Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa
File:                     39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa (raw, json)
Hash identifier:          XoaoJhPP82lS6OwYyLa4m/3kJRtg+PdV9flef4ICChQ=
Subject key identifier:   98:4F:54:56:C9:3C:BC:DA:6F:68:FE:83:35:A5:62:D5:9E:7A:E1:49
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9FB8A9CDE8218F1F27780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:fb:8a:9c:de:82:18:f1:f2:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=859e1ccb-a140-47e8-a85a-e3994b52ef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:33:e8:51:1b:62:f8:49:84:67:0c:41:73:
                    14:cd:37:17:df:49:be:17:c6:ab:e4:71:48:25:e3:
                    c0:d6:e3:11:03:cf:fd:d1:0b:ef:89:39:a5:72:26:
                    7a:bb:e8:a8:fb:77:06:8a:7e:09:ff:b6:0c:db:10:
                    7c:1d:60:c7:56:2c:04:de:bd:ca:df:63:f4:de:4b:
                    70:5b:08:ee:e3:68:75:91:21:c0:93:f6:14:f9:26:
                    19:55:7e:bf:be:9d:b0:6c:2b:3f:d1:24:40:f6:22:
                    41:38:c0:c4:70:92:f5:3f:0d:47:16:16:c4:1a:ee:
                    ce:00:8e:d0:ff:d3:2f:c3:d2:56:aa:a1:64:fa:56:
                    f9:f1:f2:57:2e:b0:6b:78:6b:9f:ca:f0:57:c4:29:
                    a0:26:03:3d:b1:49:c2:1e:eb:73:30:26:c9:f7:60:
                    e5:07:50:fe:72:3f:dd:04:e1:34:55:5f:5d:cf:61:
                    bb:cf:1b:ec:81:61:1f:f4:12:1a:6a:ec:c5:db:30:
                    a4:d5:f1:39:04:25:c3:0e:27:c7:57:e9:32:19:c3:
                    d5:a1:fd:b9:4d:85:fd:e2:ff:1e:fa:5a:14:18:6d:
                    ce:b7:32:59:c7:fb:ec:05:d9:72:46:45:01:2f:66:
                    56:d6:72:34:61:af:40:2a:63:2c:4e:ab:8e:14:84:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4F:54:56:C9:3C:BC:DA:6F:68:FE:83:35:A5:62:D5:9E:7A:E1:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/39dd2d93-c649-306e-ae8b-55aa6bf9f22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:81:a2:4f:77:e3:ae:6a:c8:44:72:d7:bf:60:cb:c0:9d:
         39:5a:97:1f:f1:68:84:9e:c5:6b:0a:37:32:b8:5f:d8:dc:51:
         8c:45:b7:0d:01:c0:43:11:ac:5d:8e:df:6b:a4:55:c7:07:c0:
         ea:13:19:17:25:e1:75:bd:07:ce:99:2a:d0:50:8a:e6:cc:f2:
         2e:dd:5d:b1:75:ba:eb:bf:a3:7a:81:db:a2:0e:73:2d:59:d4:
         65:a2:c9:65:85:48:aa:29:fe:33:34:d0:0b:97:22:9d:a5:30:
         ef:d1:b9:1a:7e:a9:99:4a:79:7c:22:4c:82:8b:aa:9d:ce:b6:
         62:6c:aa:d4:e1:55:cd:d7:3d:76:0d:60:02:8e:dc:4a:b9:21:
         1d:57:9e:46:6f:59:20:e4:6e:40:0e:91:b2:b0:fe:78:d2:e8:
         c0:13:87:5b:e9:2d:f0:96:ac:6c:fd:ef:55:8d:40:3d:c2:58:
         22:80:a0:26:4b:0f:ce:b5:b9:98:9d:f2:e5:cb:40:34:46:ef:
         82:0d:ac:af:c4:f8:ca:c1:9c:0f:fd:c0:b1:e6:54:7a:4a:e2:
         95:29:73:56:49:f6:13:a1:f1:05:cd:c5:ad:5b:3c:a8:a9:c2:
         7f:ec:95:40:6e:31:1b:6b:56:24:a4:87:50:35:39:28:5e:1f:
         48:af:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:02:14 2026 by rpki-client