Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/195ccd04-98e6-32c4-97db-4fa3908eae65.roa
File:                     195ccd04-98e6-32c4-97db-4fa3908eae65.roa (raw, json)
Hash identifier:          eJ5z3UC8ixuAEzsf4hkGJd+F0Gt6a4IlsTBeXtU2lOo=
Subject key identifier:   66:9B:6D:97:11:2A:91:E2:E8:37:22:90:8D:5A:CC:AD:0C:3A:38:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F3A17C6264DDA9BE3149B6F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/195ccd04-98e6-32c4-97db-4fa3908eae65.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     213529
IP address blocks:        108.165.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:c6:26:4d:da:9b:e3:14:9b:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=712f18ca-4825-46d4-be4c-a96960371329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e7:58:3f:65:53:0a:9a:56:5c:d2:35:bf:69:
                    31:9b:49:b5:02:97:5a:dc:ad:23:d6:b8:3e:08:0a:
                    28:d2:66:16:e6:5d:a1:ba:d9:ed:83:0a:fa:ee:22:
                    dc:50:03:51:9e:29:96:09:e6:7e:78:78:54:1a:2b:
                    91:92:a8:15:77:33:fc:f5:f9:a5:86:60:18:32:8a:
                    f7:8f:5e:c4:a6:04:ff:07:85:9d:1c:60:a5:43:a2:
                    97:ad:f5:1a:57:21:b3:6c:de:56:01:35:50:98:f9:
                    ce:dd:77:05:4e:ec:df:83:5e:a4:85:f4:ab:b3:24:
                    44:d6:3c:22:60:9a:3b:f8:18:59:52:f6:75:a1:fe:
                    eb:77:94:a6:97:ff:98:10:65:8b:e9:f1:d0:b7:8b:
                    c7:48:84:b8:c6:a0:e8:37:01:fd:06:26:4b:5a:9b:
                    2b:ad:d8:d4:74:78:96:20:92:6d:0d:84:16:96:16:
                    41:7c:3a:8b:af:f0:db:f9:15:13:4d:38:ef:7f:0d:
                    b4:8f:30:43:3d:46:1c:8c:13:0e:c2:86:19:6f:a3:
                    68:e4:ff:a4:aa:eb:5e:6e:21:86:d2:79:46:a0:62:
                    70:43:6b:3b:cd:65:57:9e:2d:8b:f1:cb:44:54:88:
                    65:15:0d:79:aa:76:93:88:16:20:13:09:9c:0f:46:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:6D:97:11:2A:91:E2:E8:37:22:90:8D:5A:CC:AD:0C:3A:38:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/195ccd04-98e6-32c4-97db-4fa3908eae65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:6c:16:56:3c:dc:ec:4a:8f:76:e0:40:1e:fc:0b:e8:3d:
         e4:c1:f6:cb:51:bf:e7:fe:4f:59:96:4b:92:8d:fe:ec:21:b0:
         a6:1b:85:cf:16:50:51:a4:1d:ad:7f:3f:a2:73:43:10:16:66:
         aa:7b:c7:81:48:e2:e9:c7:c0:ec:fb:76:6f:55:4f:8c:8b:aa:
         59:0c:f4:94:ce:d7:4b:36:ea:41:89:84:99:15:4a:1d:6f:e4:
         dd:58:42:bb:6c:18:5a:e5:d6:c0:56:e8:6b:bc:44:89:fa:3e:
         c9:e2:90:4f:c2:07:51:9c:ab:42:9b:eb:64:0e:a2:5f:49:47:
         a2:c5:fc:0a:fb:67:f6:e7:03:13:28:5e:bc:a0:32:a0:18:f5:
         de:72:2e:cf:6e:2e:ad:66:ea:f6:61:09:9d:76:fc:28:84:8f:
         03:f9:45:33:33:59:57:6f:ff:c7:c9:ff:3b:d7:a7:4f:58:21:
         77:6e:bb:73:9e:c5:9c:f8:a8:4e:e1:d6:a9:a7:a1:08:6b:4c:
         6e:86:be:4c:bc:85:96:65:36:a4:aa:97:80:d4:12:5e:14:fa:
         c8:df:ff:50:43:44:53:f3:81:33:41:e3:0f:18:5f:9c:7c:bc:
         e4:d0:e2:2b:32:54:ef:a4:10:1a:ed:df:7f:d2:89:80:a3:17:
         84:0b:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:14:49 2026 by rpki-client