Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa
File:                     87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa (raw, json)
Hash identifier:          qNDJsaOi8I4xvIXWFphIhg4QFm1rd8soc/ErlGJMiKI=
Subject key identifier:   DE:D1:8E:2D:5D:35:E6:CC:86:D5:BD:37:17:93:47:3C:A6:A3:F1:80
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD0D6663040896B333C636E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        108.178.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:66:30:40:89:6b:33:3c:63:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=56a245f6-e7f6-44d1-9409-15a45d9afc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:c1:60:aa:b6:69:ee:34:0c:89:1c:bf:bb:
                    98:a6:34:68:79:d3:c2:7a:64:c8:3c:fa:b4:ad:3b:
                    69:be:4e:c1:ce:38:66:5c:74:ef:8c:a6:ca:da:57:
                    96:8d:2a:62:f8:21:f8:9a:a3:fd:fa:dc:4f:20:4e:
                    73:32:d4:14:f5:7e:d7:27:ca:32:00:75:44:cb:85:
                    99:0b:3c:4f:47:f1:c1:19:96:8b:57:0a:9e:c8:6a:
                    e9:ee:29:58:57:9f:a3:ea:24:ce:b3:e3:e3:53:84:
                    4e:f7:de:b8:3e:d6:dd:72:40:18:ac:e2:c3:61:4e:
                    9f:11:16:d6:34:d0:19:93:45:0d:2f:6b:a8:99:41:
                    ce:09:e9:06:e2:d9:f7:8c:3e:8b:55:65:d5:68:5a:
                    42:9d:16:b3:54:18:ea:3f:38:c2:9a:cc:f0:85:7a:
                    26:58:48:e6:41:cf:33:4c:c4:dd:02:5b:3b:9e:29:
                    ae:fe:2c:fe:10:b9:0a:40:bc:e0:12:8a:9e:1a:b9:
                    42:8a:55:b2:ba:1a:a4:4a:3b:f4:a2:43:74:c1:cd:
                    78:56:02:14:8e:54:1a:a0:94:39:e4:ed:86:4b:92:
                    75:16:99:f3:12:a8:09:30:03:b2:f1:50:8b:c4:5e:
                    9c:7c:de:9f:d7:5b:a6:b3:62:a4:bf:a9:06:c0:2a:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:8E:2D:5D:35:E6:CC:86:D5:BD:37:17:93:47:3C:A6:A3:F1:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87e80ae4-4c66-3ed6-88c7-ac3a08ed0ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:54:6c:04:1c:2a:ba:45:74:27:95:da:fe:d5:3f:56:e6:
         8e:3d:93:c5:ae:44:0c:07:d0:28:73:11:33:b0:1a:89:17:85:
         d5:47:be:cd:fd:8a:2e:1f:84:61:0a:5c:b8:e8:53:10:f0:34:
         80:e7:c7:c6:40:7c:55:75:87:f4:8c:0e:df:06:be:cf:b0:02:
         71:ad:e1:99:80:4f:6e:24:e2:43:ec:8a:1f:02:c0:29:6f:0c:
         dc:6f:e2:82:b1:d9:77:86:d7:a3:15:ca:0a:4e:e6:4b:7c:64:
         3d:cd:78:77:37:27:73:ee:22:69:6f:85:c8:4b:b4:88:e0:c0:
         ee:11:b2:17:3f:2b:38:55:06:1d:59:55:e0:33:f3:39:b6:f9:
         72:e6:61:fc:53:83:fb:3c:f2:d7:6d:bf:5d:94:fc:e6:03:99:
         b6:93:a1:b5:f0:0d:31:93:98:25:30:64:de:0c:21:b0:cd:39:
         7a:28:39:f7:4f:a8:ed:02:bc:1b:58:83:06:1c:da:c4:36:b2:
         54:31:d3:28:f8:35:25:18:a6:4e:11:ff:d9:be:c9:52:71:7f:
         e4:59:db:20:68:d7:db:0a:77:9e:0b:fd:9f:fe:6f:de:a4:ec:
         58:13:04:76:4a:b2:9d:51:2f:cd:bc:af:b7:5b:ad:51:e2:25:
         ac:52:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:58 2025 by rpki-client