Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a03d79c-0faa-3c25-bb02-a2fc779b1150.roa
File:                     9a03d79c-0faa-3c25-bb02-a2fc779b1150.roa (raw, json)
Hash identifier:          ZNHhSfgSEKThSzno8tQm29hgb8MG7CHNw5xsybdykiw=
Subject key identifier:   DE:AA:29:63:83:3D:00:71:68:3D:D6:55:34:67:07:C7:BA:22:FD:93
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE1507B35B35CED85C7DADD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a03d79c-0faa-3c25-bb02-a2fc779b1150.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     401152
IP address blocks:        108.165.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:7b:35:b3:5c:ed:85:c7:da:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=23f20cd7-6ce6-4eee-a802-e3f45c964cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:87:27:49:e4:10:a1:e6:c2:10:55:68:2a:
                    a1:9e:82:b9:9f:95:8d:b5:48:5a:09:8d:fc:91:be:
                    43:f8:e0:72:0b:9e:40:ce:63:c2:d2:0f:c8:66:d5:
                    be:17:79:a8:da:3f:a2:79:d0:bb:33:12:90:dd:3a:
                    88:da:44:45:b5:44:16:90:cd:87:ad:f9:90:80:9e:
                    75:34:b6:1f:71:65:53:f6:10:a8:b1:d7:a8:07:09:
                    ab:48:85:42:2a:e0:23:52:1f:8f:69:2c:b9:f3:80:
                    95:76:b0:db:cd:ba:6f:20:af:08:86:7c:58:44:54:
                    b0:7f:8a:8e:02:b9:ec:cf:cd:ff:d0:98:4d:ae:7d:
                    12:f1:6e:56:a6:4f:5e:98:0a:49:54:55:73:ee:de:
                    f0:4f:26:6c:04:af:a5:0b:f1:76:38:28:a8:e9:2d:
                    fd:e5:df:8e:45:fc:2e:00:0b:61:9f:b1:3d:c9:7a:
                    3f:29:a6:f5:f8:2d:0c:3a:b6:85:c4:2d:71:bd:f2:
                    a6:5f:a5:d8:ea:30:57:9d:3e:35:e1:9d:8d:fa:7a:
                    07:fa:f6:e6:99:62:22:98:56:a5:21:41:ca:47:4b:
                    ac:0e:8e:05:d6:b0:70:76:8d:ec:79:a5:bf:f0:40:
                    11:88:0f:54:05:95:70:62:9c:be:0d:b9:b8:02:8b:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:29:63:83:3D:00:71:68:3D:D6:55:34:67:07:C7:BA:22:FD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9a03d79c-0faa-3c25-bb02-a2fc779b1150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:48:08:de:1e:4f:7d:27:0a:45:d5:08:3f:ec:20:02:64:23:
         00:a4:88:a1:0a:8b:28:b5:b0:9b:d6:b9:f0:c3:aa:80:57:89:
         fe:10:50:aa:2b:b1:06:d8:f4:37:99:63:f3:a5:b3:65:6a:9f:
         80:1e:e4:8f:04:dc:a0:53:eb:c3:2c:9d:bf:46:5d:2a:29:88:
         df:fb:9d:1e:d6:48:95:07:24:21:50:79:d7:42:e0:f9:23:b5:
         c4:8d:9f:9c:df:15:cf:ab:64:54:cf:80:ac:bf:c2:c8:8e:b2:
         0b:38:86:93:77:8c:c8:9f:83:85:89:00:b2:67:9d:b4:82:b9:
         5e:2e:50:5d:88:39:36:8f:b1:c9:d5:0b:12:51:e1:47:dd:08:
         2f:3f:2a:0e:81:8a:4a:8f:ce:65:39:01:69:13:6f:7c:53:cd:
         e1:00:28:21:22:c0:ed:bf:5c:08:fc:cc:f2:a5:cb:66:f2:a2:
         71:34:45:c4:4d:e5:11:2b:d6:6c:4d:b8:70:d9:3b:09:03:be:
         58:e5:87:67:92:0c:db:f0:4a:ce:2e:54:b2:d7:34:b8:e6:e5:
         5f:54:44:33:78:4f:79:08:be:24:74:e9:30:62:16:24:5e:1e:
         a4:71:e5:3f:58:c8:6c:bc:46:da:50:77:d7:e6:cc:0e:6b:1e:
         6b:7c:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:14 2026 by rpki-client