Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa
File:                     610da70e-9d51-38a9-a208-0bbd0c68575e.roa (raw, json)
Hash identifier:          9bE5IILdZ91CTmkwUR1zah6akxy4zbOhtQdzxbXqCkk=
Subject key identifier:   03:D8:0F:5C:4E:68:03:68:E1:7D:7C:AC:0A:9B:D9:4F:32:11:D1:F5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD0D63EA50F39115305E8FE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        108.178.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:3e:a5:0f:39:11:53:05:e8:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=27b295ef-cf0c-49c9-900f-60eece4d0e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:cd:5a:29:4a:4c:37:a8:a8:a7:5a:79:30:
                    67:78:0a:5d:ee:0e:97:7e:ee:1a:ef:0f:45:9b:58:
                    c3:e6:ed:4f:4b:94:9f:72:7f:fb:b0:f1:30:52:6e:
                    2a:2a:21:18:0c:a9:bc:4b:6b:5e:8b:ac:9c:84:7d:
                    0c:04:e6:10:71:64:82:c8:69:57:89:0f:ae:1c:27:
                    60:3e:c7:60:d8:49:a2:18:bf:1e:15:05:5b:6c:0d:
                    11:28:11:f8:be:37:50:f5:20:fd:2a:06:7a:4d:e3:
                    ac:e9:20:31:8f:c0:d7:c1:48:fc:f0:9d:69:5e:75:
                    d3:29:b7:a5:84:67:4c:da:9d:23:36:da:13:b1:30:
                    24:c3:19:29:86:81:e9:2e:3e:b6:74:a2:43:9d:f3:
                    b5:b4:27:f5:45:82:d9:67:1b:ae:4c:b5:65:e5:08:
                    7b:6a:a9:cd:61:e4:8c:a1:9d:43:c8:32:6d:01:eb:
                    d1:64:fa:1e:b7:95:46:43:9f:ab:76:62:c7:dc:60:
                    76:7c:4c:82:e5:84:71:91:c9:37:a3:3d:20:28:b9:
                    2b:a7:11:1a:e8:b0:96:48:1f:df:83:f7:3c:4b:00:
                    97:67:22:24:31:6f:48:8c:ef:04:2a:b6:65:4b:d9:
                    60:e8:ac:e5:56:40:08:90:15:a4:2a:04:33:05:57:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D8:0F:5C:4E:68:03:68:E1:7D:7C:AC:0A:9B:D9:4F:32:11:D1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/610da70e-9d51-38a9-a208-0bbd0c68575e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:53:df:f3:12:cb:40:04:5f:aa:4d:00:f6:ff:e4:a9:05:c1:
         87:6f:1d:4d:c0:95:50:ea:9d:e0:fa:d3:e9:8d:8e:6b:95:af:
         e6:59:6f:10:5a:76:84:e1:37:60:a4:5a:ad:e2:8c:d9:bd:19:
         d0:49:a5:e4:70:f2:3e:8d:72:0e:b4:98:c2:60:24:1b:be:67:
         8f:6c:b6:2e:b6:38:0e:91:85:4c:8d:da:ea:32:00:74:76:97:
         8a:1d:87:b9:39:7a:b0:23:0b:06:74:8c:1a:ee:21:6b:e0:14:
         7f:78:1a:84:98:45:36:d0:b6:d9:13:8a:c7:bd:58:6d:45:89:
         fc:f6:1a:66:b0:7f:be:3b:6c:c9:2e:6b:77:55:7b:ba:59:0a:
         1e:47:4e:e5:4b:8c:6c:07:c5:4f:b8:e7:74:00:75:6c:80:ed:
         3a:fa:7f:dd:e4:55:64:3b:29:bf:7a:85:34:0c:e2:21:2e:f1:
         c4:8e:c1:76:1c:d1:7c:b0:0c:e9:cf:1d:95:52:19:2c:63:b1:
         0a:e1:71:a3:11:5a:0e:a6:47:89:e7:ca:ed:41:f2:02:f0:d4:
         6a:32:9b:d8:81:d9:40:79:5d:0f:07:b7:bc:14:75:f2:f2:3c:
         29:60:2d:d9:67:7d:40:e2:cf:e8:7a:92:4e:fd:c1:80:a2:cd:
         90:09:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:29 2025 by rpki-client