Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa
File:                     a9b3dd06-548a-3297-a7a1-6349330219b7.roa (raw, json)
Hash identifier:          rh0ys7/wTmpI4+TwZoFd883wZC5n/gZE6aboElv38KI=
Subject key identifier:   61:4A:6A:29:1F:4B:D2:E5:D1:1C:54:62:43:90:2A:15:1E:37:97:66
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D71A527ACA13819BF5AF14400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        108.178.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:27:ac:a1:38:19:bf:5a:f1:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=37435f3b-465e-47c7-bc98-3935af61c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:58:3a:8b:3f:0a:ae:86:54:ec:4f:c2:6a:
                    5b:53:7d:21:8c:98:46:b3:d4:d9:00:7a:cc:ef:1a:
                    ea:1a:d8:ed:bf:6f:cc:eb:87:85:53:9e:20:e1:6d:
                    84:4c:e3:f6:34:17:71:19:59:12:6b:7a:a4:42:39:
                    c5:e0:4f:b9:f4:30:3f:05:e1:b0:3d:87:9b:c9:72:
                    a7:fe:c0:3e:a0:c4:23:a2:9b:15:de:16:2b:bb:a4:
                    9e:98:06:3b:ae:e8:ed:be:7b:14:a6:52:29:9c:95:
                    e1:e5:49:e4:44:e8:72:1f:8e:c1:7c:4f:c8:bd:49:
                    4e:e2:24:7b:25:14:3f:58:0d:10:84:df:4d:f2:41:
                    1b:fc:1d:04:5d:7f:13:f8:ae:11:df:0f:2f:a3:7c:
                    98:a7:15:01:ac:ba:7d:98:c6:e0:a3:1b:da:84:2b:
                    d0:a1:fd:55:7d:f2:e6:ee:5f:35:f4:9f:4d:0c:ad:
                    83:bc:d4:79:f1:69:1e:a2:b9:aa:f2:cd:76:4c:5a:
                    cc:ca:6c:5d:a6:6e:d2:27:15:36:0d:00:2e:42:9a:
                    0e:c9:67:2a:03:80:36:ff:09:5a:a7:3d:6b:d8:78:
                    99:f9:4f:af:fe:22:ac:23:32:ae:3d:26:ba:68:c3:
                    3c:ec:0e:9d:de:d7:79:96:e7:ed:e3:2f:ba:4a:b3:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4A:6A:29:1F:4B:D2:E5:D1:1C:54:62:43:90:2A:15:1E:37:97:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:7c:5a:0d:3e:8d:f5:a6:24:2a:67:b0:ed:e4:4c:9e:f9:
         f8:33:b8:84:d0:a7:a8:c0:28:5b:5e:47:32:1e:93:c5:a8:81:
         53:7d:8d:2a:88:09:99:1c:d7:5c:f8:f7:c5:b3:56:ec:0b:f3:
         91:ec:72:53:66:22:d8:b2:2a:25:69:48:75:13:26:c6:cc:47:
         b6:c3:60:20:4b:bf:b3:b7:b8:0d:7c:d9:f9:77:bf:0b:e3:d1:
         97:df:3b:c6:a4:b2:c1:af:83:95:f4:ec:26:98:51:fd:94:1f:
         67:75:80:69:a5:36:ae:d8:cf:97:84:e0:83:ff:f8:1a:e0:18:
         91:42:23:ad:75:ae:4f:5d:f3:ab:fb:1d:0d:dc:89:44:b2:7d:
         d5:4a:57:d8:15:76:13:f0:32:6d:a2:cc:88:c6:2f:f1:31:f8:
         7d:9f:c4:ec:56:eb:9c:9e:d2:d9:6f:f0:db:73:b1:b7:74:0f:
         fc:4b:90:bd:45:f5:7d:7c:e0:65:64:97:9b:8c:7c:cc:29:cc:
         96:b5:d9:22:76:06:c6:54:d9:b5:38:b1:54:3b:4c:95:e1:00:
         f2:50:63:ce:ee:04:79:4e:03:54:81:cc:b9:43:88:59:b3:0c:
         2a:76:34:dc:ec:05:b1:9e:cc:32:b4:43:51:2d:fe:fc:c6:ae:
         01:31:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:12 2026 by rpki-client