Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa
File:                     610da70e-9d51-38a9-a208-0bbd0c68575e.roa (raw, json)
Hash identifier:          kgkiR98cfFgiRCfGAIMefRAnev7QsrkTgGFX/rfWsaw=
Subject key identifier:   CC:C7:3E:54:D2:4B:47:5A:6F:61:D0:EF:33:63:51:60:A9:39:E5:15
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F01A7960F96C14759B517F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        108.178.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:79:60:f9:6c:14:75:9b:51:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=e9ffe962-5432-4689-a94e-df7887631c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:4a:c1:24:33:65:37:3b:83:60:29:71:53:
                    cf:e2:a3:b0:2d:cb:0b:fa:0e:f0:7f:91:22:b4:5e:
                    f9:28:ed:75:53:33:4e:76:4b:64:d8:56:d3:c4:6b:
                    10:af:9a:c2:18:cf:b4:f3:9e:e5:a0:30:98:cc:5b:
                    6d:dd:fa:b2:5e:8f:d8:5d:92:21:aa:02:3f:47:49:
                    3c:08:49:d9:10:fb:a9:d7:0a:b3:c0:61:9a:4c:8c:
                    cc:19:41:e9:d0:39:4d:d2:b6:2c:e9:0c:32:20:a5:
                    23:d4:34:ca:e4:8c:ec:99:81:30:2e:11:21:55:8b:
                    66:21:0e:a6:7c:c9:11:b5:be:6a:4b:ec:7a:59:22:
                    8b:ad:b3:3f:5c:6b:5d:0f:f2:f2:61:a0:d5:f9:98:
                    fd:8f:37:70:46:70:47:9b:d7:d2:66:03:dc:f9:53:
                    e2:8a:17:25:ba:54:ab:11:94:3f:43:cd:43:7a:2a:
                    98:8a:6b:79:93:7b:e2:08:58:84:5a:92:6a:69:b7:
                    b4:a1:7c:e5:94:4f:0a:5c:ae:1e:2c:82:e3:1a:47:
                    68:41:a0:a1:8e:de:4a:ef:7c:f9:e3:d9:29:4d:92:
                    d2:1b:1c:f1:e2:90:a0:71:44:a0:e0:06:fa:7e:39:
                    ac:06:4e:c3:df:ec:4f:2a:4e:e5:7b:3f:0a:9c:8b:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:3E:54:D2:4B:47:5A:6F:61:D0:EF:33:63:51:60:A9:39:E5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:65:61:e1:76:6f:49:d2:6f:b7:6c:e3:38:ea:0e:77:f1:71:
         6e:43:28:d3:94:9e:b4:d1:a9:c9:77:08:dc:1f:75:69:05:79:
         16:62:4a:51:2c:1f:9f:aa:80:0e:be:1b:fb:f7:4f:ea:1f:7b:
         9a:b6:ad:42:61:9e:7f:b8:11:11:d0:d3:4f:fc:c8:5d:9c:2a:
         73:51:6e:ad:73:c1:02:3b:27:c1:a0:76:ee:b1:f8:55:6b:1a:
         98:21:d7:d5:47:4b:3a:df:01:5d:2b:f5:f2:ca:7e:a8:6d:fa:
         4c:87:6d:64:98:9e:f4:58:7d:82:1c:58:61:74:de:1d:3a:7d:
         b7:64:fa:37:39:60:86:de:57:3b:29:89:87:1d:5e:99:c5:84:
         7c:db:d6:45:4f:55:54:52:13:6f:85:7f:ed:52:5c:62:06:58:
         2d:04:0c:3a:de:ec:48:85:72:98:06:a5:2a:77:88:17:b7:dc:
         f9:d6:2d:c1:27:5d:9b:0a:1f:25:77:1c:74:8f:c0:f5:17:90:
         02:4f:21:d5:82:ec:7d:24:32:eb:c0:e6:d2:d0:46:a2:83:7c:
         e1:bd:8a:22:70:74:0c:a0:fc:30:bd:1f:53:1a:df:ee:d2:4b:
         da:48:08:f6:43:c5:17:6f:59:d8:e8:cf:e5:3d:74:6a:bc:dc:
         a9:c1:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:53:02 2025 by rpki-client