Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa
File:                     9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa (raw, json)
Hash identifier:          KzXCfV1u+gUkC+ovGQ4ed2pep8bYJxWR4tbbhERNgHo=
Subject key identifier:   74:48:50:51:13:91:12:D8:A4:A4:91:05:DD:4C:16:8C:9A:FF:72:A7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E210EEA15D8F24A51390AA1C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     30036
IP address blocks:        108.166.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:ea:15:d8:f2:4a:51:39:0a:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=e4bd5341-7df5-4f51-ba54-92df57b71d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:d9:ac:bc:d6:88:6c:f1:b9:ce:92:b8:16:
                    77:40:fe:5a:f5:68:c1:51:6b:d8:fe:1a:91:b4:c2:
                    a4:fe:1b:4b:9c:50:f4:f0:e0:84:a2:c8:f3:89:e2:
                    59:ef:da:4b:b7:48:8e:7b:ae:73:3c:23:a7:21:9c:
                    1c:a3:a0:ad:d0:e3:d6:c2:a5:72:a5:b5:ff:8b:d5:
                    59:7f:bc:46:67:a7:38:d9:19:5f:80:93:aa:38:7e:
                    5c:71:38:6f:66:75:3a:ba:3e:76:e8:7a:f9:92:21:
                    c4:1c:a8:d6:bf:53:f4:b0:4c:12:22:36:d2:a7:cf:
                    cd:c5:12:2a:5d:57:d6:d5:dc:8a:88:d5:cd:6f:10:
                    29:a5:47:79:ad:d3:c7:04:99:24:cd:48:3c:ff:3e:
                    a1:b4:73:0a:23:12:70:7a:95:36:9a:28:fc:e2:53:
                    aa:7e:67:8b:2d:01:43:fe:d9:1c:ab:dc:05:da:54:
                    c5:cb:b7:68:9b:40:da:2f:00:b0:f3:8e:b9:d0:9e:
                    bd:9b:b7:97:c8:9a:7d:73:93:e7:91:52:dc:9a:8b:
                    e1:3b:10:be:80:0c:39:87:5a:7c:5e:93:a5:5f:6a:
                    83:b9:a3:51:6d:70:41:3c:f4:f5:e7:8f:20:70:aa:
                    5e:63:f3:5b:11:3c:57:8c:e4:d8:ab:49:c3:ac:c1:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:50:51:13:91:12:D8:A4:A4:91:05:DD:4C:16:8C:9A:FF:72:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9aa3154d-f1f5-3d6a-aa1f-c75994e086b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:76:cd:93:55:75:49:b4:b7:8d:a9:71:6e:1a:53:cd:3f:
         17:ab:1b:a8:aa:e7:21:9f:ae:e9:51:98:7e:a7:d2:3b:79:10:
         7c:b8:ed:70:97:be:29:1d:c6:d8:4a:fe:3c:20:90:d6:7a:7c:
         2e:8a:53:73:4f:13:22:f7:02:bc:9c:a8:74:e6:5f:08:82:63:
         1d:5d:dd:15:0e:94:51:67:bb:e9:66:76:9c:51:cf:2c:74:44:
         4f:73:12:15:fa:5f:cb:94:b0:a0:89:b7:bd:51:4f:50:21:36:
         78:ff:c2:cc:35:c0:ce:06:a7:c1:18:11:7b:46:f1:f1:62:dd:
         43:70:4b:40:a4:b6:50:9b:6e:2a:d9:f5:6d:e2:75:a2:d6:ed:
         69:d3:11:fa:fd:0b:6a:2c:05:f8:42:3f:83:ca:6e:24:42:eb:
         2a:bd:b6:9c:b2:95:0b:d7:3c:57:d8:e5:6e:18:eb:00:81:19:
         63:d2:71:a8:32:10:e7:5c:8e:49:64:2f:e3:66:08:08:d7:1c:
         35:18:56:77:c9:88:7f:b0:2c:02:78:83:91:0c:ac:cf:c9:c5:
         12:a6:b8:f4:70:c9:6c:df:19:e0:17:7f:55:d2:a8:78:34:9f:
         bb:46:8f:60:3d:2f:ba:bb:70:e1:71:f2:08:66:2b:b4:5e:58:
         de:30:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:47 2026 by rpki-client