Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa
File:                     610da70e-9d51-38a9-a208-0bbd0c68575e.roa (raw, json)
Hash identifier:          OOxNhIvzFcsng/6hDwSTxIhdhGuC+8DOqqFgCqxX5NE=
Subject key identifier:   85:46:BA:D5:A8:F3:36:67:62:C2:B4:E3:49:91:D3:52:66:76:CE:C7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EF44CADA1CA24CF169741A100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        108.178.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:ad:a1:ca:24:cf:16:97:41:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=a9e135aa-0b47-4f47-9714-0d4cf4b09333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:75:46:17:b2:6e:93:50:c3:61:d5:b3:23:
                    32:8b:2e:01:e3:d3:ec:69:7e:08:b9:99:42:a2:ab:
                    e6:05:83:18:fc:c3:db:5d:3c:69:b2:46:66:d9:73:
                    10:57:ab:91:7b:92:5c:2c:c6:e0:3c:98:8c:f6:9a:
                    a5:1d:6b:77:01:04:a8:b1:1d:d9:bb:bd:38:29:39:
                    29:1a:a5:ed:de:80:c1:73:01:6e:5d:72:fb:12:08:
                    a2:d0:e6:fa:e6:d7:ce:2f:ac:ac:70:dd:31:e3:66:
                    00:94:29:2a:33:d0:ae:c8:9c:0f:70:b4:3e:d0:d7:
                    42:ec:65:c4:ac:4e:45:fe:98:b8:52:51:25:b0:89:
                    5a:40:b9:07:63:2e:16:bc:ca:e2:a4:72:80:b8:3f:
                    94:f5:1e:62:9d:bb:ac:13:a0:e1:60:0f:bc:b2:98:
                    25:93:08:44:aa:fd:a9:c6:e2:d3:c6:bc:a4:83:f7:
                    bb:c4:58:3b:9f:76:78:8f:93:56:e3:1d:51:53:24:
                    cd:bd:f9:f7:09:9e:87:9b:8a:05:3f:f4:b3:bd:35:
                    ce:ed:e5:da:06:d2:b4:f5:5f:86:33:b0:b9:77:ae:
                    2b:07:10:7b:1a:33:4e:ac:8f:02:b2:f2:a9:7d:4e:
                    db:33:31:b5:dc:d4:4b:d7:ce:3e:26:11:b0:36:f2:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:BA:D5:A8:F3:36:67:62:C2:B4:E3:49:91:D3:52:66:76:CE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:64:0a:2f:ad:d0:e2:af:dd:67:e9:d0:60:af:a5:2f:6c:72:
         10:87:89:7d:b7:25:95:c0:31:5a:31:93:4f:a4:71:b7:63:ed:
         bb:0c:80:e0:53:14:de:42:2f:ed:f0:22:cf:f5:6a:16:a9:8a:
         d2:cb:51:60:de:3a:de:1d:f8:ff:3e:eb:07:67:31:4b:a0:21:
         e5:ca:00:d6:b8:25:8c:4b:f9:88:51:c9:89:67:c5:29:46:56:
         ff:2b:d5:51:03:33:3f:79:71:36:4d:9f:39:4f:59:bb:b9:91:
         0b:db:37:90:66:33:e7:33:ad:55:2a:4d:5c:b8:63:f0:20:ab:
         7f:9b:75:01:e4:88:67:ba:ec:f3:c5:8a:8d:e4:38:7d:ca:1a:
         2b:91:db:de:b2:26:30:6b:08:d3:63:54:23:36:2c:9f:74:2b:
         b5:68:74:55:8d:db:38:6f:65:60:aa:96:01:56:ec:7c:64:53:
         84:97:a5:14:c5:ca:a0:81:b9:25:50:61:f9:02:c8:c9:2b:34:
         ae:b8:b0:17:71:bb:c4:62:29:9e:7a:95:88:de:3e:6b:54:da:
         69:d1:61:ff:28:ba:e8:8a:91:55:52:3b:b3:19:03:ca:49:f9:
         8a:be:a6:74:12:f7:7e:2c:9b:48:ae:28:b8:fb:f2:86:c4:91:
         95:c2:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:16:43 2026 by rpki-client