Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f5b43a-72b8-311c-832e-c605bdb6c502.roa
File:                     78f5b43a-72b8-311c-832e-c605bdb6c502.roa (raw, json)
Hash identifier:          iTGPVM4eMudMOFI5lWOOrz7tohl8ouaLEcim3+5b1VA=
Subject key identifier:   4D:C3:EE:FE:37:31:BC:1B:BE:50:2F:EF:01:2B:6C:AD:C8:8A:B0:8C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A682608D00EC3FD29FE35ED00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f5b43a-72b8-311c-832e-c605bdb6c502.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     21859
IP address blocks:        108.165.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:08:d0:0e:c3:fd:29:fe:35:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=c1afc717-c751-45ee-99be-a877509d82b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:b9:68:d7:38:ad:97:f0:d0:bd:df:0a:e5:
                    8d:0b:dc:15:1b:61:49:56:ad:5c:c7:61:05:32:cb:
                    24:47:80:1a:7a:aa:43:c0:ac:f1:56:5d:a6:12:fa:
                    40:68:11:a3:57:58:32:cb:cc:9f:80:53:f6:0d:ae:
                    30:8e:71:7a:f7:9f:06:13:df:71:d0:d7:72:15:a6:
                    2a:f5:ce:9b:e9:21:d0:5c:34:de:65:92:4e:fe:ed:
                    b8:5c:c6:00:21:5b:49:b4:bc:35:98:86:90:b0:ab:
                    dc:cd:30:03:63:77:9b:29:c4:18:77:c9:ed:97:d7:
                    69:66:5d:55:0b:cb:fb:4b:ba:34:67:5a:2c:23:61:
                    36:06:47:a2:ce:a3:f3:97:fc:4c:17:ab:40:5a:56:
                    91:8a:24:94:f0:5a:28:28:20:1c:c8:5c:b3:13:68:
                    42:dc:75:92:ca:44:3c:6f:9a:2f:b4:67:63:f4:07:
                    0d:2f:99:8b:29:0e:19:c1:9c:62:40:fb:17:2a:32:
                    c6:e7:79:ba:70:9d:18:df:82:f4:2c:3e:67:23:1b:
                    69:01:18:01:cc:58:1c:d5:1c:78:4d:69:44:21:da:
                    65:b4:21:a5:94:e5:d7:82:c9:f8:23:4d:1c:54:29:
                    14:7e:f6:d3:61:9f:98:48:50:15:b1:a9:58:66:0d:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C3:EE:FE:37:31:BC:1B:BE:50:2F:EF:01:2B:6C:AD:C8:8A:B0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78f5b43a-72b8-311c-832e-c605bdb6c502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:97:32:20:f3:41:cd:49:72:45:3a:f0:bf:b9:6c:2c:6e:
         87:3f:97:ad:2d:09:a5:ce:25:ea:dc:8f:32:9e:43:7d:55:2e:
         ec:47:91:17:5a:2d:31:49:23:9c:03:f3:00:aa:1e:f2:39:bf:
         b0:72:dc:78:4d:86:f2:d6:e5:c3:20:2d:f1:b6:a9:70:61:25:
         d8:f8:a6:01:fc:ad:c9:00:ab:de:cf:fc:05:53:ea:dd:a7:54:
         dd:8a:4e:d1:81:a4:7f:d3:f6:ef:82:fb:2c:11:0e:4e:40:86:
         a2:43:95:e3:e8:ed:d8:57:3f:81:0d:94:50:23:55:f1:88:c8:
         d0:4a:6d:ba:5b:3c:78:1e:14:fc:b3:31:4d:65:17:30:b0:93:
         d9:4b:96:1f:15:dc:21:14:94:13:ab:5e:bd:f6:2a:86:9f:91:
         ba:74:fa:e7:90:2f:4c:37:72:c9:49:4d:b0:4e:76:27:3b:d3:
         56:dd:1d:c3:7e:a1:c1:61:33:1e:ba:7d:82:d0:ea:ac:c5:f1:
         e2:a9:ed:2e:77:78:e0:c9:d0:85:c4:1d:1e:d7:79:24:02:44:
         63:66:4e:10:d7:38:b0:6b:da:9f:3d:9b:51:b7:b0:c8:5c:6d:
         a6:73:dc:c6:9a:91:3c:de:cd:95:7f:70:4f:fb:2c:a0:fb:fb:
         4f:ec:59:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:49 2025 by rpki-client