9:63:39:55:11:
                    dc:6f:37:dc:f5:8d:42:96:ad:6d:5b:cf:d5:43:c0:
                    f4:bc:38:23:f8:07:b7:af:54:66:eb:bc:9a:11:5b:
                    89:cd:97:a2:01:2c:7f:2a:5c:2d:74:7f:f8:56:ac:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F0:CE:B2:9F:1C:E6:78:3C:50:92:89:08:3F:B2:EE:EF:5F:FA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:60:03:1b:08:54:d3:35:3f:53:09:e2:c3:fd:6e:ee:76:
         3d:73:90:85:36:41:0d:d1:dd:6a:d9:c5:84:64:31:fd:66:a2:
         75:81:87:27:9e:13:00:5c:71:b0:49:49:8c:fe:22:97:19:7c:
         a8:c0:e5:46:4b:a8:55:f0:45:2f:92:6c:14:80:7d:96:5a:f1:
         f2:22:62:84:51:89:0f:f8:70:73:d8:67:65:eb:33:7e:42:0d:
         54:ba:c0:69:1a:ae:cc:4c:b1:85:fd:30:5b:62:57:3a:b5:97:
         4a:83:f0:f7:fa:52:7e:0b:f1:87:c3:02:04:bf:7a:7c:6a:4d:
         f4:52:27:1a:02:13:43:c0:51:1e:b1:d1:ae:79:34:e9:64:ea:
         82:e1:a4:74:55:87:83:84:0f:0f:01:0f:0c:7c:e5:8c:86:4b:
         40:b8:13:22:50:42:2f:2c:1a:f4:55:da:dc:4d:3b:78:54:3c:
         8f:f3:31:7a:77:41:66:10:73:03:e4:7c:8a:70:bd:c6:df:f2:
         a2:b7:3e:ce:48:e8:fa:92:59:b5:ae:49:c3:ea:b5:64:88:d1:
         83:16:7b:41:90:68:8f:fe:eb:b1:ba:d6:11:5c:90:79:ec:2f:
         0b:b1:c1:b7:4d:ba:1c:14:b9:ca:0d:3e:31:ac:2d:fe:70:b7:
         cf:e0:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:56 2026 by rpki-client