Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58989827-5598-3052-974b-008e2ebd2a81.roa
File:                     58989827-5598-3052-974b-008e2ebd2a81.roa (raw, json)
Hash identifier:          ubGnfcJ4XwnsH9fl+4sK1pEjcZ9xTkRGHssrUUUILEM=
Subject key identifier:   4B:F4:D6:30:D9:3D:80:0D:4B:AE:4A:9F:4A:E7:2F:B4:2D:53:5C:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD0D63E3105322E5951D37120
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58989827-5598-3052-974b-008e2ebd2a81.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        108.178.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:3e:31:05:32:2e:59:51:d3:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=985853b4-ec8c-4f5b-890d-958dca3221c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:7a:09:3e:40:64:5d:f4:5a:e2:51:0f:21:
                    ed:e1:6f:6c:cd:b2:7e:0a:5f:14:17:44:af:cd:7d:
                    ae:19:4b:8b:a3:0e:e3:49:9a:30:b3:46:07:f4:39:
                    bd:b6:b2:99:ad:bb:82:c1:41:09:01:6b:b1:3a:23:
                    fb:74:0b:36:97:1c:e4:f0:74:bb:c2:5e:9d:3b:a4:
                    30:b5:32:40:46:e9:5f:68:47:51:ac:6b:90:1c:da:
                    a0:b3:47:c6:49:02:38:ef:50:52:cc:00:9b:b2:c7:
                    72:09:79:36:c2:13:ff:68:3c:02:c7:f2:62:d7:62:
                    08:04:02:f9:a1:8c:10:cd:6b:dd:e1:55:27:16:eb:
                    04:a7:1c:f9:66:71:4a:e8:65:8b:fe:29:74:ac:2d:
                    2c:16:9d:93:5e:e2:a9:90:7f:ab:2d:f2:48:9d:78:
                    31:09:5d:9a:82:45:59:76:8b:52:19:bb:25:6a:3c:
                    2d:27:59:3d:60:37:d0:8b:e0:3b:2f:8b:fc:6b:4d:
                    a4:a6:a0:50:6c:99:8f:a7:5e:e0:4f:0f:86:39:fd:
                    38:fe:f4:66:3d:7d:b5:ac:b3:8d:de:32:81:4f:29:
                    08:68:d0:dc:55:a8:67:a7:7a:c3:3b:81:a6:bc:73:
                    7c:da:5a:9e:fb:80:a4:48:43:77:95:e6:90:b9:d1:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F4:D6:30:D9:3D:80:0D:4B:AE:4A:9F:4A:E7:2F:B4:2D:53:5C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58989827-5598-3052-974b-008e2ebd2a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:ce:28:e1:59:c3:b6:e4:11:73:d7:20:2d:20:1c:7d:54:
         f3:e5:6f:9b:46:86:06:e9:d3:5a:02:de:f4:79:e7:21:df:42:
         e7:d5:4f:96:8f:fb:b5:29:5d:45:c3:ac:0d:ba:15:92:76:15:
         61:34:2a:ea:44:0e:ef:e3:6a:01:8e:d0:cf:f2:21:1e:41:18:
         92:8c:13:32:86:5e:09:4d:d5:69:e7:73:f2:c4:99:c1:65:5b:
         d1:be:e8:d1:2f:cd:43:d7:9d:93:7c:43:2c:1c:da:33:fe:49:
         8f:fa:22:ab:fe:d7:a5:6b:44:b8:35:8b:72:d6:f2:d7:ef:f1:
         04:3c:1c:3f:cc:81:6b:65:2a:a5:1a:02:c7:15:68:a8:35:4e:
         87:81:7f:23:eb:91:bb:fb:af:23:4a:b2:1b:9e:37:ac:e0:9e:
         7c:0e:fa:9c:eb:12:2d:07:57:5b:46:6e:51:5c:96:12:df:86:
         f7:b4:f6:ed:9d:1c:4d:f0:bb:8f:84:c7:be:24:0e:92:75:8b:
         f9:33:35:f1:d6:11:3c:e3:53:a2:a5:1c:ef:7d:0d:c3:8c:7f:
         df:1a:45:d1:39:af:31:bf:81:47:75:54:84:b5:fd:8f:bb:8c:
         26:7f:59:b9:f9:26:8b:eb:cc:8c:7a:d5:d7:d0:39:32:7d:1f:
         40:71:6a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:12 2025 by rpki-client