Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14e8ad5d-26b7-3bef-ae20-675a495f4007.roa
File:                     14e8ad5d-26b7-3bef-ae20-675a495f4007.roa (raw, json)
Hash identifier:          gFAIp9+lPOVbX/RGkSYt4YJvVx3vlftfMckPKao5P5M=
Subject key identifier:   B1:F9:B5:05:51:96:BE:D1:18:19:75:2A:80:94:BF:FC:F6:CE:E6:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CD2A1E3AC0F4C985F11EFF930
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14e8ad5d-26b7-3bef-ae20-675a495f4007.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21859
IP address blocks:        108.165.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:e3:ac:0f:4c:98:5f:11:ef:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=b0dbac45-10b3-4bf9-86cf-58713500f4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:88:b1:c0:23:ae:e1:58:b6:a9:7b:e9:16:
                    8f:72:7c:42:2f:31:86:b2:50:ea:87:a9:7e:e6:b8:
                    e6:01:ec:75:f8:63:63:5d:f5:68:d1:7e:fb:d3:0e:
                    00:21:a6:24:6e:a5:66:61:08:db:6b:8c:41:19:f0:
                    6e:e5:7c:5b:38:c2:4d:60:09:13:71:8b:cc:52:8b:
                    5e:e7:4f:26:29:2d:92:49:9a:35:c6:f0:c0:fa:97:
                    71:e7:74:fb:24:ad:67:4f:f4:93:6a:c9:ee:65:31:
                    0e:1e:c7:4f:5b:52:f7:66:78:6f:2c:4b:64:d4:92:
                    5a:26:11:18:cc:19:2b:16:48:3e:c0:c8:90:2c:79:
                    31:59:dc:ea:ec:4b:b3:8f:03:b3:40:74:66:08:4b:
                    5e:d4:e1:ff:b6:d4:25:ff:ea:19:79:62:34:c1:c9:
                    2e:67:44:aa:e1:4d:82:63:fc:d8:fa:49:40:01:67:
                    b9:7e:f1:c7:40:18:1e:8e:6e:f9:2d:d7:54:78:8b:
                    6f:8f:ec:4b:d3:ba:7d:e0:ef:24:9b:44:0d:46:3d:
                    3e:2a:88:2e:1f:6b:94:af:9b:29:73:f8:8a:a9:af:
                    fe:14:0a:ad:01:e2:db:c6:ec:94:cf:86:d3:13:5b:
                    c4:68:be:73:09:bd:98:aa:88:c5:1b:bf:e1:9e:59:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:B5:05:51:96:BE:D1:18:19:75:2A:80:94:BF:FC:F6:CE:E6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14e8ad5d-26b7-3bef-ae20-675a495f4007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:bc:e8:c0:7a:01:17:06:35:84:da:44:cc:35:9d:23:06:
         d8:9b:a1:23:9e:ac:62:44:e5:29:fc:96:2a:43:58:8b:f4:97:
         a8:db:e9:a9:12:17:e5:6c:2d:e7:c2:d7:8c:0a:f0:6e:92:f3:
         b8:aa:eb:b1:fb:91:0d:de:23:c0:cd:e9:7b:48:bf:a8:1a:77:
         32:ae:56:b1:06:6e:79:8d:08:e3:6f:e4:6b:b8:90:62:94:48:
         14:75:12:87:71:48:f4:cf:70:a3:44:aa:52:b7:54:db:ca:59:
         71:6b:73:b2:a3:d8:2c:75:a8:e3:0d:fb:00:2f:54:f7:1f:12:
         2e:3f:11:db:9d:b8:12:ac:62:f7:b7:cc:06:63:a3:f6:25:b7:
         5e:5d:ed:c5:2b:dc:b0:64:c4:2c:80:aa:2a:e0:23:9c:15:88:
         3a:38:1c:5a:82:96:ec:0e:fd:b9:14:e4:97:bd:2b:53:21:b6:
         0d:93:c9:27:27:6d:c0:7c:dc:d5:6a:9b:6d:ed:75:79:9b:57:
         20:71:a3:e3:1d:e1:e3:f8:ad:0d:63:6d:97:f9:ac:ca:4f:df:
         b8:89:fe:5b:5a:50:d2:62:15:58:e9:51:0b:d6:27:4b:f6:b6:
         65:01:4f:ff:46:05:84:bf:04:19:97:95:7e:a8:0b:46:d8:07:
         37:8a:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:41 2026 by rpki-client