Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23516b7e-a145-3ca6-8364-956407da0040.roa
File:                     23516b7e-a145-3ca6-8364-956407da0040.roa (raw, json)
Hash identifier:          9o03DsaPAZCEEHyFwmwJEOu4NOx+KCfp+CbJvDKnRe0=
Subject key identifier:   29:A0:C4:FD:43:29:F1:0E:0D:37:49:0B:EE:72:30:51:9E:EF:9A:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D04E24519F0E5F25163965160
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23516b7e-a145-3ca6-8364-956407da0040.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        108.165.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:45:19:f0:e5:f2:51:63:96:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=361233da-8ee3-4b3a-9705-52ca673f4501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:67:d8:36:f0:44:d6:af:77:75:e8:62:42:
                    9d:4e:ba:d3:79:0a:41:30:5e:0d:cb:68:57:89:74:
                    f1:b3:76:fb:99:d1:61:b1:e8:66:86:84:f5:e5:76:
                    ae:a7:73:65:5e:83:17:5d:15:cb:cb:a8:08:75:6c:
                    1a:b2:ec:b2:d1:0a:34:52:b2:71:f0:c4:a8:3a:d3:
                    f6:15:a8:90:4f:03:50:d5:56:39:97:71:46:fb:38:
                    3d:f7:a6:58:38:4f:ed:e6:4d:df:f2:37:87:b4:40:
                    e1:30:21:cf:5b:30:f8:55:55:9f:9e:52:a6:1c:2a:
                    87:5d:c1:f8:95:c8:18:23:30:99:b7:6d:78:f0:6d:
                    5f:75:ae:31:b9:fa:fa:01:75:3c:c6:a1:a0:e0:fb:
                    33:2c:18:b1:68:94:39:1d:78:bc:c4:0f:f1:e9:27:
                    db:d4:0b:cd:8e:03:27:4e:2c:39:ae:c3:d4:6a:53:
                    e9:f1:d7:c0:e1:d5:ad:c2:ec:72:38:01:b1:9d:41:
                    22:7c:8a:ff:f9:1a:de:33:a3:41:49:2f:25:7b:c5:
                    5a:9e:7b:ea:a1:14:49:47:61:2b:94:a2:f3:fd:a1:
                    84:e3:7f:b0:68:f2:c2:8a:85:6f:cd:3a:09:69:aa:
                    f9:6b:b1:23:70:67:62:12:13:df:17:a8:90:28:de:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:C4:FD:43:29:F1:0E:0D:37:49:0B:EE:72:30:51:9E:EF:9A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23516b7e-a145-3ca6-8364-956407da0040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:c8:b0:62:54:c4:8d:c4:f0:34:e3:70:b7:7e:73:74:32:
         f6:93:37:8f:bb:b0:4b:2a:e1:e8:96:0b:1b:ce:36:30:00:85:
         e0:8c:f2:22:86:ca:86:02:c0:a5:a0:6b:9a:9e:29:63:c6:8b:
         a5:b7:69:43:9d:cd:5b:67:ea:17:ba:aa:c3:da:7c:95:e9:f9:
         c7:b2:c7:75:88:69:96:a7:97:47:08:31:ea:73:50:e0:51:b9:
         d2:72:7b:cf:48:e7:6a:bf:eb:59:70:89:f5:e3:99:dd:34:54:
         66:fd:de:b9:ac:44:fc:5c:6c:03:58:a5:57:9a:49:f6:4f:fd:
         a5:0c:64:d6:3d:9b:eb:e8:5e:54:c4:d6:c6:3e:fb:34:74:49:
         c1:f2:1b:e4:1d:21:ea:58:07:ab:dd:f0:d4:55:50:db:e1:c3:
         8d:30:90:ba:98:6b:ee:db:4e:f1:71:76:bc:23:29:a6:f9:8b:
         e8:8c:3c:33:7c:67:07:95:fc:37:89:30:7f:47:1c:08:91:41:
         fb:46:5f:d2:72:bc:51:9a:b5:54:07:3e:89:8c:30:e8:1b:d4:
         29:1b:a3:7d:31:9f:9d:3c:e6:cd:2a:87:a7:3b:06:c0:84:4a:
         e8:c3:d8:21:2e:98:66:92:ae:ff:a5:b0:32:20:f9:3f:a0:59:
         18:06:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:05 2026 by rpki-client