Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa
File:                     87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa (raw, json)
Hash identifier:          S1LvmDzXOwFf0Hjz+AH/3LCIffAiA0XWiAMknRxOZs4=
Subject key identifier:   71:83:CF:6E:D5:A3:9C:1F:3D:B3:EC:7F:71:10:64:5C:B3:89:BC:51
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C910708BAE1969A63817FE580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:07:08:ba:e1:96:9a:63:81:7f:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=7efd3976-24ad-4af8-aa32-b6839ad8eb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:8e:4a:07:ee:2e:44:3e:7e:01:e8:9f:87:
                    e8:6d:d0:90:07:b3:82:58:19:f8:5b:de:55:76:55:
                    e5:c5:68:b7:df:a3:ff:f9:ec:e2:db:fb:35:95:ea:
                    c8:7b:6b:59:61:ba:56:0d:d1:e1:1c:8a:d3:a8:b0:
                    19:b0:33:0e:a3:3f:3d:d1:00:24:75:ba:ea:88:3a:
                    6d:b9:20:b1:60:17:20:c3:5e:ee:71:b3:21:87:29:
                    ab:e3:f5:e2:2f:9e:cb:8c:92:bc:d5:75:a4:75:d1:
                    87:9e:d0:87:e4:b6:73:35:0f:43:f8:2a:f8:2d:49:
                    57:0e:50:46:35:ca:28:92:13:71:dd:a8:bb:74:87:
                    b5:47:79:02:92:ca:61:44:12:88:c6:94:62:0b:b0:
                    ab:0b:cf:00:79:00:18:76:e6:44:3e:3f:26:cb:25:
                    6e:a7:25:8f:63:16:20:52:74:0a:64:f9:08:a8:6c:
                    59:5d:78:c4:46:d6:48:17:42:dd:f2:1c:71:94:99:
                    ed:bc:75:09:54:92:6a:1e:cf:62:5f:d3:fc:78:ec:
                    5e:ec:92:3e:7d:05:b7:94:19:3a:d7:5f:b2:a2:a9:
                    fa:b2:83:a7:70:31:0d:67:23:65:88:09:f0:47:be:
                    68:8c:56:4f:ee:41:01:cc:13:f9:fc:4a:dd:55:80:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:83:CF:6E:D5:A3:9C:1F:3D:B3:EC:7F:71:10:64:5C:B3:89:BC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:d0:e5:ed:c0:09:8b:89:8b:11:8a:7b:cb:d5:74:a6:a2:
         03:2c:6f:32:88:34:2f:7f:0f:13:b1:78:03:fa:ad:97:5a:27:
         f0:82:c7:1c:31:79:54:18:f9:52:f3:f1:20:c2:bd:09:24:02:
         45:03:90:fb:76:74:fa:5d:f4:d2:30:05:91:2f:bd:e2:57:e9:
         4d:a3:0c:d6:b5:af:3e:fa:fc:bf:92:25:a2:13:49:ac:b4:51:
         64:5b:e1:47:5b:1a:b5:69:1a:96:0e:4d:1a:99:ed:be:88:f8:
         0a:46:03:39:54:0a:ee:44:7f:e2:14:b7:9a:d7:49:b4:d5:c3:
         4e:ad:d1:31:1d:de:db:1a:ba:60:bf:bd:8e:52:5a:42:08:92:
         eb:fe:53:36:fb:71:96:f4:44:ac:1b:ff:e0:dd:2c:83:7d:0a:
         b7:26:a9:51:49:ba:69:2b:cf:9e:20:b0:8b:62:86:eb:8b:e1:
         88:40:1a:6a:a0:37:a3:3e:ab:3d:ee:39:5a:bb:f4:6d:02:e4:
         49:ee:d8:2b:18:f5:0f:9b:8c:7e:50:44:a7:97:a9:03:31:95:
         68:2e:71:10:be:77:b7:b3:85:2b:42:73:80:ea:b0:83:7d:6f:
         a8:25:15:3b:37:15:8a:05:fa:ef:9d:b1:05:49:b2:2d:31:b3:
         a6:f5:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:53 2026 by rpki-client