Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe2fc2b5-6900-319a-8681-9bc72e43643a.roa
File:                     fe2fc2b5-6900-319a-8681-9bc72e43643a.roa (raw, json)
Hash identifier:          qoHqkwFpY96+r1YVKTERWbzP8g3eR2uPvr8gaMqDX4U=
Subject key identifier:   02:FD:7D:26:49:D4:50:E2:9E:29:F9:08:18:E1:E9:2D:3A:9F:11:54
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E51E9E2719D74E01CF8CE3220
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe2fc2b5-6900-319a-8681-9bc72e43643a.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        108.178.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e2:71:9d:74:e0:1c:f8:ce:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=08c75b16-0253-4ed9-a536-1aa053a59812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:60:72:c6:ef:76:a8:7c:bc:1b:aa:27:c9:
                    7d:8c:a2:71:dd:df:1c:7c:c2:5a:58:30:50:48:d9:
                    3a:e9:25:1f:3a:6b:cf:c0:0f:41:9e:ce:f9:4b:a9:
                    25:bc:a2:74:e8:2a:70:53:01:3c:89:7d:d0:30:e5:
                    27:de:0d:0c:e7:c8:0c:3e:58:8b:e2:f9:2a:b6:e8:
                    9b:fc:67:c7:bc:41:80:74:30:a7:d5:9e:f6:41:53:
                    f8:fc:0b:76:5e:93:67:9e:a8:25:22:cc:5f:af:b3:
                    b2:4f:44:d7:50:49:71:b6:e0:bb:18:ff:c4:f1:88:
                    fd:3b:e0:50:e2:34:30:db:e8:a5:75:65:7d:9e:6a:
                    45:54:ef:c6:d4:6c:66:d3:38:b1:c1:f1:70:35:46:
                    5d:62:c9:63:15:cf:46:c2:83:6d:22:94:7b:61:ca:
                    6b:67:18:81:90:b5:76:65:6a:80:5f:41:6b:e0:1f:
                    80:f3:aa:a5:fc:e1:1c:5b:a9:d5:d5:63:ff:fe:b8:
                    4c:80:06:24:7e:4c:4b:8d:92:ff:37:75:8a:91:08:
                    ab:dc:d9:2c:f1:48:8b:24:97:31:c0:04:1a:46:07:
                    1c:09:04:7e:20:3c:18:00:10:02:8b:a6:1b:41:7b:
                    bd:84:14:2e:b4:3a:63:1f:bb:34:7b:ee:89:38:35:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:7D:26:49:D4:50:E2:9E:29:F9:08:18:E1:E9:2D:3A:9F:11:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe2fc2b5-6900-319a-8681-9bc72e43643a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:7f:81:d8:9b:4e:c5:26:e3:c3:ab:8a:e3:1e:09:b3:0a:
         cd:53:42:bc:dd:4d:6a:30:c3:a9:fa:ae:77:ee:ce:2d:59:1b:
         80:75:69:24:f4:35:a1:da:74:7a:a4:0a:d3:75:bf:bd:aa:52:
         ae:1b:dc:64:44:73:95:30:fb:e7:6b:10:eb:e3:51:d8:27:7f:
         72:2d:78:d7:bf:86:13:04:a1:d5:a0:71:78:66:99:b9:e1:2a:
         59:87:7f:70:50:f8:90:f9:18:17:c5:61:10:80:9a:55:59:bb:
         7a:88:6f:0c:30:f4:42:83:ed:da:41:12:4e:6e:76:a9:14:99:
         0e:8a:86:03:7a:d3:15:29:45:04:58:12:80:41:a4:92:40:45:
         d0:b9:16:51:8f:51:24:33:62:4e:54:e3:fc:9f:e0:86:76:71:
         dd:26:08:a9:74:92:80:43:50:ab:b9:f2:eb:fa:b5:79:e9:35:
         a8:e1:20:0b:20:02:4b:3e:e4:2b:ae:68:7a:6e:a2:4a:85:52:
         88:24:4c:b2:6a:b3:b0:0b:52:87:5d:f1:3c:c2:48:c4:4d:b6:
         fe:2c:ba:cf:5c:06:f3:c7:a2:8b:df:8d:66:c9:7b:79:4a:71:
         fe:c5:14:c2:d1:4b:e5:71:93:51:d4:20:ac:b1:b8:a0:f2:3c:
         0d:ac:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:40 2026 by rpki-client