Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6102cf9-b5ca-37f9-ae99-5f1fa1f2fe55.roa
File:                     a6102cf9-b5ca-37f9-ae99-5f1fa1f2fe55.roa (raw, json)
Hash identifier:          41lwtfQN9vn1nMv9UaXWe/rx/9M3gy14keqFr06NOpg=
Subject key identifier:   EB:E6:D5:A0:38:2B:5D:84:EF:01:81:89:C9:4D:F1:FD:FF:C2:A4:E5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9E2568AFD9B9EFF1AA400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6102cf9-b5ca-37f9-ae99-5f1fa1f2fe55.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e2:56:8a:fd:9b:9e:ff:1a:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=a218b8ce-135b-49d2-bae2-18e4a71d4388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:48:76:76:c3:79:d7:99:80:7a:bc:6d:22:
                    e3:e1:55:f8:26:05:fc:ab:02:c4:ba:41:d7:f4:2f:
                    99:c9:ae:d3:d6:d3:f5:0b:af:d4:1b:aa:d2:dd:c2:
                    25:5c:5d:e3:02:8f:8f:4a:d4:d1:63:32:38:60:c4:
                    60:ae:5d:21:a0:94:3e:de:c2:f2:4a:e4:62:81:83:
                    e6:c0:d3:26:ad:86:85:55:8c:44:20:da:a1:a7:d6:
                    35:d2:32:18:20:1e:10:fb:c7:8d:1e:a1:38:0c:f2:
                    e6:c0:44:00:44:33:02:22:38:77:07:33:9a:4f:79:
                    82:82:10:6c:56:7f:26:fc:3b:4e:f3:ab:76:f1:73:
                    81:ec:4e:f0:02:4a:ec:33:14:8b:e5:28:c2:db:2e:
                    34:67:a4:0c:07:2c:49:56:2c:0d:08:13:44:46:a8:
                    b6:14:f2:1a:37:d9:7d:25:69:6b:36:2e:d0:16:83:
                    b1:a2:cb:4b:80:b1:1a:f1:03:fa:9b:3a:3f:9d:55:
                    6c:05:e7:07:d2:79:fd:c8:fa:33:74:e1:b9:8c:4a:
                    12:31:29:f5:9a:00:c1:7f:a1:ff:91:6d:1f:a9:40:
                    ff:36:db:0e:59:dc:d3:6d:a7:23:73:d4:73:41:5f:
                    55:78:7e:b5:05:8e:48:c1:1c:f7:33:e9:95:ab:96:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:D5:A0:38:2B:5D:84:EF:01:81:89:C9:4D:F1:FD:FF:C2:A4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6102cf9-b5ca-37f9-ae99-5f1fa1f2fe55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:63:75:af:76:a4:bc:ae:f8:51:c6:ef:55:84:b3:6d:96:67:
         17:40:40:5c:c1:f0:97:f8:4f:58:8a:00:97:84:d4:9c:2f:f0:
         04:27:49:f9:4c:dc:0a:ff:fb:33:7f:2f:20:7d:33:95:e6:4f:
         70:4f:91:ee:72:53:a3:4a:0b:02:86:30:c7:f8:71:f0:56:e7:
         7a:c3:1a:99:cc:1f:37:fc:53:e9:d9:8b:70:30:ef:f9:18:ac:
         ce:a4:09:69:1c:26:5e:7e:a5:d9:fa:4d:e9:fb:ff:0b:08:19:
         d7:2e:a7:f8:ba:32:b3:35:34:be:93:ba:22:33:00:1a:13:9a:
         27:b3:1b:6b:5c:98:24:1e:65:b6:92:5b:8f:0d:4b:37:5f:23:
         5f:c3:f0:12:1a:86:f0:80:b8:4b:af:82:5b:a6:cb:f7:d6:2f:
         c7:13:05:13:2b:dc:fe:28:71:2c:be:17:49:2d:df:53:1d:2e:
         72:ad:c4:2f:f5:57:a8:5a:48:0a:18:b4:dc:a3:0e:65:64:ec:
         b9:18:2e:58:f6:bd:42:85:b1:32:98:a8:68:d1:fb:a9:db:92:
         49:7d:95:1a:3f:db:53:5b:a1:bc:0a:a0:cb:56:32:41:11:12:
         8f:3e:d5:bd:fe:02:12:4f:4d:31:cc:16:0d:43:6c:be:76:07:
         95:42:ef:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6eJWiv2bnv8apAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk
YTIxOGI4Y2UtMTM1Yi00OWQyLWJhZTItMThlNGE3MWQ0Mzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9RIdnbDedeZgHq8bSLj4VX4JgX8qwLEukHX
9C+Zya7T1tP1C6/UG6rS3cIlXF3jAo+PStTRYzI4YMRgrl0hoJQ+3sLySuRigYPm
wNMmrYaFVYxEINqhp9Y10jIYIB4Q+8eNHqE4DPLmwEQARDMCIjh3BzOaT3mCghBs
Vn8m/DtO86t28XOB7E7wAkrsMxSL5SjC2y40Z6QMByxJViwNCBNERqi2FPIaN9l9
JWlrNi7QFoOxostLgLEa8QP6mzo/nVVsBecH0nn9yPozdOG5jEoSMSn1mgDBf6H/
kW0fqUD/NtsOWdzTbacjc9RzQV9VeH61BY5IwRz3M+mVq5Y4qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvm1aA4K12E7wGBiclN8f3/wqTlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTYxMDJjZjktYjVjYS0z
N2Y5LWFlOTktNWYxZmExZjJmZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINjda92pLyu+FHG71WEs22WZxdAQFzB8Jf4T1iKAJeE1Jwv8AQnSflM
3Ar/+zN/LyB9M5XmT3BPke5yU6NKCwKGMMf4cfBW53rDGpnMHzf8U+nZi3Aw7/kY
rM6kCWkcJl5+pdn6Ten7/wsIGdcup/i6MrM1NL6TuiIzABoTmiezG2tcmCQeZbaS
W48NSzdfI1/D8BIahvCAuEuvglumy/fWL8cTBRMr3P4ocSy+F0kt31MdLnKtxC/1
V6haSAoYtNyjDmVk7LkYLlj2vUKFsTKYqGjR+6nbkkl9lRo/21NbobwKoMtWMkER
Eo8+1b3+AhJPTTHMFg1DbL52B5VC7zo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:16 2026 by rpki-client