Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b34ab146-23b9-3850-bc95-c69278b48f5c.roa
File:                     b34ab146-23b9-3850-bc95-c69278b48f5c.roa (raw, json)
Hash identifier:          y+32kyixDnzzrhXC7047caAYO6BrK3LRSy4vpm4pdnY=
Subject key identifier:   B2:4F:5D:3D:81:CC:75:8C:07:2D:9E:BB:45:93:BC:38:65:4A:6C:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DFA707E3F84B03DE1E49C3A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b34ab146-23b9-3850-bc95-c69278b48f5c.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     61317
IP address blocks:        108.165.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7e:3f:84:b0:3d:e1:e4:9c:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=167b5109-c475-4e0d-83ce-470fc52446f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:07:a3:80:b4:48:47:c6:d8:c8:e0:9e:ad:
                    24:98:8b:59:5e:10:25:df:b2:58:d5:21:1f:3b:5b:
                    af:6e:1e:f8:80:b7:de:db:6f:b2:86:2b:a6:34:cd:
                    0a:f0:20:b8:1c:2a:29:b8:13:77:3b:97:cf:5b:b2:
                    49:31:a5:49:60:10:5c:9a:ff:a9:31:b5:20:e3:ee:
                    ed:26:e8:a9:a8:cf:10:dd:24:39:2e:b8:09:39:68:
                    a0:3a:7d:2f:51:50:1b:ee:5d:3c:65:38:27:48:27:
                    f6:20:37:15:40:8c:03:41:92:f4:10:98:a0:55:c2:
                    50:9c:c1:ec:91:1b:c4:43:73:af:e1:b1:a9:a6:bd:
                    a3:74:61:79:fe:bb:95:60:66:76:f1:7c:88:73:63:
                    b2:3f:d9:01:97:e4:38:12:ee:42:ac:e2:45:5a:96:
                    be:a0:ca:5b:02:89:90:56:09:a4:e3:d1:69:ab:be:
                    b0:55:2b:62:0d:5f:bd:dd:1a:76:83:0e:9f:e2:28:
                    7f:75:5f:f6:00:fc:31:45:40:fb:c6:8e:43:62:07:
                    06:0f:e8:e8:c9:9d:45:55:cd:43:f4:22:64:ce:5d:
                    a7:a5:66:24:32:67:ef:d8:2b:1a:ac:b7:38:c4:6b:
                    8a:a8:00:e8:9e:51:5d:54:ac:04:97:5f:4a:66:a3:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:5D:3D:81:CC:75:8C:07:2D:9E:BB:45:93:BC:38:65:4A:6C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b34ab146-23b9-3850-bc95-c69278b48f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fd:23:d2:03:f5:15:cb:12:9c:87:fc:20:18:dc:db:6c:30:
         fd:57:eb:61:a5:c1:c5:c6:2e:94:a6:32:39:98:d7:9a:b7:49:
         4a:aa:98:4d:13:5e:a4:c4:6f:0f:a4:0c:5d:80:4e:74:75:bb:
         dd:b8:57:88:8d:29:9b:83:fb:5f:31:32:8c:7f:02:0d:91:4a:
         04:9c:6b:95:bd:80:fb:f6:3e:f3:a3:7d:ca:c2:4d:9e:ed:8a:
         7c:74:bf:03:00:1f:12:45:82:bd:1b:05:0c:98:c5:c2:12:a4:
         87:5f:4f:be:94:ca:5a:95:6d:c2:8e:f9:d1:05:7a:11:e8:3d:
         b8:e9:d3:63:d8:c5:d9:8d:37:7c:3b:8e:63:82:3e:94:1a:ef:
         0d:f3:34:5c:60:97:aa:c5:ea:da:db:e0:3c:9d:68:ea:82:52:
         2c:e8:e4:39:06:26:5f:20:e7:c8:91:64:b3:9f:65:20:fe:a6:
         a0:a4:5b:14:66:a1:6a:22:b3:37:cf:7d:f5:d4:de:d2:d8:2d:
         81:35:ed:ed:c2:1d:a1:4f:e6:04:09:2b:71:7c:1f:ee:2d:5d:
         d2:d5:1b:f8:cd:9d:ce:bc:d2:a5:40:c6:c0:4e:9c:b3:d4:88:
         ec:3a:04:10:7f:4e:01:a3:75:1d:61:86:89:ff:59:77:c4:cf:
         15:ea:2f:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cH4/hLA94eScOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
MTY3YjUxMDktYzQ3NS00ZTBkLTgzY2UtNDcwZmM1MjQ0NmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGQHo4C0SEfG2Mjgnq0kmItZXhAl37JY1SEf
O1uvbh74gLfe22+yhiumNM0K8CC4HCopuBN3O5fPW7JJMaVJYBBcmv+pMbUg4+7t
JuipqM8Q3SQ5LrgJOWigOn0vUVAb7l08ZTgnSCf2IDcVQIwDQZL0EJigVcJQnMHs
kRvEQ3Ov4bGppr2jdGF5/ruVYGZ28XyIc2OyP9kBl+Q4Eu5CrOJFWpa+oMpbAomQ
Vgmk49Fpq76wVStiDV+93Rp2gw6f4ih/dV/2APwxRUD7xo5DYgcGD+joyZ1FVc1D
9CJkzl2npWYkMmfv2CsarLc4xGuKqADonlFdVKwEl19KZqOaQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJPXT2BzHWMBy2eu0WTvDhlSmzqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjM0YWIxNDYtMjNiOS0z
ODUwLWJjOTUtYzY5Mjc4YjQ4ZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ39I9ID9RXLEpyH/CAY3NtsMP1X62GlwcXGLpSmMjmY15q3SUqqmE0T
XqTEbw+kDF2ATnR1u924V4iNKZuD+18xMox/Ag2RSgSca5W9gPv2PvOjfcrCTZ7t
inx0vwMAHxJFgr0bBQyYxcISpIdfT76UylqVbcKO+dEFehHoPbjp02PYxdmNN3w7
jmOCPpQa7w3zNFxgl6rF6trb4DydaOqCUizo5DkGJl8g58iRZLOfZSD+pqCkWxRm
oWoiszfPffXU3tLYLYE17e3CHaFP5gQJK3F8H+4tXdLVG/jNnc680qVAxsBOnLPU
iOw6BBB/TgGjdR1hhon/WXfEzxXqLzQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:31 2026 by rpki-client