Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bda2d0cd-9308-3f9f-bf7b-29870c549d70.roa
File:                     bda2d0cd-9308-3f9f-bf7b-29870c549d70.roa (raw, json)
Hash identifier:          3xC9BM/A/ri+jRD77bm+MfnWZUgp3okIzVQJXGPP4LQ=
Subject key identifier:   8E:0E:02:14:13:62:E1:7E:F2:C8:A6:E4:BF:C4:7E:AE:F8:B9:09:8A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AD0D666F1C5EF0986620E3E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bda2d0cd-9308-3f9f-bf7b-29870c549d70.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        108.178.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:66:f1:c5:ef:09:86:62:0e:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=27a7f468-d54f-46c3-b553-ea8ee3b1f899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:84:61:c5:97:59:57:49:43:0b:ac:05:03:
                    78:b1:2f:6f:85:de:10:2e:85:23:a0:af:18:ba:12:
                    61:b4:4f:f5:55:54:b3:fa:35:48:5c:bf:7b:0d:fe:
                    15:8f:ae:da:03:15:34:c0:6a:ba:7a:7a:4a:5f:59:
                    42:f5:32:5c:f3:71:8a:b7:07:93:f1:eb:89:0b:3b:
                    cd:e8:d1:8b:01:7c:f1:90:43:00:26:a6:7d:6b:07:
                    23:d3:33:5d:fe:8b:a6:24:6e:6e:ce:7d:67:34:dd:
                    38:ee:f9:4d:5d:16:33:c0:c3:0e:51:98:94:22:aa:
                    ef:fe:39:c6:71:8d:12:26:40:30:6a:b7:7c:a1:81:
                    7c:22:4c:bb:53:bc:9d:f4:29:e2:12:0b:e1:d6:ca:
                    b7:f9:ea:a7:48:6e:2b:43:9b:4e:b8:6e:a1:e9:18:
                    ce:84:06:98:a0:fe:37:d9:31:f1:35:9e:2f:24:7e:
                    21:28:63:97:15:0f:1e:1b:b7:8d:09:82:23:17:22:
                    8f:f2:1b:30:b6:cc:d8:c2:20:e4:b6:a2:b3:83:23:
                    5a:05:54:92:b0:11:fd:f8:14:a3:d8:07:ee:a2:ff:
                    e2:2c:49:36:41:7f:7f:fb:f9:dd:43:50:59:e5:35:
                    70:77:6d:48:99:41:29:c4:25:89:48:7a:ec:aa:fa:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:02:14:13:62:E1:7E:F2:C8:A6:E4:BF:C4:7E:AE:F8:B9:09:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bda2d0cd-9308-3f9f-bf7b-29870c549d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:9c:47:e2:24:b8:22:91:bf:a3:7e:ac:4a:fd:22:f8:bd:
         e0:8b:75:ae:fd:8b:14:ee:88:71:a9:96:d9:ab:6c:bc:8c:c4:
         9c:f4:16:be:4b:73:a6:6b:a6:8d:00:0b:01:57:7a:4a:73:26:
         34:9d:3b:17:b3:56:05:5c:41:d4:ec:a3:8e:b1:d1:0e:d7:71:
         62:ee:2f:20:a8:51:bb:bd:37:82:95:2e:f0:ee:ea:0b:87:ca:
         f1:b5:9a:44:ce:e6:87:59:1c:d7:2d:63:5a:d5:87:f2:41:74:
         e5:ed:cf:f1:86:75:05:61:1d:da:51:19:3d:bd:47:f2:77:dd:
         7e:35:76:56:04:08:5d:c2:5d:71:f8:d0:4f:67:27:3a:d0:c1:
         13:fe:3e:ad:9f:be:cc:cf:ee:6c:44:33:32:df:4f:2d:d6:c9:
         c3:44:11:18:a4:11:98:91:5d:d9:7a:4c:0a:d9:48:34:d3:71:
         b8:88:a0:9a:e2:39:ae:36:81:f0:85:4f:06:1f:6b:c1:49:b0:
         0a:87:12:2c:29:4b:6e:79:c9:c9:de:77:1f:44:b9:bf:ce:5c:
         18:5d:1e:9a:72:5c:17:7a:43:78:3e:3b:01:fd:dd:0a:8b:97:
         f4:4c:2f:f7:98:0a:31:51:56:09:13:94:6c:73:5d:3e:08:86:
         96:20:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:04 2025 by rpki-client