Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec2bdd3b-be5f-3711-89b5-9e95ca790624.roa
File:                     ec2bdd3b-be5f-3711-89b5-9e95ca790624.roa (raw, json)
Hash identifier:          ZhZdbGgwOLf0kl4l+YN+YnWfy8YAo263dombz8oOqec=
Subject key identifier:   4E:38:AC:7A:2A:BF:95:3F:D1:CD:E5:CD:BB:AA:DE:9A:9F:4B:B2:E8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE7BCCC8EEFC51B8D2AC903C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec2bdd3b-be5f-3711-89b5-9e95ca790624.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        107.167.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:cc:8e:ef:c5:1b:8d:2a:c9:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=e338d6a4-f11b-4264-8105-df362dbf7a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:b2:b0:94:b1:49:93:64:2f:c4:f6:43:36:
                    7f:b8:1c:82:63:18:a2:00:a7:ab:85:5f:d8:e3:3e:
                    a1:43:5b:be:8b:03:dd:13:dc:27:d5:a6:b2:a8:11:
                    fe:35:5e:4a:4e:0c:b0:5e:80:d9:ac:ae:e6:2a:a6:
                    63:86:39:6e:4b:a7:a4:1e:be:77:2d:78:d4:81:fd:
                    17:4e:59:fd:cf:d5:21:27:9e:0b:b4:33:b1:49:85:
                    4b:b2:ed:a4:5d:2b:16:3c:a8:8a:86:4d:79:69:b0:
                    d2:f7:fc:f2:97:ec:d8:78:7a:79:ce:5e:9d:72:2c:
                    2e:bc:0a:99:cc:5e:a1:c3:53:ba:b3:2a:bd:4d:ba:
                    3c:4f:41:33:51:68:35:10:4d:cc:91:27:0a:42:2f:
                    ce:3b:d9:85:c3:b8:73:ef:31:00:5a:09:ea:53:9f:
                    3f:1f:8f:91:c2:a0:bf:bd:49:79:66:a4:73:83:7f:
                    7c:47:cf:fd:af:96:73:9b:70:b7:f2:a9:69:e1:91:
                    f5:9b:70:5d:a6:9a:4e:f8:86:0f:11:05:2c:06:fa:
                    02:92:b5:c9:a3:a7:e4:8d:cf:d7:78:3c:cf:aa:c3:
                    cf:4e:64:fd:4f:22:a8:62:70:ed:d9:c7:61:5f:7c:
                    b0:6b:56:e7:91:31:45:63:6c:24:ac:19:f5:14:13:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:38:AC:7A:2A:BF:95:3F:D1:CD:E5:CD:BB:AA:DE:9A:9F:4B:B2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec2bdd3b-be5f-3711-89b5-9e95ca790624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:34:f3:eb:cf:88:ef:1c:0f:1c:e3:1f:55:84:e6:6b:ca:
         78:5a:d4:a0:6f:1c:09:3d:19:1d:f4:05:29:9d:0f:2a:f3:fc:
         88:b9:b4:0a:c4:1a:f7:35:69:61:ab:b5:d2:e5:91:85:73:e1:
         25:7e:cf:d9:5b:ed:64:54:2b:01:a8:b8:43:78:6a:25:44:7d:
         d1:5b:64:bb:0f:66:0c:62:a6:a9:25:37:a0:c5:db:95:e6:c7:
         c6:ab:de:e7:14:42:51:7b:fc:2f:57:62:94:39:5e:b6:d3:c2:
         76:73:c3:78:93:b5:c4:6d:d8:7a:22:77:e1:37:75:af:c1:ac:
         99:a9:28:cc:b7:82:74:73:55:ef:4e:4e:65:0c:9f:59:f0:2d:
         cd:f5:2c:cb:f5:76:48:74:a9:29:6a:a5:ed:69:67:70:b0:da:
         8b:16:4f:65:98:27:e3:25:92:24:3c:d7:63:03:d8:68:cd:52:
         c3:2c:4e:ce:8a:16:c6:6d:00:fc:ef:ae:ae:27:b3:6f:b2:2c:
         d4:dd:c5:92:61:63:bf:ad:3d:b4:dc:f3:bb:38:15:9d:ad:c1:
         8f:47:27:25:12:1e:38:25:a5:d0:d0:1b:fe:68:19:73:24:ac:
         4b:9a:b3:ab:96:bc:9d:01:42:60:fd:95:fa:0c:c0:36:d7:28:
         ce:20:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:07:34 2026 by rpki-client