Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa
File:                     7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa (raw, json)
Hash identifier:          DmU9zM0F82p7O3bAc4md/Qysvlevek1qh5RMaJwjNxQ=
Subject key identifier:   57:FA:7D:B3:39:F9:F9:6A:DB:A7:21:94:3A:DA:B4:0C:B1:AE:6B:81
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C91070959BAFECFAE2CA12B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:07:09:59:ba:fe:cf:ae:2c:a1:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=1ef86f81-70a4-44e9-95eb-f82bd4cb4fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:88:96:98:ce:22:f7:f8:64:c2:97:f3:66:
                    b4:1e:d8:64:3b:98:03:22:d1:ae:fe:e0:42:36:99:
                    3e:59:73:c8:86:16:52:bc:b9:9a:9c:32:a4:ef:b4:
                    e3:1c:a9:75:80:04:22:cc:83:49:bd:bb:5f:3f:db:
                    2d:79:ba:f3:6f:33:7f:3a:cc:22:a1:3e:4f:f0:7b:
                    3a:37:21:17:57:25:74:44:10:70:32:3f:06:42:e5:
                    e5:3d:51:24:9e:d7:12:0f:e7:cb:08:4d:7e:48:f5:
                    70:9a:3f:b5:54:68:b3:e5:f5:15:12:53:fd:9b:45:
                    9a:ef:18:90:63:34:41:eb:c5:89:76:93:7f:62:4e:
                    f6:fa:52:6d:a6:db:53:ed:01:1b:b3:b6:75:79:a6:
                    d9:5f:d8:68:b2:27:7f:3a:54:a8:54:81:04:8a:5a:
                    b5:25:1f:df:ff:33:94:56:c9:5c:4b:de:33:29:da:
                    23:d6:7b:3a:4f:35:e1:66:fe:a2:91:31:d9:0d:aa:
                    d5:d9:10:b5:a6:3d:76:30:73:ab:c7:88:a8:12:25:
                    19:ad:95:c5:80:8d:92:0e:29:2f:c4:ed:60:96:13:
                    d9:39:c5:22:b6:c5:74:df:66:a6:02:12:ab:b9:2a:
                    95:04:bd:d0:b3:c8:3c:2a:dc:85:4c:a5:3d:5e:e1:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:7D:B3:39:F9:F9:6A:DB:A7:21:94:3A:DA:B4:0C:B1:AE:6B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7b76c2e4-8533-394c-b70c-36aa1e573ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:cb:42:c5:00:4f:f9:d1:0d:bd:c1:7f:f5:10:d8:cb:87:
         86:31:c3:c6:c9:e0:8b:6d:75:c8:50:cf:44:81:32:3b:78:06:
         55:d5:b9:51:03:a6:b0:0d:ab:80:8b:79:db:ae:9f:15:94:ad:
         8f:b6:5c:32:ff:12:75:27:73:73:c3:88:7b:69:d4:9e:26:b5:
         fc:1a:b4:d4:21:f1:b9:ce:cf:62:24:fd:84:1b:6a:72:54:20:
         f2:0f:7c:e2:c0:37:52:06:8b:75:8c:ee:1c:aa:ee:e4:4f:8b:
         2d:3a:d3:a9:62:24:c9:8d:31:84:ad:3b:23:25:87:c6:d8:ed:
         e6:9c:29:91:60:e6:f1:72:aa:01:39:84:30:3d:41:fe:62:13:
         0f:62:a1:9f:da:37:a9:d3:84:4b:87:f4:ee:e4:b9:de:3e:ef:
         4f:61:b6:95:ff:bd:bf:de:55:d5:96:51:5f:69:86:69:2e:d6:
         17:2a:00:4a:a1:c4:dd:c2:36:40:de:39:8d:c8:cd:c9:b8:a1:
         b0:e9:cc:30:ee:a3:6a:bf:04:fb:d1:8e:7f:1c:f3:06:7b:53:
         8f:c4:87:9e:8a:66:73:f6:d2:04:eb:4f:b8:61:04:e8:5e:51:
         00:4a:d6:44:47:9e:06:c3:b5:5c:71:04:10:15:7f:d8:1d:50:
         b3:50:ae:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBwlZuv7PriyhKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk
MWVmODZmODEtNzBhNC00NGU5LTk1ZWItZjgyYmQ0Y2I0ZmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7yIlpjOIvf4ZMKX82a0HthkO5gDItGu/uBC
Npk+WXPIhhZSvLmanDKk77TjHKl1gAQizINJvbtfP9stebrzbzN/OswioT5P8Hs6
NyEXVyV0RBBwMj8GQuXlPVEkntcSD+fLCE1+SPVwmj+1VGiz5fUVElP9m0Wa7xiQ
YzRB68WJdpN/Yk72+lJtpttT7QEbs7Z1eabZX9hosid/OlSoVIEEilq1JR/f/zOU
VslcS94zKdoj1ns6TzXhZv6ikTHZDarV2RC1pj12MHOrx4ioEiUZrZXFgI2SDikv
xO1glhPZOcUitsV032amAhKruSqVBL3Qs8g8KtyFTKU9XuHkkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFf6fbM5+flq26chlDratAyxrmuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2I3NmMyZTQtODUzMy0z
OTRjLWI3MGMtMzZhYTFlNTczY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/Cy0LFAE/50Q29wX/1ENjLh4Yxw8bJ4IttdchQz0SBMjt4BlXVuVED
prANq4CLeduunxWUrY+2XDL/EnUnc3PDiHtp1J4mtfwatNQh8bnOz2Ik/YQbanJU
IPIPfOLAN1IGi3WM7hyq7uRPiy0606liJMmNMYStOyMlh8bY7eacKZFg5vFyqgE5
hDA9Qf5iEw9ioZ/aN6nThEuH9O7kud4+709htpX/vb/eVdWWUV9phmku1hcqAEqh
xN3CNkDeOY3Izcm4obDpzDDuo2q/BPvRjn8c8wZ7U4/Eh56KZnP20gTrT7hhBOhe
UQBK1kRHngbDtVxxBBAVf9gdULNQrmA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:12 2026 by rpki-client