Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2756d690-5916-3770-a8df-c64d94136268.roa
File:                     2756d690-5916-3770-a8df-c64d94136268.roa (raw, json)
Hash identifier:          r3HiXPn+FGU+4+D21cW4j4DnzMociTLkR0S0+7Q0nGE=
Subject key identifier:   9D:81:EE:F1:FC:53:4D:60:8A:C8:A4:35:2F:25:6F:C6:73:55:8A:83
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849F01A79B24F9EDA2D6485F280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2756d690-5916-3770-a8df-c64d94136268.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        108.178.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:79:b2:4f:9e:da:2d:64:85:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=8a5c231b-3ab4-4e40-9e44-66b99fc799e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:81:ac:90:e9:cb:ed:62:61:79:5b:0c:96:
                    4e:13:27:e4:a7:9d:66:94:41:45:5a:a5:8a:9f:94:
                    af:e8:a7:51:cb:11:91:82:2f:fb:cd:8c:da:14:38:
                    57:fd:c9:f3:b5:9a:b6:5d:ad:73:3a:9e:87:f3:65:
                    33:69:79:53:d6:d9:02:52:67:91:ca:1c:ef:a7:f2:
                    8a:46:69:b2:8b:89:34:33:1f:80:1f:ae:54:2a:04:
                    26:1b:aa:e0:84:96:e4:c0:31:4b:2d:33:c5:f9:00:
                    23:6a:4f:0c:89:bb:27:b8:f1:d4:41:4b:47:eb:2c:
                    29:a5:07:1c:99:a8:4e:fb:70:98:ee:bb:d5:a5:db:
                    d9:52:32:82:11:ad:3d:37:72:d4:38:3a:49:b5:7a:
                    c4:b4:45:1a:3b:41:f0:1c:74:27:bd:01:2a:81:d1:
                    dd:0e:9a:b7:dd:80:2e:fa:11:52:b9:4b:be:9b:a6:
                    2a:0d:d3:59:7e:3a:44:6c:0f:c9:a5:b3:a7:8c:7e:
                    eb:03:67:12:3a:de:1d:e6:f7:bb:11:5f:63:ae:10:
                    24:b0:1c:57:b0:b8:82:32:a1:f6:04:94:8d:2e:36:
                    4b:a7:c8:f4:10:dd:2d:73:6a:e6:64:5a:6c:f7:25:
                    c5:6b:34:03:f5:af:08:cf:66:4a:ca:06:c2:be:5f:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:81:EE:F1:FC:53:4D:60:8A:C8:A4:35:2F:25:6F:C6:73:55:8A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2756d690-5916-3770-a8df-c64d94136268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:69:c9:a1:c5:e7:32:2c:67:3f:af:cc:d5:28:e9:ac:c2:fa:
         e3:d6:c6:2f:cc:c0:b3:a0:b5:3c:c2:b7:f4:bc:b8:d9:57:85:
         75:8c:33:78:7a:48:c4:b1:4d:e6:ae:4f:ad:56:62:75:8e:86:
         de:ee:1c:08:83:eb:9b:49:e2:48:c9:48:af:c7:52:c0:55:ca:
         19:d4:3a:4b:35:4f:18:7e:20:bb:fc:28:53:7f:24:13:ad:ca:
         27:d4:db:5d:7f:89:4d:4a:c5:40:00:30:ad:b8:d0:eb:b4:3a:
         62:e9:2d:fc:60:8b:fa:c7:28:65:ca:4c:08:bd:0e:3e:9b:dc:
         4e:69:73:01:15:7b:d7:71:ee:75:da:b3:3e:d2:d3:8a:97:95:
         60:06:37:fd:6b:07:9a:8f:f7:39:e2:0d:26:7b:61:9d:80:64:
         0f:8a:db:44:2a:77:30:95:cc:74:2e:7d:6d:96:39:11:37:80:
         84:69:06:35:eb:b5:0d:d2:91:e9:6e:0f:dd:18:a5:cc:cb:3c:
         fc:2a:04:7a:9c:b9:5b:61:10:3d:f8:7c:1a:66:2c:a0:96:23:
         6e:1a:bd:5e:2b:4e:b3:13:1e:c7:f8:6d:f1:52:f0:21:ec:67:
         7e:2d:a0:6a:30:13:4f:ef:bf:20:d5:16:cd:de:d4:f9:2b:38:
         22:ea:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:26:06 2025 by rpki-client