Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa
File:                     7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa (raw, json)
Hash identifier:          ePRUxT8ZUpPvpbhEn+z1C8bOoDibV/zN0N7xjl15vlM=
Subject key identifier:   14:04:38:5B:15:E8:02:75:E9:90:7B:09:40:6F:54:8C:80:10:B9:9F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BB192843F26E6459AF2A1F780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        108.178.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:84:3f:26:e6:45:9a:f2:a1:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=bf6e4d1f-1d95-46ee-a792-790320c5c99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:5e:db:fe:e5:0a:c6:e2:38:3c:e5:82:4d:
                    52:81:ce:63:e9:ba:cc:ca:6b:2e:3d:07:41:bb:91:
                    ef:77:d9:7a:59:c9:30:7a:41:0c:a5:0f:85:13:1b:
                    45:fe:6f:30:b2:10:06:7a:89:32:96:0f:fd:d8:7e:
                    b4:d3:5e:f5:02:41:0f:d7:c3:42:71:38:35:7c:20:
                    7e:93:3a:73:48:52:d5:62:e8:76:50:03:02:33:3c:
                    bd:db:1f:64:fa:84:ab:61:5d:5e:cb:92:f0:11:21:
                    e2:13:cb:c4:8f:0a:56:15:cb:c1:02:62:57:7b:55:
                    a8:32:fb:b8:bd:0b:45:27:a2:e3:e2:50:de:58:79:
                    48:88:60:fb:b0:61:d5:82:60:24:f8:14:dd:a4:42:
                    f3:86:53:66:21:c7:94:4c:39:4f:97:4c:bc:bf:4a:
                    af:c2:53:b2:bd:74:66:a3:b6:87:f6:13:4c:e4:a8:
                    61:76:c5:c5:0e:de:dd:ae:c8:38:1e:d4:8d:89:d5:
                    8b:0a:9c:2e:44:32:ab:43:a6:03:0d:38:48:a8:c5:
                    83:0d:8f:b4:8d:6b:f9:43:5e:be:f9:d2:42:83:dd:
                    2a:07:5f:91:e9:26:3b:75:90:ce:ed:94:30:b9:4c:
                    c3:11:d9:c6:51:01:a9:ee:2a:a4:51:8f:05:75:8c:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:04:38:5B:15:E8:02:75:E9:90:7B:09:40:6F:54:8C:80:10:B9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:3b:d0:11:df:14:bd:6e:b6:60:43:90:0e:6c:e9:95:a2:
         b9:fc:64:a2:dc:c1:8c:c3:14:d6:45:7f:91:36:db:0c:9e:f8:
         bb:f2:7b:9b:ea:ec:03:fe:30:a2:ec:c7:41:12:1b:36:4b:52:
         97:ca:1d:c7:b4:42:ec:f9:fb:75:13:0d:7f:b9:3a:b1:b6:92:
         04:25:90:bd:49:2b:f8:f6:c0:20:05:1e:95:f9:cc:ea:5a:86:
         72:1d:55:c9:57:07:d0:99:83:66:42:8d:ba:4d:c0:8c:c2:3e:
         0d:5f:7d:ac:ae:ff:1c:18:f2:17:5b:d8:83:e7:9b:1d:83:14:
         bb:8c:8d:95:c1:ed:de:30:0a:fe:92:f1:4c:00:95:17:ed:47:
         5d:72:4b:0e:44:77:14:9e:92:c1:fa:da:00:d1:ec:6a:fd:7c:
         0a:b1:9a:7e:9d:57:62:70:1d:70:cb:0a:d7:69:92:b5:57:03:
         15:02:96:4d:2f:aa:85:fd:6e:74:32:15:32:ab:be:7b:58:90:
         ed:f3:99:13:0b:a5:75:41:e8:84:da:3b:b7:07:df:65:05:4c:
         aa:67:be:ef:3a:8d:33:6a:67:5d:dc:e5:ec:18:d3:4c:b7:ba:
         92:b4:cd:2d:d4:de:4e:c6:8b:6d:7d:26:bd:0b:f1:2d:37:47:
         47:55:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:26:17 2025 by rpki-client