Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb240a24-571b-3052-bf7f-604476b7d262.roa
File:                     cb240a24-571b-3052-bf7f-604476b7d262.roa (raw, json)
Hash identifier:          sONKRpUiNuYYxXbpLvCIm89YSjNeb4pWA6wKriJwhAo=
Subject key identifier:   44:6F:03:2B:C5:AF:68:9D:BC:97:1B:75:74:49:5D:C3:D0:50:3D:DC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9E51B0D64D9F52011AF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb240a24-571b-3052-bf7f-604476b7d262.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e5:1b:0d:64:d9:f5:20:11:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=930ecce4-acd6-41c3-a57d-a97451aeff6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:c2:bd:a4:c4:3a:68:02:c7:0b:9b:4e:e7:
                    be:2b:76:cc:7f:ca:dc:d1:31:dd:44:0d:7f:d2:8b:
                    fa:2e:71:f3:f6:9f:69:e0:58:10:a1:c0:f1:9a:fd:
                    12:ef:e5:33:cf:da:f7:83:2c:ca:81:0e:6b:3a:2f:
                    08:9d:a8:35:0d:a3:e5:47:7d:01:69:27:4b:ca:7c:
                    67:c1:be:0a:39:1a:4b:30:18:5f:e4:fe:7a:2f:a6:
                    f2:ae:46:f7:b5:bc:06:6d:e4:35:0b:32:79:ee:15:
                    d6:3e:ab:d9:7b:f0:ad:e2:87:c7:8c:63:4e:97:02:
                    ea:2c:ec:52:75:ea:89:aa:dd:32:a1:04:42:2a:32:
                    57:d8:db:fb:26:45:d6:c5:0a:e7:ec:41:26:e1:8c:
                    8d:b7:9a:75:d9:e4:0a:6c:d4:42:ba:4a:ad:3c:aa:
                    29:20:b9:f7:6e:1d:14:53:d1:25:1c:89:d7:33:03:
                    dd:d6:25:40:a6:93:1a:6e:74:b9:9c:43:77:50:d5:
                    f9:8d:8b:c2:d6:ae:d9:df:72:31:dd:ab:f9:8c:7f:
                    7c:f5:e3:49:0b:af:75:82:04:98:5b:ef:22:85:d6:
                    9e:d4:de:cc:e2:8c:07:6e:55:84:a1:7e:80:4a:66:
                    a0:05:7f:6c:b1:72:d6:38:17:e3:d9:7e:90:38:ec:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:03:2B:C5:AF:68:9D:BC:97:1B:75:74:49:5D:C3:D0:50:3D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb240a24-571b-3052-bf7f-604476b7d262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:b9:59:f2:e9:90:37:95:fe:0a:d7:9a:52:e1:14:02:74:
         c6:dd:ef:c9:36:c6:2a:3e:c4:68:f5:cc:b5:63:93:ba:e9:be:
         7b:39:bd:14:da:08:e7:b6:ad:97:9b:27:1d:79:1f:e6:8a:a6:
         24:43:6b:47:90:3b:d0:5b:40:df:30:59:5e:be:63:1e:d3:ed:
         ae:cc:2d:8c:1f:97:cb:34:fc:56:53:3c:bc:a7:82:55:07:dc:
         98:ac:26:32:4c:ea:87:bc:fe:a5:98:d9:ab:59:e4:d5:9f:47:
         c8:27:e6:2f:66:95:d2:4c:6d:8a:0b:39:df:b4:31:48:21:4a:
         e7:fd:0e:82:99:3f:b0:69:3d:7c:02:b5:35:c2:c8:dd:40:65:
         7a:42:52:57:56:8b:19:98:cb:c9:04:36:81:1d:e5:60:30:1c:
         a4:f5:0f:db:57:05:cd:f1:de:3f:01:a8:85:57:85:0d:91:a2:
         46:0e:08:e8:31:cc:d3:29:32:2b:d2:22:1f:a3:e9:e7:37:81:
         9d:c7:1f:1a:fa:7c:dd:40:a5:78:84:08:00:d5:42:d8:e1:58:
         73:79:98:18:95:63:69:d4:dd:c2:03:c1:43:1b:a0:72:3c:ee:
         e7:36:59:b5:9e:90:8d:6d:9f:b3:bd:cd:5f:dd:54:93:af:5f:
         ba:aa:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:46:18 2026 by rpki-client