Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa
File:                     cb3967ac-db0f-3973-83a2-7bfb7e825424.roa (raw, json)
Hash identifier:          E0HE1tji0TnOv4FKvWU7dgE7oqr3qKuxg3P71ko66Lw=
Subject key identifier:   1C:79:23:D0:29:D2:21:AF:6D:12:40:DF:EF:BA:41:01:1B:B3:F6:5E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F01A7286BFE4FB3B8A184300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        108.178.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:72:86:bf:e4:fb:3b:8a:18:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=a2793fe5-8e0e-4825-9403-9eff00b06e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:04:25:29:8b:e5:a0:ad:07:35:ee:13:5d:
                    48:2a:41:b0:b0:cd:6f:f0:11:e6:b4:33:31:84:c3:
                    bc:7f:02:99:12:c7:23:6c:74:fe:f2:6d:4b:25:2d:
                    c7:c6:c7:56:49:57:e3:5e:ca:6d:7d:45:4b:21:28:
                    81:aa:dc:eb:96:81:43:90:e7:65:b9:e0:19:89:22:
                    b8:e5:fe:5f:53:68:50:2a:27:6e:29:09:4b:ed:05:
                    9a:b8:c8:5a:ec:23:48:fa:78:66:64:42:a1:f4:79:
                    1c:bd:c3:b2:59:2f:82:39:7c:44:4d:a1:98:28:52:
                    fb:65:31:96:f0:cd:8e:e5:22:dd:88:6f:ce:e0:fa:
                    f8:cc:5d:24:06:97:17:6b:3e:16:c5:a8:71:93:17:
                    82:01:55:78:42:d4:08:fb:e0:f7:db:b7:95:07:9f:
                    bf:49:38:d5:fc:3a:b2:4e:4c:26:21:ab:c3:bd:b4:
                    74:ee:f3:cf:2a:90:fc:97:a1:c8:3c:0a:5b:e2:7d:
                    a0:f0:d7:16:3c:71:ed:a0:0e:51:5d:11:bb:60:e5:
                    c0:2f:76:a3:2a:7e:8f:48:69:ff:6a:da:d6:a6:34:
                    ab:39:e2:af:1d:35:12:07:f3:2e:38:64:14:b6:2a:
                    e4:d0:b6:3d:4f:4d:29:e7:c9:a6:20:d6:96:ce:aa:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:23:D0:29:D2:21:AF:6D:12:40:DF:EF:BA:41:01:1B:B3:F6:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb3967ac-db0f-3973-83a2-7bfb7e825424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e3:9a:27:73:0e:a5:ca:5f:60:f5:fe:1f:76:ad:40:f0:de:
         2a:89:71:21:b8:fd:74:5f:79:43:cf:bb:cd:ae:e3:4f:a5:7b:
         83:03:7a:a8:19:25:e3:73:b4:ac:e0:94:18:15:44:01:f7:fe:
         ee:98:6b:3e:a1:55:8e:7e:93:97:93:6c:7b:62:b8:f7:3b:97:
         00:3f:c4:59:ea:c6:be:7f:8b:e2:78:d7:2b:02:3f:0a:ac:46:
         95:66:96:bd:1c:6d:e0:84:7f:2a:2b:7f:29:4e:0c:19:81:74:
         2a:cc:b5:3e:c6:25:62:9f:d3:0c:8f:aa:f0:31:5b:96:69:35:
         01:20:c7:bf:ba:02:a2:bb:0e:87:00:a7:06:0e:c8:ff:ff:9a:
         7e:b6:18:7e:0c:29:d2:25:85:ad:1f:55:96:81:bb:3c:c2:9e:
         eb:71:3a:dd:51:f2:43:99:3b:22:ac:1d:87:da:f9:5c:b5:5b:
         72:61:8f:b2:bb:c9:cc:10:10:cc:66:85:a4:1a:49:ed:de:2e:
         d7:07:27:af:b5:27:71:08:63:76:ec:36:7e:f8:ab:e0:d1:1b:
         07:2d:ef:a7:c6:45:18:96:3a:54:3e:8d:48:f3:b1:02:32:fa:
         61:f1:c6:0a:69:03:e5:33:9f:e6:1c:7a:cf:58:6b:5d:71:44:
         53:a8:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:55:28 2025 by rpki-client