Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54efed9c-18f5-3430-ac45-ec163a86e7c1.roa
File:                     54efed9c-18f5-3430-ac45-ec163a86e7c1.roa (raw, json)
Hash identifier:          JDUcb4aRElizjCutl4prfvVnp12o9JqjMdYVwshdTzU=
Subject key identifier:   48:9B:2E:91:93:98:4C:9E:4A:AD:F8:0E:8B:DD:77:45:02:20:4B:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D7CCFD2091320F799C5282300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54efed9c-18f5-3430-ac45-ec163a86e7c1.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     401152
IP address blocks:        108.165.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d2:09:13:20:f7:99:c5:28:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=c8f23fff-de96-448e-a6eb-4791e559da5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:3b:e8:e7:e0:b1:2b:de:10:8a:85:60:43:
                    50:9e:3b:52:98:5e:9d:67:f1:7b:aa:f8:b9:8f:4a:
                    36:4e:ba:2d:5e:45:ba:2a:35:e7:14:15:ed:f0:36:
                    b5:b6:bc:b0:28:7f:5c:db:33:ae:49:82:98:f4:80:
                    3f:ae:9a:b8:e0:06:fb:8e:fb:19:f1:9a:16:aa:63:
                    f3:75:97:17:c3:4d:3f:83:1d:dd:27:08:21:9e:dc:
                    12:ca:7e:1a:d8:c7:0e:1e:4f:9b:51:4c:57:92:b1:
                    20:bd:ab:23:e9:2e:90:7a:65:8a:63:23:d3:e5:0e:
                    fc:98:48:86:58:81:6e:50:14:a9:97:14:a0:97:13:
                    1a:8e:6b:22:78:d2:58:11:8e:f3:94:cc:fa:c4:86:
                    81:6e:cf:d6:a9:63:cf:c8:b7:95:1f:ad:7c:da:e1:
                    8a:f8:2a:a6:50:8e:cc:b3:55:2b:a7:a8:7d:92:bc:
                    22:7d:38:a2:90:dc:e9:b3:44:55:84:4a:21:b3:32:
                    51:71:74:4d:7b:e8:50:61:73:29:2f:24:ad:61:15:
                    44:db:d7:40:84:e3:6d:58:2b:50:21:9c:ce:09:aa:
                    eb:27:84:f6:4d:d9:79:d6:17:01:a7:0f:3b:bc:88:
                    9d:a2:d9:1a:ce:9c:4e:72:7d:c0:24:0e:90:d2:9c:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:2E:91:93:98:4C:9E:4A:AD:F8:0E:8B:DD:77:45:02:20:4B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/54efed9c-18f5-3430-ac45-ec163a86e7c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:34:0d:e7:5e:c6:2d:0e:20:0b:6d:15:bf:5a:74:0a:c9:
         a7:2d:7d:15:d5:0b:2f:96:99:a8:e3:a7:96:27:da:1f:d8:15:
         6c:ff:37:c1:ef:46:63:4f:60:1f:aa:2a:07:8d:47:25:a7:4e:
         e9:dc:4d:04:7e:3f:29:4d:23:24:a9:7a:96:c0:fc:15:db:4b:
         b6:c3:d7:46:5a:cb:92:05:a3:a3:1d:06:11:23:26:fe:4a:c4:
         3a:e4:d3:04:53:34:94:b7:db:18:1a:2e:8c:04:01:44:0f:a4:
         16:40:34:b4:c6:5c:39:b2:df:c2:0f:f9:2b:af:7d:f1:c9:64:
         2f:3d:cc:d0:57:67:f4:16:3e:25:ea:38:eb:ca:f5:4f:77:c9:
         3d:b8:0e:fc:4c:1f:13:8a:67:6f:9e:41:57:f1:78:25:3e:12:
         39:33:0a:3c:17:eb:f3:42:20:dd:95:40:f2:c6:0f:a7:77:29:
         13:3f:2d:e7:29:7a:b7:af:53:f8:18:05:e3:4f:e2:50:6d:8d:
         25:13:16:c8:2a:c2:9b:d6:22:db:dc:91:c1:00:da:0a:d3:74:
         d8:7c:69:1b:77:80:92:fa:d1:5e:9c:c0:39:3b:31:df:5b:b3:
         c1:ae:ea:55:1c:a3:5d:1e:88:49:ba:0a:8e:03:3f:6d:bd:b6:
         30:b9:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:40 2026 by rpki-client