Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c26db9d1-7b34-3a6d-adbc-f4de2afc3025.roa
File:                     c26db9d1-7b34-3a6d-adbc-f4de2afc3025.roa (raw, json)
Hash identifier:          ePwN+BFen3PBXFuPityH4i3OqCIZKZDRAXXFZlJKFCk=
Subject key identifier:   A9:A8:25:CF:A7:EC:FF:F1:DC:57:87:BC:5F:35:E3:8E:0E:23:5B:1E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F01A77FCD4993D904A985300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c26db9d1-7b34-3a6d-adbc-f4de2afc3025.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        108.178.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:77:fc:d4:99:3d:90:4a:98:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=1ef68b6d-cbf8-4755-a004-49f81a8ce550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:35:91:10:09:3b:18:58:74:57:dd:80:7b:
                    20:e3:5d:33:d5:2f:6a:63:f6:f4:b0:57:9c:20:43:
                    ad:09:02:b0:41:1e:ee:62:26:7a:ca:54:0b:cd:5b:
                    ff:d4:d3:ac:3e:7e:84:49:5c:9d:99:6e:77:6f:e2:
                    92:c4:d4:32:10:6e:f2:3f:15:8f:69:d9:78:35:44:
                    32:b7:d9:bc:b0:d8:19:d3:d8:92:02:79:f0:e9:27:
                    fc:83:88:2d:f6:35:53:2d:b9:65:92:3f:70:6a:4e:
                    6d:71:48:5f:34:68:ab:c6:fa:d6:02:84:e0:08:08:
                    17:cb:49:79:21:e2:eb:ab:1e:69:af:80:89:08:de:
                    f9:0d:c9:6f:b7:61:d0:21:62:13:b5:2b:28:51:7e:
                    f6:7c:f9:e4:57:3a:de:76:9f:95:87:d4:ef:d1:83:
                    49:1b:ff:6f:ad:01:cf:98:80:99:77:ba:a9:60:be:
                    f3:f5:01:43:24:16:dd:b3:a2:dd:ec:e7:2d:af:35:
                    bb:dd:48:17:9e:ba:ac:b2:a8:c1:38:74:e8:17:8a:
                    dd:c7:e5:18:e6:3b:fe:00:f9:31:50:ac:63:c0:6e:
                    0e:14:10:5f:54:78:99:4c:25:63:03:a2:7e:31:51:
                    bd:61:bf:48:7c:40:d0:f1:dc:dd:36:b1:94:c2:83:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A8:25:CF:A7:EC:FF:F1:DC:57:87:BC:5F:35:E3:8E:0E:23:5B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c26db9d1-7b34-3a6d-adbc-f4de2afc3025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:8b:40:9b:ab:94:7b:99:cb:2d:f1:33:fa:3d:d0:0b:11:
         ac:a5:6a:a4:0d:7f:c4:b1:58:8c:86:6f:61:eb:4f:c6:a5:83:
         2c:a4:0f:93:3a:e0:de:5a:1d:66:76:26:ec:1e:59:f8:05:1b:
         a0:4f:f5:6d:40:3f:a3:31:a9:ec:09:80:c2:27:31:1f:4c:5f:
         fd:cd:cb:67:03:14:27:74:64:8b:8a:b2:7a:34:d2:d6:bc:37:
         f2:cc:b5:01:80:83:55:3b:b1:6b:d0:0b:15:a5:5b:50:4c:ae:
         dd:28:c6:8a:4b:d5:a3:5b:e3:27:5c:9c:cf:5b:b3:0b:94:28:
         79:c1:ea:df:95:5f:96:3d:1a:85:c6:b6:90:3b:a7:4a:9c:a3:
         5c:f7:65:9d:a5:8a:35:cd:b4:c4:67:86:38:48:c9:ef:ef:9a:
         6a:16:98:4e:2c:f4:27:ba:0f:64:11:50:8a:93:3d:33:a5:a8:
         7b:8c:ab:2c:c6:50:65:e8:dc:48:63:d3:09:2e:b9:9d:cc:df:
         cb:fc:77:64:73:b2:18:38:fc:4b:6a:2e:27:c5:03:38:38:68:
         63:4f:b9:c5:8a:8c:34:45:9b:b9:12:30:fc:d8:8a:e4:0a:ca:
         4e:f3:52:15:08:4f:8b:18:20:7d:a3:f2:b7:2c:7a:1d:b9:a8:
         5a:b9:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:34:28 2025 by rpki-client