Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93cfb506-c4df-355d-b0b1-81c74e6181a8.roa
File:                     93cfb506-c4df-355d-b0b1-81c74e6181a8.roa (raw, json)
Hash identifier:          gqObNWdQ0B01263TkrQ1/lJ6Spww+Q21nlSIeqqHZMY=
Subject key identifier:   1B:15:E2:11:2A:A5:A6:29:D4:A3:7D:E0:DA:2A:F5:E4:CF:20:A1:CE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849107646EE394E4B2D41164300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93cfb506-c4df-355d-b0b1-81c74e6181a8.roa
Signing time:             Mon 03 Mar 2025 10:25:04 +0000
ROA not before:           Mon 03 Mar 2025 10:25:04 +0000
ROA not after:            Sun 01 Jun 2025 09:25:04 +0000
asID:                     30036
IP address blocks:        108.178.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:76:46:ee:39:4e:4b:2d:41:16:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  3 10:25:04 2025 GMT
            Not After : Jun  1 09:25:04 2025 GMT
        Subject: CN=320d9e2e-71a9-451b-8aed-748f93cd4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ca:04:67:a8:f6:ff:82:60:e4:ca:d2:9d:74:
                    81:2d:38:ce:83:be:ac:87:82:38:be:6a:0d:cf:b2:
                    b4:ad:0e:e6:ac:b7:25:0e:1a:82:52:42:cc:92:28:
                    45:6e:bd:85:e7:91:81:5d:b8:89:35:39:f0:0c:0f:
                    83:26:f1:2c:55:87:7e:38:08:76:2e:8b:ad:84:fa:
                    22:e0:b1:40:57:43:87:71:c5:ac:1c:f3:ba:6b:ef:
                    63:ef:d7:aa:79:d1:26:f4:64:9c:64:9c:3c:d8:54:
                    d9:b1:e4:ce:6a:50:0e:8f:8e:6a:ff:31:11:0e:91:
                    c5:58:c1:e5:c8:2c:da:28:05:b9:32:49:e9:4b:e4:
                    b9:59:5f:4b:e2:13:cc:74:da:89:6c:c4:07:e5:5d:
                    69:54:fe:b7:33:ff:ff:82:61:58:07:00:cc:ae:7b:
                    e1:5d:e4:1d:31:8e:c5:ab:a8:d3:da:06:93:e8:7f:
                    97:25:3e:af:8c:31:54:8a:66:25:8d:aa:fe:be:3d:
                    e7:3a:22:32:3c:02:03:eb:cc:ec:00:11:c5:a6:19:
                    23:c5:a1:b9:12:51:bc:6d:67:b0:bf:ab:5b:fa:49:
                    7c:22:f1:e3:56:80:5f:f1:2e:15:df:aa:bc:0f:7b:
                    3b:38:3c:5e:ee:3c:cc:a9:ae:37:32:61:70:c9:78:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:E2:11:2A:A5:A6:29:D4:A3:7D:E0:DA:2A:F5:E4:CF:20:A1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93cfb506-c4df-355d-b0b1-81c74e6181a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.178.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:2b:8c:7b:a9:21:ad:77:c5:bb:0e:b7:2b:24:88:76:41:
         69:58:34:a7:0b:bf:f7:60:c7:81:42:29:aa:9c:bc:48:f8:5f:
         22:b2:ee:18:03:aa:6e:79:cb:45:24:ab:ab:f0:a9:d5:a6:f3:
         07:18:9d:48:5a:ab:74:b9:c6:d3:bc:e1:ba:bf:1d:0e:bc:1f:
         3f:7a:ca:11:55:87:79:00:e0:2b:9a:fb:3a:0a:b9:62:06:9b:
         01:c7:4b:26:d9:f8:b3:78:9e:13:82:2b:7e:1c:86:b7:ca:fe:
         bb:40:0b:af:a4:04:92:14:c1:fc:96:13:e3:37:14:28:45:fd:
         10:0d:29:9a:65:7a:ba:5c:a7:38:91:d0:6f:ea:4d:65:2b:f2:
         8f:f1:e4:99:f2:40:aa:fb:3b:79:bd:09:be:38:a1:5d:75:5d:
         e6:ee:68:ed:c8:b3:2c:2b:a7:35:75:e3:16:63:da:a9:57:1e:
         86:94:a2:9f:ea:9a:35:ae:17:52:7a:9f:f1:71:f7:e4:a7:b6:
         63:e2:1c:67:f2:28:b7:98:b1:87:d8:c7:9a:62:9a:24:b6:b7:
         e3:22:94:0a:2e:8b:64:99:f9:66:36:9f:8c:f8:d4:21:d3:d5:
         b1:f6:f4:a2:60:cb:61:a7:a2:63:0a:b8:2e:3f:6a:42:1a:fb:
         9a:e6:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:03 2025 by rpki-client