Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa
File:                     a9b3dd06-548a-3297-a7a1-6349330219b7.roa (raw, json)
Hash identifier:          SwOt0xxZuCPbfojOiCFSJrpsMoruvVjmO+l2bCgSMyc=
Subject key identifier:   01:84:B5:DF:F3:D2:85:60:29:A3:6D:F8:3F:42:75:10:DA:0A:8B:BF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9FDBDDD356ECFC04AFB80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:fd:bd:dd:35:6e:cf:c0:4a:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=2e1267a9-ccfa-4c85-969a-a10e4699a28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:2b:e0:3b:09:1c:6d:94:e9:28:28:f8:cd:
                    20:62:52:85:04:d4:bc:6a:c0:f3:5c:2d:cd:3f:35:
                    e0:f0:9e:22:38:7a:7a:32:29:ba:a5:06:fc:fa:19:
                    b0:16:89:1c:f5:06:aa:d7:9a:2a:3e:0d:d2:2e:fe:
                    49:6f:80:77:a6:4a:64:9f:12:bb:20:1f:78:93:c1:
                    65:42:58:c9:c3:d8:09:cd:1f:e7:c6:82:dd:07:11:
                    ce:ec:c7:23:8e:a2:61:ee:cf:21:37:b5:39:12:c5:
                    1f:e8:bc:5f:f4:27:25:5e:fd:70:8e:c6:52:10:4f:
                    4d:12:3e:83:57:a5:1e:ee:89:59:9f:70:95:bc:db:
                    4c:73:3b:43:a5:a0:51:22:d5:c7:ff:06:ce:01:83:
                    09:34:b7:80:d7:62:41:86:a3:ec:ad:c5:ee:04:a9:
                    32:35:63:88:df:82:73:1b:97:6b:5c:34:bd:5e:f2:
                    4a:6c:22:04:a3:7a:e6:a4:d6:02:c3:78:17:07:af:
                    a9:63:e5:ae:7c:27:5b:67:e0:ba:36:e1:8f:74:9d:
                    ef:0b:5a:15:b1:1b:ab:50:64:ac:97:f3:bc:99:2d:
                    ea:f9:97:aa:21:38:be:3b:0c:d6:ac:7d:d6:25:41:
                    02:66:8a:f5:47:a0:fd:c4:24:d6:46:e8:46:d4:6c:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:84:B5:DF:F3:D2:85:60:29:A3:6D:F8:3F:42:75:10:DA:0A:8B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:99:b7:a2:12:20:21:82:e8:1b:df:6d:f5:f7:d2:47:f8:66:
         23:b6:b7:f3:60:a5:45:a0:b4:7d:3a:fe:49:f5:5a:14:7f:e6:
         c0:47:9e:81:37:61:ca:df:fe:25:7e:0e:b9:09:7b:5e:c2:ca:
         85:72:dd:66:93:68:4d:5c:a9:af:19:fc:f6:0c:1f:4b:ab:d6:
         90:f2:31:78:c0:fa:73:e1:1a:00:4d:63:81:be:e3:19:7e:7a:
         db:cb:92:14:89:e7:c7:2c:22:56:fe:e2:45:91:d1:e8:13:2f:
         11:6e:93:a0:54:40:0b:05:af:d5:c7:50:f7:b0:7c:65:62:47:
         db:4e:f8:63:ee:db:d1:a7:59:af:2c:7a:73:b8:8d:b2:2a:69:
         cb:53:b0:73:6b:25:5e:f9:cc:7f:f9:b9:ac:d9:f8:be:c7:17:
         45:c7:3a:8e:e2:d2:37:d5:bd:77:3e:02:92:75:34:a4:cc:d2:
         73:55:e9:40:08:ee:23:b5:3a:a1:78:08:5c:22:db:a0:ed:70:
         b7:f9:4e:3a:b1:40:4b:46:38:f0:2e:67:07:8c:03:c6:0a:6d:
         e1:af:e4:78:82:c8:e5:74:5b:70:62:66:26:ba:32:e1:c9:71:
         a2:7b:41:36:62:db:5c:eb:24:4e:ca:bc:34:c8:2e:ba:0a:a1:
         6c:94:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:23 2026 by rpki-client