Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d8f58e6-a5fb-3ca7-a531-8ae5b36c7ce5.roa
File:                     8d8f58e6-a5fb-3ca7-a531-8ae5b36c7ce5.roa (raw, json)
Hash identifier:          MGu39arW9qxG0rSXC7IZLw+U762hY5ZOUI4TWhwiJ5U=
Subject key identifier:   89:00:B5:30:66:30:33:A8:33:88:5B:28:EE:0A:89:59:8A:46:C5:1D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9E004617AF5CE400E5B40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d8f58e6-a5fb-3ca7-a531-8ae5b36c7ce5.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e0:04:61:7a:f5:ce:40:0e:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=e2680dea-2b48-46d3-b967-9692f81d4dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:e4:ab:c5:fc:ca:97:02:72:3b:78:45:52:
                    f0:94:3d:59:c6:12:a3:aa:0f:cf:95:d3:36:da:3a:
                    d8:5b:5e:55:72:ed:b6:c4:0d:49:54:4e:9f:8e:26:
                    0e:4e:da:0c:f9:28:2d:49:a4:f5:be:f0:37:a8:14:
                    76:1d:9a:1e:a2:ba:52:3f:ad:07:26:8a:61:6b:93:
                    0a:94:f9:6b:a3:db:4c:e1:2f:97:cf:d4:01:c1:63:
                    dc:47:c5:c5:71:0e:3e:6e:b9:d4:13:87:cd:42:e6:
                    49:6b:79:e8:3b:2c:c0:cd:d2:0f:a0:90:e4:00:08:
                    0f:69:97:ab:3a:bf:51:3d:23:05:e8:5b:8c:e4:4f:
                    8c:e4:63:66:26:a1:70:60:9d:d2:82:7d:8a:58:01:
                    37:92:06:4f:86:77:e7:c3:66:63:f3:3d:af:a0:18:
                    d5:46:88:34:b9:87:53:7b:1c:a1:1e:bd:bb:ad:1f:
                    10:66:a8:38:cb:e7:ef:05:04:42:77:41:01:2b:13:
                    ed:76:89:aa:78:8f:f5:aa:6d:68:26:99:26:f2:b0:
                    47:61:a2:9e:74:7f:5d:2f:16:64:98:92:27:7d:9a:
                    ea:4e:2b:56:09:69:e4:63:d0:32:b5:63:fc:24:df:
                    1a:c5:0c:b0:ca:b6:ee:98:a0:d0:08:15:f1:1d:f2:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:B5:30:66:30:33:A8:33:88:5B:28:EE:0A:89:59:8A:46:C5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d8f58e6-a5fb-3ca7-a531-8ae5b36c7ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:93:fa:d6:19:dc:86:6f:b3:7c:6e:bc:ed:6a:53:d0:a3:fe:
         97:f8:7d:e2:35:5b:13:5b:93:c8:6f:ad:10:bb:b7:e9:0c:26:
         c3:58:15:9c:97:39:d1:78:73:e0:30:ec:d2:c1:6d:72:96:61:
         62:4f:57:08:7c:fc:ce:fa:33:44:a5:9a:18:c0:7e:86:df:0c:
         73:9a:69:72:c7:62:5a:77:66:91:47:4b:22:59:09:26:28:36:
         dc:59:93:d3:a9:8a:80:2c:32:d1:c8:3b:87:a3:3a:48:cd:7d:
         1b:5e:e0:83:58:72:d4:86:10:09:3b:c9:79:24:70:b8:e9:13:
         ce:cb:91:d1:00:cc:72:91:39:09:de:9f:73:a8:a5:d6:b7:cb:
         47:de:c1:7e:94:eb:2a:8f:44:88:a7:ca:3a:f0:89:c6:ad:a9:
         b7:07:0c:18:72:31:fd:5a:4a:c0:02:00:f7:3b:b2:4d:8c:55:
         8d:b3:61:b2:ed:f1:7e:48:55:dc:0e:10:a2:4b:21:da:0c:63:
         9b:36:84:68:dc:12:f4:e2:78:c7:ed:06:2b:7a:6e:60:55:90:
         94:50:ef:c5:71:74:fe:9e:ca:ba:3c:02:89:69:38:65:0f:0f:
         e6:b9:1a:5c:43:6b:8f:ea:04:18:a9:b1:00:63:69:33:a8:7e:
         94:b8:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:42 2026 by rpki-client