Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9a7a331-9358-365d-9847-d85d99ad19dc.roa
File:                     b9a7a331-9358-365d-9847-d85d99ad19dc.roa (raw, json)
Hash identifier:          Bs7FMAkdF5C88CyD8A4y4rARXnuSVfy56K4goaqA5YU=
Subject key identifier:   35:28:0D:D0:5C:26:7D:11:70:A4:E6:9B:31:CE:FF:FA:0A:BC:4D:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9E4E33BEDF68AE12BDB80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9a7a331-9358-365d-9847-d85d99ad19dc.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e4:e3:3b:ed:f6:8a:e1:2b:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=8fc34feb-d583-4535-b549-27358bc83ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:e6:72:85:9e:f1:24:ec:4d:d7:c2:c4:37:
                    d5:ea:96:5a:c8:ab:58:9b:23:15:7a:af:2f:bc:9a:
                    7a:ee:a9:bf:51:40:a3:9b:9c:36:6c:5d:7f:67:d0:
                    26:d0:0a:09:21:25:9a:18:7e:d4:7c:0b:da:6e:f7:
                    bc:5e:23:dd:f9:6e:3b:65:f0:3a:e4:b4:08:e1:ea:
                    88:8a:09:e2:85:1c:68:1a:60:95:4d:a0:c4:a7:60:
                    10:64:89:63:9c:02:df:7f:ad:e1:52:fd:51:d1:5b:
                    e6:91:37:9f:67:b4:51:19:ea:5f:de:dc:8d:65:a8:
                    c0:2e:c2:d6:1a:d5:13:ff:25:79:71:48:04:f4:c8:
                    78:48:66:81:d1:14:7c:35:95:c1:28:8b:b5:73:9c:
                    c8:d5:07:c0:67:4e:a9:25:bc:f1:cd:35:91:46:cb:
                    91:5a:dc:b3:96:b8:9e:76:43:b9:26:f9:1a:64:3e:
                    8d:09:99:8d:37:e1:7f:19:e8:aa:e3:d8:f8:6f:68:
                    37:d4:a4:e1:e1:f1:4c:44:cb:b0:99:92:79:7b:28:
                    61:ba:82:71:56:1e:82:d3:57:c1:bf:df:f5:a8:41:
                    9b:66:22:64:f0:d8:8e:ae:c5:e2:d6:55:86:b4:27:
                    e6:d9:23:4d:1f:ac:0b:fc:d0:be:fa:67:34:d0:9a:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:28:0D:D0:5C:26:7D:11:70:A4:E6:9B:31:CE:FF:FA:0A:BC:4D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9a7a331-9358-365d-9847-d85d99ad19dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:70:8c:70:a9:b0:19:f8:59:fd:5f:4c:4f:11:e7:f7:ee:
         9b:26:be:59:01:31:21:5c:e8:2f:06:dc:b5:d7:41:1e:12:45:
         ce:d8:62:ae:97:c0:df:73:40:d7:fa:67:44:a2:5e:a4:0e:70:
         79:3d:f8:32:a4:b4:bc:c1:8c:2f:2d:8e:4d:83:d2:4c:77:84:
         92:23:c5:fd:61:bb:3f:fc:1f:36:f5:46:b7:15:17:f3:7b:6d:
         62:aa:98:11:4d:d0:5d:cd:4c:80:bd:f6:f2:4b:9e:b6:72:62:
         08:b8:b5:09:cb:ba:91:0e:42:b9:b3:97:7b:b4:d7:43:5d:4b:
         84:25:d1:46:e7:f8:9b:66:2d:b6:61:37:e1:82:49:38:e0:16:
         44:f6:ad:15:67:bc:08:db:27:45:89:9f:47:8e:4e:e0:c2:c0:
         d3:1c:4d:16:33:20:88:ce:da:c9:5a:dd:6e:ef:05:9d:f2:03:
         97:fb:f4:de:8c:e6:50:2b:8d:fb:d1:f6:ac:66:98:6b:4d:68:
         63:67:58:7a:3c:9f:b6:29:a3:36:66:25:d6:3d:9c:78:a9:13:
         9a:cc:61:01:73:c9:80:1b:74:96:41:11:15:ee:8d:cd:a4:25:
         e4:aa:95:62:d8:b8:12:97:44:f3:17:81:93:0d:dc:3e:2f:77:
         fc:6e:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:47 2026 by rpki-client