Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e8d1f38-5dd5-3c53-bf8c-5e3a7b56e874.roa
File:                     2e8d1f38-5dd5-3c53-bf8c-5e3a7b56e874.roa (raw, json)
Hash identifier:          5aZvgJY2ts0RMWLhRSfo7rT/fI/NZJxo+K8QkSRK8bE=
Subject key identifier:   57:C0:DA:71:4D:2F:AB:E6:EC:FF:FB:CA:D4:C1:69:81:A4:65:F7:C1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E15E4A93371CF8A56F4AF00B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e8d1f38-5dd5-3c53-bf8c-5e3a7b56e874.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        108.165.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a9:33:71:cf:8a:56:f4:af:00:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=52541773-1594-4601-a95c-a045b1dc9e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:22:ab:e6:5e:68:a2:26:3e:49:2d:5a:b5:
                    96:28:29:8b:89:37:eb:71:c0:3a:51:f1:54:ff:28:
                    c8:5a:8b:85:3e:a4:40:e6:c6:84:54:01:77:e9:0d:
                    16:0b:9c:b7:0b:1a:00:8c:72:0d:e3:ae:3d:53:ea:
                    41:c4:f2:fa:82:1d:62:7b:0f:a5:47:22:7c:68:cb:
                    46:6e:ea:15:f8:32:b0:89:db:f0:84:eb:96:2b:79:
                    0c:dc:55:f5:f5:a2:2c:b1:35:97:65:77:36:1d:b8:
                    f8:57:be:73:66:e5:75:fb:22:c3:f9:8c:d1:31:0b:
                    b2:a6:06:f4:52:31:8c:26:18:44:a8:e2:17:d9:c0:
                    84:e0:d5:03:dc:a5:41:04:61:11:f4:0b:3d:b6:ef:
                    79:4d:cf:1c:79:29:cf:3c:ad:f8:49:41:4b:0a:37:
                    a5:c3:53:5d:df:70:3d:ec:29:fe:36:36:a3:56:77:
                    eb:e8:96:db:cc:c4:fa:a0:31:18:a0:5f:57:60:1a:
                    be:28:6e:7c:bc:c5:c3:d7:08:16:32:7b:62:65:bb:
                    cc:50:23:00:08:b4:af:25:11:4a:9a:45:1c:80:66:
                    2e:78:d7:be:b2:ed:90:64:b9:2a:d3:49:ad:77:60:
                    ae:da:d8:a8:84:fc:ec:83:84:5a:a9:af:96:61:cd:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:DA:71:4D:2F:AB:E6:EC:FF:FB:CA:D4:C1:69:81:A4:65:F7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e8d1f38-5dd5-3c53-bf8c-5e3a7b56e874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:b0:10:32:dd:a7:89:b2:83:4d:22:83:81:44:7a:fd:7e:
         31:a5:9b:98:64:f4:e1:84:ed:5c:32:4c:2a:09:ed:be:cb:94:
         20:c6:32:52:74:a1:17:51:6d:b9:f9:e1:42:e1:bb:44:ba:02:
         fa:31:a5:6d:9a:12:22:e2:70:d8:6a:d8:54:1c:fc:74:03:2f:
         b2:08:e6:e2:b8:b3:98:85:7d:00:57:86:44:7e:d8:92:b5:35:
         b2:43:27:c0:31:dc:ec:50:8a:5e:44:a5:77:0d:de:cc:c4:d5:
         58:88:bc:95:63:b1:b4:6d:49:e1:d4:53:37:6b:d6:a1:71:2d:
         c0:dc:74:9b:8a:bb:c4:c0:99:c5:38:f9:23:22:fe:64:27:73:
         73:73:42:b1:1b:bd:fc:8b:c5:c5:59:2f:e9:64:fc:8c:9c:8d:
         d4:d4:13:71:23:d3:7e:44:ee:32:cc:b9:55:fb:4f:fb:c3:03:
         db:7d:76:5e:c5:ac:86:d2:0e:7a:52:4e:43:2c:eb:26:c7:fa:
         1b:b7:bb:e5:89:f8:c8:bf:6a:47:e3:50:ed:34:5f:44:d1:67:
         de:2a:2b:23:61:c8:57:22:77:36:3a:af:80:40:a1:e7:b6:cc:
         0b:1c:bd:1b:19:15:8a:75:f4:4e:cb:ae:4a:a4:1e:ad:a0:a7:
         6d:2a:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:45 2026 by rpki-client