Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f8db3da-634c-34cf-91f6-608577ee2698.roa
File:                     2f8db3da-634c-34cf-91f6-608577ee2698.roa (raw, json)
Hash identifier:          1M9jqD0txFAbi5LhOWjLlxZmgskm2ZXMMGDku1PD51A=
Subject key identifier:   FB:D0:9D:80:EE:56:86:09:C2:1E:56:CD:A6:40:72:3E:10:3A:35:81
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E1E449FD4427077B4E3EEE9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f8db3da-634c-34cf-91f6-608577ee2698.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     209604
IP address blocks:        108.165.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9f:d4:42:70:77:b4:e3:ee:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=05fd1018-10c1-4389-95ae-dd33e45d7164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:3a:b4:ec:f9:22:27:45:35:2d:48:8a:ec:
                    12:c9:2d:00:8e:66:67:05:46:ce:3f:e0:d0:08:40:
                    c2:b9:75:a3:92:c2:4a:31:41:67:c9:34:1f:f7:a5:
                    86:dd:0d:34:4e:65:8f:59:a8:ab:63:e1:8b:83:f9:
                    8a:43:91:2d:e1:69:f7:24:e2:53:d8:4b:9c:73:dc:
                    bd:4b:2d:8a:75:a2:3c:f7:98:18:48:7b:87:a3:f7:
                    68:ad:92:a5:b3:55:78:a6:7b:4c:05:2e:75:11:1f:
                    a4:8f:ed:49:3f:a3:46:9d:c7:9b:55:6e:b1:80:64:
                    6c:3c:d6:31:4f:bc:42:4d:63:e8:0e:b0:05:b7:79:
                    d2:c4:9d:9c:bd:d1:97:fd:94:3b:60:19:f1:cd:a5:
                    a0:cc:65:03:ee:7d:9f:08:35:80:c5:df:d0:e2:7b:
                    45:cb:5e:47:a3:3d:d9:47:bb:9f:a9:7b:e0:92:31:
                    43:75:c3:11:bc:69:94:44:f2:10:9b:99:1b:d3:22:
                    2f:89:93:e6:db:52:40:37:af:a1:1a:ec:77:97:a8:
                    f3:f0:12:ae:28:7c:4c:98:fb:cc:79:11:4a:3b:9b:
                    fc:cb:1d:7a:57:1e:e8:34:36:96:1b:ad:a0:4f:32:
                    12:61:af:93:0b:e2:9c:de:b9:22:95:42:5f:88:e8:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D0:9D:80:EE:56:86:09:C2:1E:56:CD:A6:40:72:3E:10:3A:35:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2f8db3da-634c-34cf-91f6-608577ee2698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3e:7c:6b:60:3b:70:0c:de:53:aa:fc:a4:a2:fd:ed:50:50:
         04:f9:79:13:6f:c9:e1:4d:6d:5e:cc:61:f9:8c:07:2a:82:bb:
         03:4c:47:b7:42:19:63:94:02:dd:76:8c:fe:f1:9d:a8:71:85:
         3c:40:8a:9e:4b:42:8c:6c:b6:bb:b5:f0:ba:98:4e:3e:80:be:
         65:ad:5e:d5:81:b0:d7:e3:3a:48:29:bf:be:01:1a:13:42:95:
         2d:bc:de:74:2a:f8:03:ff:bb:86:46:e6:77:fb:a3:50:af:57:
         b2:99:9d:bf:7d:7d:80:b4:de:d1:58:79:79:21:85:7d:2f:b6:
         13:c7:ab:92:93:e3:c3:f8:1c:5a:39:8a:48:2b:a1:c5:fe:96:
         11:93:a0:8a:2c:45:34:4a:8b:b3:8b:89:14:29:b8:99:55:96:
         d3:8e:9a:10:03:3b:71:8f:d0:dd:95:9e:fb:83:41:d7:46:74:
         41:87:44:b9:9b:86:e0:85:61:33:75:c1:f6:b2:44:2b:d1:da:
         ec:dc:1e:93:e1:de:c4:c6:22:5b:15:91:d7:7c:eb:af:6a:21:
         f0:72:fb:0a:e1:bc:86:46:61:a7:ef:40:ad:44:0c:55:4e:f2:
         04:2c:1b:9c:bf:9a:7b:87:6d:b8:6a:01:32:cc:26:7b:e9:56:
         fc:7f:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:07 2026 by rpki-client