Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee07ffc3-4763-3b76-a498-a6b2c62fea3a.roa
File:                     ee07ffc3-4763-3b76-a498-a6b2c62fea3a.roa (raw, json)
Hash identifier:          EgpxD/g0deQd7RMT/UQ7AEBQqO8mp+PsohDcE1RSSec=
Subject key identifier:   BD:BD:2A:99:98:FA:06:4A:00:66:F9:65:B6:F8:5A:BF:89:41:24:A8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D71A52747CC09389029545180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee07ffc3-4763-3b76-a498-a6b2c62fea3a.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        108.178.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:27:47:cc:09:38:90:29:54:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=d3d51dcd-82a0-4747-9bb3-71c6953576d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:26:3a:f5:2b:98:c7:79:1a:02:87:97:8d:
                    aa:0b:bf:bb:c2:c6:3f:31:3e:ea:09:4a:77:e6:07:
                    1a:37:fb:36:fc:a3:0c:39:d8:40:01:a2:b4:6e:28:
                    b7:d7:00:7f:90:fa:0b:af:a7:9e:47:92:ae:ea:04:
                    55:59:e2:ed:c7:1b:2f:e4:7e:d6:52:37:e9:32:e5:
                    e9:53:fb:ae:3f:d4:48:12:ac:d4:51:f5:8f:9c:82:
                    72:19:99:e3:df:a4:98:ce:a0:1e:8e:fd:af:5e:3b:
                    17:17:95:67:81:c0:30:b4:8f:de:19:8d:83:58:17:
                    21:55:28:fa:05:22:22:e4:47:16:f7:7f:4d:c1:66:
                    9c:fc:e1:19:d9:e5:50:16:48:4b:71:b7:41:b1:d3:
                    36:97:1f:7e:6a:de:fa:58:73:9e:f9:2a:9d:ad:49:
                    0c:4c:3a:6f:6a:26:11:ac:45:9b:07:99:1b:5b:82:
                    1c:c4:43:5a:0b:b6:ea:c3:3f:8f:d9:62:a2:e1:80:
                    17:3c:26:89:7a:69:7e:e3:99:81:a9:d6:48:17:c5:
                    92:b3:de:1f:93:8e:4d:3d:45:c0:18:5f:90:87:11:
                    76:2e:24:56:1c:e2:8a:4f:3d:eb:22:24:b1:fb:69:
                    87:6c:ff:dc:65:e6:ba:87:92:16:d2:00:7f:96:b4:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:2A:99:98:FA:06:4A:00:66:F9:65:B6:F8:5A:BF:89:41:24:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee07ffc3-4763-3b76-a498-a6b2c62fea3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ce:e2:f3:aa:37:7f:a8:28:0d:95:0d:5b:95:1e:3f:79:a0:
         26:3f:46:9d:23:ff:00:d5:c2:10:7b:da:e4:c0:90:77:4b:20:
         ee:77:50:60:c3:cc:9d:fd:30:be:c8:0b:1e:c6:34:1f:ac:51:
         31:c3:33:a8:34:e1:04:7a:1b:0f:64:00:2d:d6:ed:24:45:ec:
         c5:bd:7f:3d:10:24:79:e8:40:5e:ae:d4:c1:f4:41:bb:83:da:
         81:5d:00:b5:22:54:ce:54:a6:62:ec:e8:ad:88:64:6d:d1:4a:
         24:fc:c8:5a:b7:51:0c:7c:ad:82:47:4e:34:ec:22:d3:9b:8a:
         f5:82:f9:5e:f3:e0:16:dd:25:fa:f2:4e:41:df:90:4c:ca:ac:
         0e:78:45:4a:5d:7f:45:4a:c3:58:c4:55:de:59:d1:1d:87:5e:
         f8:0f:47:3a:f6:c4:ac:39:1f:df:35:2e:23:a8:f3:5a:17:9f:
         03:e5:ad:55:9c:98:ef:f8:92:35:28:33:ef:f5:96:38:2c:73:
         60:a3:a9:c2:5c:e8:89:82:68:5a:81:84:92:5c:1a:e3:01:31:
         2e:95:f1:6b:94:f3:a6:9a:9a:2a:2c:7e:4e:11:24:37:79:19:
         b3:b4:db:a9:8d:9d:d6:b1:09:aa:7d:21:fa:f2:01:1b:94:10:
         a2:2c:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:37 2026 by rpki-client