Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa
File:                     c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa (raw, json)
Hash identifier:          OAZX0k49JG4uRVKjnBx4RW1bov2CtXe1VUG61R9Js+w=
Subject key identifier:   93:88:17:5D:A5:DC:8B:06:43:57:3E:67:C9:E5:F3:D1:47:96:D0:9B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EBDDC6439F59EDBFA10954680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        108.166.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:64:39:f5:9e:db:fa:10:95:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=4a82eb2d-2e74-4d93-9907-12276c627bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:62:9e:91:08:09:02:3f:97:0f:66:ad:9b:
                    6b:74:14:f9:40:a6:8f:3f:28:9c:bc:8c:ca:9d:ac:
                    66:8c:b3:93:ea:5e:ad:b4:4f:17:9f:4c:84:75:d1:
                    71:3d:e6:99:96:29:d4:c4:6b:ff:80:48:07:7d:74:
                    86:de:21:77:c0:45:0e:3b:ce:25:d1:9d:1a:70:f4:
                    51:8a:80:f3:90:05:e1:12:c9:42:f0:d6:43:c2:78:
                    7c:a4:94:ae:2b:c9:e0:1b:1b:d9:33:f0:ed:f2:cc:
                    d7:00:5a:a7:74:31:8c:c9:fe:2f:b3:ff:39:f5:f0:
                    25:91:5c:4d:3c:20:69:d4:6d:e9:a8:0e:0d:74:d0:
                    bb:50:21:59:65:3d:37:45:c7:8d:61:83:9a:1e:a7:
                    e2:a0:bf:02:b0:6b:80:b2:a3:30:c4:b1:7f:8b:38:
                    73:27:71:ac:2c:30:c8:ee:63:71:63:ba:74:33:03:
                    f6:30:11:15:09:5a:a9:de:e3:38:ad:df:a8:d7:1a:
                    f8:6a:8f:ef:dd:21:b6:9c:0e:f3:34:fb:08:d7:bd:
                    62:97:0a:ff:4e:3d:92:fe:f7:27:71:0e:55:47:bd:
                    be:13:20:47:5d:f9:13:95:b2:93:70:7b:82:0e:c4:
                    35:2a:20:5d:d7:be:48:6b:d9:68:91:bf:d8:ca:e2:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:88:17:5D:A5:DC:8B:06:43:57:3E:67:C9:E5:F3:D1:47:96:D0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c8fa5116-880d-3a41-ae0e-b77a16722e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:07:1d:5d:1c:12:04:10:4a:49:da:0b:d7:26:27:03:11:
         c4:a4:73:ff:f2:0a:bc:69:5d:56:f2:fb:be:7a:bd:ce:ec:56:
         12:96:c0:c2:2b:24:3d:20:d1:4e:23:c0:3d:88:6a:9e:c9:32:
         39:38:81:26:b3:6d:cb:f6:79:ea:bd:4f:e6:4c:01:2d:52:ea:
         92:e9:de:5d:74:10:60:82:3c:b1:4a:19:3a:45:02:19:a4:17:
         ff:4c:ec:42:87:fd:11:53:6d:9f:1d:88:c0:69:1b:ad:13:20:
         e4:6d:01:1f:48:30:8c:99:b8:94:0e:87:eb:9b:26:fc:67:fb:
         a1:1a:33:96:e0:ed:83:b4:ea:3a:9f:70:82:07:71:63:31:44:
         c2:fc:a9:de:a1:01:5d:fc:8e:94:2c:e7:b0:a2:bd:d2:58:15:
         af:8a:fc:4d:ab:03:d5:ea:c9:c8:04:e5:80:24:ee:0a:f6:8c:
         d9:62:f3:82:e0:bc:4b:9a:cf:7a:4f:52:b8:ac:5c:ee:c9:36:
         b2:54:1b:69:2f:94:61:5c:0a:b9:b7:86:35:c1:52:bc:bf:cf:
         a5:d5:f2:a6:50:4b:3d:dd:99:15:64:1f:9f:c6:95:84:1f:2b:
         77:42:a0:4f:59:1b:cd:a3:6f:12:75:d3:ad:0f:2d:e3:9c:e6:
         18:be:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:22 2026 by rpki-client