Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/338288ec-3a6f-379c-b88c-29fc258303ca.roa
File:                     338288ec-3a6f-379c-b88c-29fc258303ca.roa (raw, json)
Hash identifier:          yx+WKosjcjRsSAytJ0bQW7vKyAHJQftrlI0bK3rceIo=
Subject key identifier:   12:6B:96:EA:BA:2F:09:32:50:B2:44:79:C8:57:3C:96:6B:14:CD:66
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4559E7CBD5F5DF08B0CD9B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/338288ec-3a6f-379c-b88c-29fc258303ca.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        104.201.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e7:cb:d5:f5:df:08:b0:cd:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=67a5fb78-e8c5-4ac8-b3e7-82d6b6c3854c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0b:5c:44:d9:d1:37:14:61:e9:63:3b:18:f1:
                    fa:69:f4:65:83:88:5f:58:a7:43:3a:ea:eb:32:19:
                    f0:c9:a1:03:84:23:e2:61:a7:b3:fc:5a:25:98:a6:
                    fe:a9:ba:74:ed:6f:e7:26:06:41:78:3e:24:31:03:
                    a4:de:55:93:0c:07:cb:e7:0b:70:7b:36:ab:c0:fa:
                    02:99:de:28:48:e3:48:61:03:ef:e7:07:13:9d:8f:
                    7d:39:83:a4:0d:fe:23:d5:cc:01:d7:2d:22:07:9b:
                    f1:cb:c2:fd:3f:86:cf:96:c8:e9:a9:29:6e:3e:b0:
                    21:9a:cf:34:4a:93:16:41:72:b0:be:48:69:da:9c:
                    86:26:80:d2:9d:55:b5:d5:06:5e:58:d1:c0:39:4c:
                    98:b6:8a:66:f9:d6:5b:e1:bb:0c:ef:40:72:9c:8f:
                    ae:a8:cc:b6:bc:80:b7:d0:ce:e3:9e:4d:4d:a9:c5:
                    a8:49:cc:96:79:f9:29:e7:71:bc:bc:c5:c2:eb:86:
                    4f:51:2b:22:25:c2:a1:d1:6c:f3:28:0e:a7:80:27:
                    a2:3f:ed:71:b4:e7:15:70:ee:1d:0d:f5:bd:a7:1b:
                    2f:80:6b:f8:67:c6:04:6a:21:0d:bf:f4:a2:07:db:
                    89:8d:56:82:82:9c:44:58:da:47:dc:a3:6f:55:a7:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6B:96:EA:BA:2F:09:32:50:B2:44:79:C8:57:3C:96:6B:14:CD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/338288ec-3a6f-379c-b88c-29fc258303ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:e8:be:d8:68:30:a6:38:ef:71:23:76:e6:c5:62:f5:5b:
         53:dc:db:99:00:b4:55:69:18:32:e4:55:1e:8f:81:01:b2:2c:
         93:48:b7:b3:90:5d:5e:8f:c0:0e:92:8d:91:a6:9d:9d:0b:38:
         7c:83:4d:94:8c:20:c1:1b:c2:a0:5e:26:29:f7:e3:5d:d9:66:
         ca:b7:42:eb:74:1e:11:42:49:10:2c:b1:cf:8f:7c:45:1b:20:
         f2:f0:f3:de:0c:a7:25:88:b6:d4:4e:99:bf:25:f6:24:9b:ce:
         38:ee:e0:f6:7a:b2:7c:28:5c:2d:61:01:35:7a:a2:06:30:fd:
         d0:a2:56:a4:29:12:b1:c9:c6:65:b9:08:0c:ae:6b:ed:d5:06:
         fd:e0:d5:89:c1:4f:d6:28:d4:97:de:b9:9c:60:b6:97:bb:9a:
         86:68:8c:9e:8c:eb:2c:77:35:e7:77:38:e1:19:02:28:37:88:
         55:cb:94:06:7c:a6:55:f7:45:77:fe:4e:af:be:69:12:4b:6e:
         9c:e5:d1:c3:03:6d:e8:c3:1d:59:74:68:8d:4a:01:67:54:30:
         66:a3:c0:50:ec:28:ed:65:a8:2b:8e:fa:e7:a0:54:e7:d0:81:
         ce:4f:72:7f:4d:4e:70:83:0d:80:6b:67:04:86:1d:c9:d4:e7:
         a6:28:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:23:44 2026 by rpki-client