Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/934d8800-0245-314f-a8ce-e6d482456f57.roa
File:                     934d8800-0245-314f-a8ce-e6d482456f57.roa (raw, json)
Hash identifier:          bb1ARxL00ISZLC8n5J6YK8Pf6lapNFP1Xv+1LxDmzWs=
Subject key identifier:   10:B3:CF:60:94:C0:C2:E1:D8:4B:E8:42:A3:B5:9E:AE:09:C4:07:63
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9DFE4F1DD41317354EB00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/934d8800-0245-314f-a8ce-e6d482456f57.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:df:e4:f1:dd:41:31:73:54:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=537e3fc4-9d27-48e8-b35c-92af3674df4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:92:08:56:35:ea:35:1a:39:80:f6:7f:ca:
                    ef:78:a5:0e:5b:5d:4c:6f:c5:b3:b2:fe:b2:7e:c1:
                    c0:75:7b:68:f4:6f:4d:e0:e6:70:a6:3c:56:93:f3:
                    b7:56:35:07:c1:d4:1b:46:a2:0a:ee:47:dd:b4:cf:
                    b6:60:db:d1:f7:af:62:44:56:96:50:ab:7f:eb:30:
                    a9:fc:1b:0d:e0:a7:dd:bc:64:51:6a:aa:c9:ef:76:
                    f3:7b:28:2a:f1:fe:49:02:69:06:ad:29:41:a2:e7:
                    2f:3c:d6:cb:02:cb:5d:3f:e3:18:03:c4:77:e1:8e:
                    cb:94:70:f2:c3:6d:38:12:8d:f8:b6:af:27:81:e7:
                    33:a8:05:bd:bb:08:79:e4:43:15:12:db:bf:76:d9:
                    59:bc:2c:f7:96:ce:72:41:6b:d5:ab:bb:57:a4:62:
                    f9:a6:81:bd:de:af:44:b2:ed:29:75:07:f6:6d:33:
                    8f:0d:d1:b1:e5:bc:17:90:c2:71:d7:a6:f3:e3:7e:
                    56:9e:0a:1c:66:2a:09:24:96:20:4e:fd:a1:68:a7:
                    bc:70:66:1d:91:36:8c:7e:f5:e0:0f:e7:9c:42:1e:
                    d7:c4:52:4d:3b:e6:6d:0d:26:2c:71:65:6d:5f:75:
                    c8:f1:0c:82:8d:ef:61:32:de:4e:5b:cd:5c:b2:aa:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B3:CF:60:94:C0:C2:E1:D8:4B:E8:42:A3:B5:9E:AE:09:C4:07:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/934d8800-0245-314f-a8ce-e6d482456f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:c0:d6:eb:88:9c:9a:05:16:ca:d4:1a:bd:82:ac:51:ec:
         dd:37:24:c3:e5:fb:77:05:2e:db:ca:0c:4d:65:ef:1f:90:8c:
         c8:e3:bb:ce:b3:ee:c1:c6:4a:a4:f4:2e:f7:2b:60:1d:d2:8a:
         01:30:0b:4f:be:21:5e:11:5e:81:53:88:e2:fc:65:72:e6:f3:
         8c:9a:08:52:cd:18:aa:42:5c:27:aa:dd:ec:ee:ad:83:45:7a:
         49:ce:6a:59:03:79:83:ee:10:f8:92:55:ce:d4:6c:4d:2c:ae:
         8a:3a:e9:9d:ee:03:14:a8:e1:ad:19:e3:99:72:c8:51:de:ef:
         f5:f2:8f:48:49:08:cf:c6:18:21:e1:9c:06:1f:5e:33:29:5c:
         dd:c8:44:00:5f:1b:35:88:f9:46:8a:f9:4a:b7:7f:d9:c3:0c:
         f5:a4:9c:75:91:37:c7:36:df:09:89:2e:ed:5b:95:80:38:07:
         77:6e:42:75:41:df:54:e6:10:b8:ec:3c:06:c0:38:db:7d:b5:
         65:b9:65:b7:03:05:58:12:df:ff:9e:83:dd:52:46:70:ce:b1:
         82:6c:e5:a8:04:ad:4a:33:3a:55:c9:9b:39:ca:0d:80:24:cc:
         7a:a3:ef:20:83:59:49:d3:8f:cb:7a:9d:eb:c3:6f:de:f2:b4:
         da:c6:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:36 2026 by rpki-client