Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa
File:                     05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa (raw, json)
Hash identifier:          fuR3DKDgn6UtoAPC3ziaAQHZaInmSu//sAU7maOy1TY=
Subject key identifier:   B7:41:37:D2:D9:01:D6:BD:D5:FD:A5:EB:4D:52:7B:08:D1:09:20:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D6AAA7DA3C3CF01B601209A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     401152
IP address blocks:        108.165.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7d:a3:c3:cf:01:b6:01:20:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=246055aa-b577-4e6e-9254-f8e886369621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:c6:8f:f0:0e:e9:7f:73:08:17:3e:e5:33:
                    82:bb:ef:61:20:ce:f4:58:76:85:51:8d:9e:25:37:
                    59:5d:94:77:5c:81:48:63:b9:c9:ff:67:0a:97:91:
                    25:b8:39:7c:52:d9:28:d8:d7:71:a8:af:11:2c:d1:
                    c6:65:af:3a:84:95:3c:48:da:dd:ad:2d:ea:13:e1:
                    d3:5e:7f:c4:57:0d:82:ce:3f:62:63:42:11:4f:8b:
                    fa:41:1b:2f:59:91:af:fe:26:b2:e1:c1:fd:6d:2c:
                    f3:c2:dd:a8:fb:24:4d:c6:d3:fd:07:72:f1:fe:51:
                    70:74:79:50:4c:0a:e0:37:96:4b:7c:0d:08:0c:9b:
                    3b:e9:6e:74:9e:1b:a8:41:3b:20:2b:ea:19:0c:4e:
                    84:31:41:3e:62:ec:3b:58:f9:3c:be:11:00:63:2e:
                    b8:c0:bf:1a:64:ed:e5:a4:6b:29:05:a1:7d:f4:63:
                    39:a4:2c:6a:c2:a8:4c:e4:0f:8d:88:ea:c5:99:9b:
                    46:d6:4f:56:16:ef:ff:4a:30:ee:44:c0:78:11:e1:
                    28:2d:09:7f:40:c3:f6:8c:24:c9:4a:eb:a6:61:64:
                    46:25:70:de:23:a4:20:4b:08:c0:8c:8e:87:52:ef:
                    f0:4c:02:71:1a:49:4b:60:a2:19:7a:3f:f7:3b:59:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:41:37:D2:D9:01:D6:BD:D5:FD:A5:EB:4D:52:7B:08:D1:09:20:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e6c0b5-6bbc-3af2-a814-fd465d973d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:8e:47:f2:64:d3:5d:54:75:35:c1:00:4d:65:d8:12:38:
         be:df:1d:80:13:61:4e:ed:a7:ae:75:95:22:14:2d:b7:05:56:
         bb:02:f3:44:0f:69:3f:ab:e8:96:af:45:8e:1e:4a:08:79:03:
         7f:a2:52:d0:f2:f1:e2:f7:e4:09:8a:29:51:da:d4:37:63:d1:
         48:72:c5:8d:6e:79:64:be:eb:12:ed:e4:1c:29:74:95:70:27:
         dd:a6:3c:1b:90:9d:c2:d4:44:01:80:f9:7c:b1:78:ea:2c:bf:
         03:ff:4a:e1:f7:d5:e7:a6:f7:94:17:3d:69:70:5f:76:24:2e:
         7b:dc:4d:dd:96:bd:02:ea:02:e3:e5:eb:9e:bd:85:13:cd:ac:
         20:1b:c0:5b:7b:ec:3f:b2:af:00:76:cc:28:f9:89:a5:78:3b:
         e0:3a:28:bc:c7:44:b9:ac:d8:79:7c:6b:7b:58:6b:a5:8f:cc:
         ef:95:05:23:91:6c:4b:37:67:34:de:e3:8a:22:b4:91:4c:d6:
         bd:c0:f9:50:7c:f1:bf:5d:66:61:a4:1b:75:89:e7:cf:d8:77:
         77:26:6e:70:77:86:bb:e1:1b:fc:fd:73:ea:eb:bd:45:08:ed:
         17:f3:aa:44:d1:12:75:2e:e6:07:ff:7b:00:d3:16:37:0e:0f:
         08:5c:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:06 2026 by rpki-client