Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6248f5b7-d9cd-388d-8766-2d867a566ea9.roa
File:                     6248f5b7-d9cd-388d-8766-2d867a566ea9.roa (raw, json)
Hash identifier:          S6QQDcUqBTzFGASrfEVCJmcYWc8eCOxW2Z6bLnX5mkY=
Subject key identifier:   0B:CB:DD:0C:0B:E9:51:39:A0:CF:3D:10:AB:92:5F:E3:4F:72:B3:B7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EF181F9EE4A01D180629A6700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6248f5b7-d9cd-388d-8766-2d867a566ea9.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     4826
IP address blocks:        108.165.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:81:f9:ee:4a:01:d1:80:62:9a:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=b8c4ece8-d74f-42fe-8d72-0b7ba9d12f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:f7:0e:c6:a8:2e:54:f0:d1:2a:3a:35:19:
                    e1:8e:40:c5:94:87:3b:18:69:b1:ab:7a:b5:86:ab:
                    87:bb:07:c5:16:1e:e1:9f:31:df:fc:54:00:29:8b:
                    b4:aa:f6:3a:1f:84:56:1f:66:75:9b:2d:48:59:dc:
                    c5:80:af:0d:b6:e5:15:df:09:5c:28:6e:9e:bc:a5:
                    27:dd:ae:7f:1b:76:79:72:ba:e9:56:6b:a1:70:7a:
                    00:28:cd:2d:3b:ea:78:23:da:e8:c5:ae:08:68:29:
                    3a:88:af:10:9b:c1:ea:e5:55:b5:3a:f2:c2:a0:9c:
                    e4:d7:95:8a:74:27:48:75:74:45:f0:f3:b8:6d:85:
                    af:c9:48:d1:23:fd:e7:33:70:9f:7d:22:95:b2:c8:
                    d0:df:b6:52:e7:cd:85:09:e7:dc:99:85:6f:3b:6f:
                    fc:9d:60:7c:30:6c:7d:03:a6:61:77:83:bb:0a:8f:
                    0a:cf:66:96:57:e4:dc:8b:73:29:d2:0f:79:a4:24:
                    d8:c5:cb:94:64:03:b7:cb:8c:2e:45:5a:2d:12:1f:
                    08:bc:b3:8f:25:9d:9d:7e:94:64:b5:9c:8b:d0:86:
                    de:27:ac:17:88:a8:58:e7:06:c2:ef:2f:26:1f:08:
                    db:6f:7d:1f:1b:19:b6:7f:1d:89:66:af:13:c9:05:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:DD:0C:0B:E9:51:39:A0:CF:3D:10:AB:92:5F:E3:4F:72:B3:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6248f5b7-d9cd-388d-8766-2d867a566ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:44:57:59:62:78:28:0f:3c:e4:bd:22:49:cd:c8:36:1f:6c:
         dc:a0:89:dd:d9:91:0d:2a:d9:20:7c:c1:68:3e:c7:56:c5:b1:
         75:de:4c:24:d5:2c:5d:89:f6:1c:0b:8b:f1:80:c4:f1:5b:3f:
         7a:f2:e8:e4:4e:90:7a:ca:85:16:97:c7:60:98:a0:d4:62:14:
         61:8d:9c:da:cc:c3:ed:a8:04:e1:68:aa:63:7d:df:30:52:84:
         30:ac:05:54:e4:06:d7:c9:d9:68:8d:1f:71:8b:df:d4:78:3c:
         47:fb:6a:fb:c6:cb:1e:b0:d8:24:8a:6e:e7:9c:09:33:d4:2f:
         a8:0d:6e:3d:ea:3a:01:c0:1e:92:4b:7e:e9:5c:c4:33:79:3b:
         e4:34:96:30:d9:e0:ae:ae:6d:ff:86:d8:e9:3c:e7:bf:da:ba:
         1f:57:4d:d1:4a:09:29:0f:83:f2:d2:8b:2d:28:23:37:7b:53:
         70:ad:b5:55:b4:a0:69:45:c6:46:4c:de:92:94:f0:3e:65:7e:
         63:1e:ca:5c:66:2a:f1:b5:5c:ba:19:b7:46:c0:37:14:8f:bc:
         76:f4:f2:ac:1d:cb:85:ff:09:cb:d0:bf:c2:b6:d5:f0:08:f5:
         b9:63:bb:b6:0b:ff:38:d7:b4:98:c5:98:ba:6d:29:c3:54:89:
         29:4f:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:21:11 2026 by rpki-client