Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da7e506a-8594-3b14-b4fd-5e44c8e86abb.roa
File:                     da7e506a-8594-3b14-b4fd-5e44c8e86abb.roa (raw, json)
Hash identifier:          uWbrP9ZP3o3XQGdcBSK9utUsffpFZ1u2MM+L61/SmA8=
Subject key identifier:   A3:38:95:34:79:80:20:8B:BA:5C:B8:02:41:08:13:E8:2A:53:54:CA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C9106E09166DC858BA082DE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da7e506a-8594-3b14-b4fd-5e44c8e86abb.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        108.178.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:06:e0:91:66:dc:85:8b:a0:82:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=80a4c762-e946-40d8-b6cf-8f3c2536e36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:8e:ea:77:a4:4e:f2:91:3f:59:f6:98:76:
                    f1:c1:f5:a1:9a:b9:da:27:a7:03:b5:18:75:4a:bf:
                    b9:bc:0a:76:89:43:18:db:bf:ef:49:73:be:63:b5:
                    70:04:f9:f2:1c:ae:c1:44:73:8e:c4:f8:60:62:9e:
                    75:6e:aa:3b:66:c7:27:c7:61:3f:6d:8f:02:65:b9:
                    67:c2:13:3e:e4:d3:4d:18:85:59:87:05:c3:ae:df:
                    d9:49:97:49:02:5e:06:fc:4a:64:79:5e:72:25:25:
                    6d:fa:d2:16:88:bb:93:76:8e:4b:d2:5a:b2:f7:9e:
                    06:60:01:4e:ef:14:e4:18:67:c9:3a:53:78:48:5d:
                    6d:b3:b8:c6:2f:3a:da:10:39:d3:e1:15:e5:a5:ca:
                    a9:96:6b:fc:a1:97:76:40:14:7f:23:b0:39:4b:fa:
                    d5:01:16:89:eb:08:a1:16:5b:fd:4e:2a:8e:21:79:
                    03:aa:de:b2:c0:30:34:93:a8:e7:0b:c1:d8:c0:aa:
                    1e:51:7f:53:08:15:5b:93:28:af:29:6c:80:15:7c:
                    dd:58:fd:bd:21:01:25:f7:7a:4f:64:e2:b0:b1:81:
                    a4:a6:e7:c2:a4:35:63:25:39:35:f5:f1:7b:ae:59:
                    41:f2:b3:e2:f2:81:3e:63:c7:fe:4a:8f:5f:97:ff:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:38:95:34:79:80:20:8B:BA:5C:B8:02:41:08:13:E8:2A:53:54:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da7e506a-8594-3b14-b4fd-5e44c8e86abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:78:5e:38:11:ad:48:85:8a:3f:3e:aa:86:41:2a:d1:81:48:
         82:fd:86:0b:f0:49:b5:f0:d4:2f:17:d3:87:a3:70:a9:3c:55:
         c9:f8:1e:a8:92:eb:e9:fc:3d:72:3a:30:3f:c9:5f:88:41:ee:
         b8:80:36:ed:8f:55:83:6e:ac:b5:9b:7f:d4:40:61:e5:4e:c7:
         09:bc:1a:cf:b4:ab:fd:ed:34:5b:d5:d0:26:4b:99:0e:06:27:
         1d:b1:42:e8:db:0a:ce:5c:5d:99:32:ff:23:42:6e:83:61:9f:
         bd:5d:b5:03:c0:b7:37:52:a2:a5:94:7f:93:25:87:40:2b:57:
         56:f9:81:ff:88:f7:4e:98:83:b7:2c:d0:b9:da:38:79:eb:46:
         38:d3:94:e1:9f:1a:73:45:24:c2:a3:90:dd:66:4e:4c:8d:a4:
         1f:f4:6c:8f:a3:a7:81:04:8c:fc:5b:40:bf:16:7f:67:90:86:
         75:15:dd:9e:0e:ee:cf:26:a5:1b:a3:9f:db:d5:9c:05:50:f9:
         ea:11:49:79:86:7b:44:ce:ea:6c:31:07:65:19:0d:14:64:9f:
         d8:02:cd:0c:60:c0:12:93:f2:fd:67:9f:ee:1c:21:c9:d6:37:
         10:a9:2b:9c:aa:d0:e8:d6:40:0c:94:84:05:f7:2e:95:37:ce:
         4d:f2:57:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBuCRZtyFi6CC3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk
ODBhNGM3NjItZTk0Ni00MGQ4LWI2Y2YtOGYzYzI1MzZlMzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqSO6nekTvKRP1n2mHbxwfWhmrnaJ6cDtRh1
Sr+5vAp2iUMY27/vSXO+Y7VwBPnyHK7BRHOOxPhgYp51bqo7Zscnx2E/bY8CZbln
whM+5NNNGIVZhwXDrt/ZSZdJAl4G/EpkeV5yJSVt+tIWiLuTdo5L0lqy954GYAFO
7xTkGGfJOlN4SF1ts7jGLzraEDnT4RXlpcqplmv8oZd2QBR/I7A5S/rVARaJ6wih
Flv9TiqOIXkDqt6ywDA0k6jnC8HYwKoeUX9TCBVbkyivKWyAFXzdWP29IQEl93pP
ZOKwsYGkpufCpDVjJTk19fF7rllB8rPi8oE+Y8f+So9fl//36wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKM4lTR5gCCLuly4AkEIE+gqU1TKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGE3ZTUwNmEtODU5NC0z
YjE0LWI0ZmQtNWU0NGM4ZTg2YWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF54XjgRrUiFij8+qoZBKtGBSIL9hgvwSbXw1C8X04ejcKk8Vcn4HqiS
6+n8PXI6MD/JX4hB7riANu2PVYNurLWbf9RAYeVOxwm8Gs+0q/3tNFvV0CZLmQ4G
Jx2xQujbCs5cXZky/yNCboNhn71dtQPAtzdSoqWUf5Mlh0ArV1b5gf+I906Yg7cs
0LnaOHnrRjjTlOGfGnNFJMKjkN1mTkyNpB/0bI+jp4EEjPxbQL8Wf2eQhnUV3Z4O
7s8mpRujn9vVnAVQ+eoRSXmGe0TO6mwxB2UZDRRkn9gCzQxgwBKT8v1nn+4cIcnW
NxCpK5yq0OjWQAyUhAX3LpU3zk3yV1c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:09 2026 by rpki-client