Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
File:                     906dd976-e486-3c9e-8eba-5d9aec5ba475.roa (raw, json)
Hash identifier:          bglV2C78IVc4Ssn4iEsvqtGQ1GWCV6qdBgN1y/jgPOY=
Subject key identifier:   20:3E:A0:1D:0C:07:3F:9C:6D:3A:79:1D:9D:8E:C3:78:C3:21:3D:E4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D65153C3980E167A94B72EC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        108.166.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3c:39:80:e1:67:a9:4b:72:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=0470f069-f951-44bf-8ba9-ba8488bb64b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:66:2b:9c:f9:22:2c:1a:21:a7:64:cf:6e:
                    3b:fd:96:c1:a6:29:39:ff:6d:54:f2:2c:d1:e9:e9:
                    0e:1c:02:87:95:af:e1:25:08:b1:d9:53:62:7e:af:
                    31:97:9b:8f:85:90:dd:23:73:a2:42:7e:82:58:f0:
                    76:8a:4d:14:4c:d3:ed:d7:38:13:86:4c:9f:8c:56:
                    02:30:3a:10:45:f0:02:50:a0:88:1b:bf:1d:f1:a0:
                    03:5a:c5:be:28:5d:3f:00:24:f9:15:e8:23:9d:45:
                    4f:73:6f:18:04:db:69:56:29:7d:33:ed:a6:a8:88:
                    95:fb:eb:cd:fc:34:a6:c4:89:13:b6:8d:39:46:6c:
                    05:ef:6c:e3:ac:cf:c6:5b:ee:42:9d:3f:08:7e:6b:
                    18:4a:ca:d2:6f:80:67:b5:af:67:b2:d3:7a:c8:ec:
                    c0:30:ee:26:8d:c6:ad:b1:f7:f0:74:33:22:a0:91:
                    80:ad:fa:2b:57:ab:a6:1c:84:0f:15:f7:ba:89:08:
                    a8:94:f7:e8:87:ad:5a:f5:d2:0a:83:a1:76:aa:f5:
                    2a:00:f9:e3:7f:f4:78:f9:20:12:dc:c0:2d:44:29:
                    58:70:a5:80:8e:28:e1:75:9a:97:ce:cd:db:25:07:
                    f4:a2:58:73:1e:4e:22:ac:7b:ba:39:e7:61:ec:75:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:A0:1D:0C:07:3F:9C:6D:3A:79:1D:9D:8E:C3:78:C3:21:3D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/906dd976-e486-3c9e-8eba-5d9aec5ba475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a6:16:6c:2b:ae:e5:77:c1:e5:a1:95:18:8a:ff:b5:56:9b:
         a6:0f:15:51:64:73:35:57:52:fe:e6:1e:97:aa:75:47:5a:80:
         bc:a6:2f:71:48:b2:4d:65:7f:b8:c1:5f:ab:35:da:75:43:38:
         55:a2:57:38:54:0b:98:7b:0d:8a:b1:55:cc:98:13:ce:6e:78:
         ef:eb:bf:13:bc:67:74:27:bc:81:7e:9e:81:58:89:c8:4e:34:
         f9:f8:75:90:26:ab:6b:87:a8:1f:4f:cb:69:54:14:12:ea:19:
         9e:31:3f:0f:2c:99:67:2d:fd:e4:27:7d:85:6e:36:87:72:9d:
         b7:8e:51:02:3a:98:fb:2f:bc:5f:96:12:16:7a:36:3a:f8:82:
         d7:a3:a3:a8:ee:f9:f1:b9:16:42:96:55:ff:9e:08:1d:bb:d3:
         71:df:4f:ad:cc:4c:8e:16:18:20:42:bf:b5:f1:f4:64:49:cd:
         4d:f1:1d:49:b5:0a:19:13:9e:1f:2a:2f:94:4b:b6:2c:0f:76:
         28:24:b2:dd:7c:cd:48:0b:6e:c2:08:62:be:86:a3:68:62:34:
         67:fe:16:25:d7:5c:64:81:85:f4:88:d0:fd:96:82:5f:f8:aa:
         84:4d:8e:b9:cb:e7:98:91:58:82:bd:28:71:b3:ee:07:e7:5e:
         64:8a:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:05 2026 by rpki-client