Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/83c6bb81-f4cd-393c-8905-a03ae995d1d8.roa
File:                     83c6bb81-f4cd-393c-8905-a03ae995d1d8.roa (raw, json)
Hash identifier:          2Uw9FCANdQ7jpLdFBYejOGdK5Xx4+GS2Rkc2cEEGm3o=
Subject key identifier:   53:77:49:CD:79:67:01:D8:B0:6A:88:82:65:8A:81:13:7A:2D:2B:8E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F01A71F82DE1DD440C9F7B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/83c6bb81-f4cd-393c-8905-a03ae995d1d8.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        108.178.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:71:f8:2d:e1:dd:44:0c:9f:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=f3ee4e1a-d476-4afc-b856-5355be597fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:2c:b0:3f:ab:8f:f6:0d:e6:1d:d6:14:5c:
                    62:5a:d7:3c:b6:5b:7c:0a:1a:01:f9:30:56:0d:c1:
                    78:52:11:9e:07:09:06:d7:30:24:b3:2a:89:63:ee:
                    16:3e:fe:55:43:f9:94:a8:74:f9:9c:40:36:0c:a1:
                    a4:a3:1d:93:55:00:29:46:1a:4d:a8:1d:de:8a:c1:
                    1b:55:18:9f:2d:e0:a3:ac:35:db:8a:75:aa:3d:76:
                    72:88:cb:5e:ce:55:e1:e1:a4:ee:03:20:2c:7a:ae:
                    8d:ac:7e:14:19:23:a1:b4:c9:2b:c8:65:3f:41:1b:
                    86:d7:a8:a5:a9:c5:67:26:30:19:72:d6:03:f8:99:
                    21:6e:70:a2:a5:3e:20:15:c8:9b:42:b4:75:5e:fd:
                    4d:29:27:95:e3:75:e8:59:b1:32:c0:5c:a7:5f:9a:
                    72:27:63:35:84:c8:3c:f8:92:4d:0e:ac:16:26:08:
                    fd:a2:62:e5:42:51:73:4f:f2:63:2c:99:5b:51:31:
                    80:9b:ad:ac:bb:5c:b5:fb:c0:0e:09:d7:55:9e:03:
                    6b:c8:db:97:db:19:96:36:be:b5:1b:0b:b1:47:9d:
                    1b:12:43:fc:29:b4:9b:b8:3e:63:ed:50:3c:d9:bf:
                    49:56:6b:fe:5d:fb:38:00:1b:5c:39:15:71:ef:f7:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:49:CD:79:67:01:D8:B0:6A:88:82:65:8A:81:13:7A:2D:2B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/83c6bb81-f4cd-393c-8905-a03ae995d1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:4d:37:f9:b1:8e:bc:be:23:f7:ec:93:71:72:11:3d:7b:
         82:37:70:a6:4f:6f:35:46:04:0d:d5:08:da:84:57:fd:96:cc:
         69:38:bf:f6:b3:09:13:2e:21:49:34:5f:e7:95:fa:f2:35:8b:
         b9:53:ec:19:4f:b6:c4:d8:ac:c1:60:b1:97:14:c2:ba:cf:2a:
         4e:76:57:36:ff:75:59:ca:a6:1d:55:fd:70:7c:4f:41:ec:04:
         a6:20:3e:b2:30:21:3e:6c:e4:84:c2:25:10:a4:d8:c8:10:b9:
         2d:d5:ff:b2:d2:ac:78:e8:15:cc:71:68:ab:63:ca:1d:1c:b9:
         42:60:71:1a:96:f9:cc:bf:4a:60:f6:17:db:03:a9:b6:56:4e:
         23:2f:c5:fe:c9:b5:1c:16:9a:84:4c:32:5d:18:9a:a4:42:7c:
         fa:b4:0f:45:bc:6d:8e:44:56:37:5a:36:c7:3a:d2:5f:e0:28:
         a3:05:ed:bc:62:a3:c9:6f:1e:8d:1b:ef:8c:17:cc:76:24:08:
         5e:80:41:60:c1:2b:98:c1:53:74:6e:e7:56:01:18:95:93:dc:
         94:e5:63:51:2e:ff:5f:b6:f2:bb:28:33:55:8c:71:93:c6:4f:
         c7:f5:66:0a:db:28:f9:1e:81:2b:f6:64:c3:06:c9:bb:d5:ea:
         e2:b9:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:03:33 2025 by rpki-client