Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa
File:                     10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa (raw, json)
Hash identifier:          I7stflNJWWceaa8Qs9GEt59OzBpaXmi+4Mxq/4ZlED0=
Subject key identifier:   08:4B:3A:92:46:AC:A8:7E:12:69:FE:C4:2D:63:AC:35:3A:88:B5:04
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DEF45DEDCBF7718233D23A1B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     211373
IP address blocks:        108.165.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:de:dc:bf:77:18:23:3d:23:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=b198d4fd-d8d0-4fbd-b69e-21b931b30d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:1a:8c:f3:74:10:2b:85:52:5e:00:33:13:
                    92:68:75:05:a1:b4:1c:54:7a:0c:c0:79:a6:e2:49:
                    3b:c0:f1:6c:68:e3:16:3d:67:b0:cf:1b:b9:d3:ab:
                    34:99:36:08:1a:51:bf:2a:f9:7f:4c:94:15:6d:95:
                    8a:c7:e0:53:1e:4a:bc:b8:ee:d0:45:a7:fa:20:ff:
                    a3:bb:a4:ac:46:af:44:25:c6:29:74:9d:94:fb:40:
                    59:24:30:58:50:97:6d:cf:df:35:d0:5b:ac:86:53:
                    02:b2:46:35:61:b1:9a:3d:da:b5:ad:12:c1:9f:ac:
                    cf:12:90:70:91:62:51:02:d3:3e:35:d1:93:7d:dd:
                    38:89:79:b4:36:9b:0a:a1:ed:7b:5a:b1:d1:f9:b0:
                    61:93:67:5b:ab:b6:34:2c:5e:e5:82:15:37:8e:c3:
                    74:31:f5:59:40:53:78:2a:1f:ff:e6:69:d1:45:33:
                    7f:24:28:fc:0a:30:fb:6c:b9:1a:05:ca:6a:71:c4:
                    8d:61:95:e5:56:ed:41:5a:c3:57:74:9a:a7:6c:ec:
                    35:80:11:7d:26:d1:2a:a7:9c:7e:01:6f:94:17:24:
                    d2:4a:bc:f5:e7:71:31:e8:de:42:59:a8:3e:20:62:
                    a0:96:9d:2f:97:2d:4b:e7:cc:11:11:93:c4:27:06:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4B:3A:92:46:AC:A8:7E:12:69:FE:C4:2D:63:AC:35:3A:88:B5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/10d276ab-f751-35f0-a3e9-575d8f2ceb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:50:be:88:a9:f9:05:db:aa:42:c2:57:81:9c:d9:43:ab:
         79:1d:31:fa:fd:50:27:19:ab:d6:c0:07:98:e5:5f:1f:83:e0:
         8b:24:dc:00:f0:20:57:2c:12:ee:93:e7:0a:7e:5a:a9:ed:01:
         03:ab:7b:0c:08:bd:9e:51:33:97:f7:ca:c9:bc:8b:6a:4e:14:
         de:c1:68:95:71:04:32:b8:ce:9c:86:87:7b:03:f0:f4:8c:b9:
         d8:47:b7:b9:95:d4:c3:31:c8:cc:d6:af:66:f4:2b:6e:4c:0c:
         5d:85:58:40:08:ca:68:cb:85:e9:67:ad:40:c1:6d:7b:58:47:
         00:78:f2:b8:ca:c5:17:19:74:98:a0:17:45:9a:60:11:4c:c7:
         d0:ab:3c:de:1d:fb:2f:5b:1f:17:ff:ed:d0:d8:7b:e6:c4:0c:
         ee:5e:a1:e5:df:d0:c1:62:c0:b7:cc:42:21:50:5f:8f:0b:42:
         c2:1f:84:06:fc:3b:99:96:e6:ed:4b:80:60:de:07:44:75:74:
         f0:ea:e5:04:60:6a:ed:bc:74:6c:44:00:f1:0e:8c:c4:aa:ed:
         8f:a5:6b:13:54:23:74:15:60:f3:ed:26:5b:a2:68:78:b4:68:
         5d:a8:57:d3:4c:f3:08:ff:82:56:d1:ac:4d:fd:c0:ba:a8:3c:
         c2:8a:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:06 2026 by rpki-client