Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa
File:                     192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa (raw, json)
Hash identifier:          c96f/j0XNYJt/SHbhFfhzjGWeX3JHC8S0soSTBnHako=
Subject key identifier:   BA:27:63:82:48:72:69:5B:F3:80:62:4D:0E:68:D8:DF:1C:F4:DD:97
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE7BCC949636A6951D1DD47C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        108.166.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:c9:49:63:6a:69:51:d1:dd:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=e31b66de-b034-4bfc-87eb-3854fcdffe94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:53:3e:26:50:1a:66:e9:42:6a:90:18:d5:
                    2c:12:d8:cb:b1:cb:dc:73:7b:7c:42:47:0b:22:f1:
                    99:d7:bc:2c:15:e1:58:5c:74:fa:73:45:21:dd:ce:
                    c8:f0:20:a2:00:5c:20:54:f1:0e:c9:46:53:58:8e:
                    f4:81:90:47:38:b9:87:38:a7:db:23:84:48:a3:b9:
                    39:5f:6a:0f:95:2e:fa:c6:e7:a4:15:0f:ce:40:0a:
                    ed:cf:c4:97:9c:fc:23:66:9f:16:00:89:34:0c:71:
                    15:a3:a0:a7:47:e7:41:f6:15:d2:4b:ae:d7:28:c1:
                    73:21:ad:7c:07:18:64:7e:65:8a:17:b8:fe:ef:da:
                    aa:b6:f2:b3:e8:a1:74:4a:3f:d4:f0:95:a7:86:9d:
                    c9:1e:73:9d:1b:b7:7b:0e:f7:df:72:7c:fc:86:4c:
                    5b:61:b8:1c:14:b3:64:03:9c:ef:ac:bc:0f:3b:a8:
                    8b:fa:d6:bd:94:7e:09:7b:b7:f2:cf:d3:74:5d:ab:
                    96:2b:6f:63:33:68:40:db:e4:af:b0:52:c5:6a:dc:
                    72:90:28:09:5f:53:6a:af:88:f4:ca:fa:e5:9f:25:
                    60:63:5d:96:c2:08:43:94:ee:f2:c1:e7:4e:c7:1e:
                    dd:04:5f:05:2f:e8:d9:94:cd:a3:7e:3f:a1:6a:7f:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:27:63:82:48:72:69:5B:F3:80:62:4D:0E:68:D8:DF:1C:F4:DD:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/192738d5-93b6-3ed2-a9cf-f3ceff2a5d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:d7:e5:b9:93:31:d6:8f:c8:ff:cf:0a:20:05:dd:37:79:
         a5:9d:1e:9e:87:96:f7:30:6d:d1:03:4b:92:7b:a9:3b:89:ae:
         8e:88:8b:37:34:c1:26:aa:a8:6d:a4:a4:05:93:28:ec:75:e1:
         2c:8a:b3:56:ae:e6:51:26:5f:a6:96:df:33:06:91:cf:f3:ed:
         79:a9:45:fa:17:f6:8a:09:65:59:81:f0:5b:eb:27:3c:90:80:
         4c:b1:90:ca:c8:4a:b7:64:98:57:f1:68:ce:e8:7e:33:aa:01:
         29:4a:83:0b:2e:43:6b:fe:af:76:e4:e4:84:40:8c:58:69:e0:
         1d:65:f5:29:ff:af:13:86:c6:5f:0d:e3:32:8b:95:07:cb:cf:
         a2:ad:67:30:eb:a2:cc:f5:c8:ad:6b:2e:a6:d4:b6:00:d2:df:
         6f:55:e2:87:63:51:46:1a:8c:3a:40:68:d7:7c:df:37:7c:a3:
         8f:1d:f2:cf:0d:48:d3:06:46:e0:61:9d:5b:34:7a:0c:0b:bf:
         1c:43:12:a2:d1:c3:2b:79:7b:08:4e:5d:55:3e:91:00:5d:ab:
         a8:0e:9b:84:41:71:6b:7f:4d:10:3e:8e:11:2a:61:97:b5:4c:
         1e:93:de:ca:44:64:f6:27:55:af:85:26:fc:4b:c3:32:1c:53:
         e0:ce:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:46:55 2026 by rpki-client