Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c59ac3ec-1da1-3884-8aa3-313db4994ca8.roa
File:                     c59ac3ec-1da1-3884-8aa3-313db4994ca8.roa (raw, json)
Hash identifier:          2ngfOqkaioaJNV/W4o6G9eZM4JSyunbJNjpf9Mtde1c=
Subject key identifier:   15:BD:18:CE:E0:9E:F5:8A:35:95:BB:52:27:C6:8D:02:70:5D:5E:8E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CD2A1EF134C0B3C63FF686440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c59ac3ec-1da1-3884-8aa3-313db4994ca8.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21859
IP address blocks:        108.165.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ef:13:4c:0b:3c:63:ff:68:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=b9a68b76-2414-4f5c-9eae-c8bb8d6439c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:e1:fd:7a:21:0c:50:19:8e:6c:c0:88:21:
                    15:ca:07:c0:bc:59:36:ce:b2:0f:4a:c6:53:64:15:
                    79:fe:29:f5:29:40:bf:dd:53:e8:73:f6:57:47:bf:
                    2a:71:4c:f6:bd:5c:b7:b5:f3:7d:e3:9d:6f:98:b0:
                    89:66:7d:fd:01:fe:bb:42:f3:41:b4:c1:19:8a:37:
                    bf:35:27:ee:81:38:8f:9c:6a:4e:51:44:12:41:46:
                    11:e8:25:2a:5f:b4:e4:dd:1f:f2:ce:3d:6e:d0:5f:
                    1e:e1:14:dc:73:66:60:88:0c:0e:55:38:20:59:71:
                    ad:2e:32:06:45:2e:57:82:82:ab:e4:a4:49:89:28:
                    40:a7:3c:f9:b5:08:54:90:23:57:62:e4:17:02:de:
                    da:e8:f7:85:06:7c:f5:5c:91:57:45:03:41:23:2a:
                    bb:d5:55:a7:f7:eb:db:01:b6:ec:5c:9d:19:ce:4f:
                    40:fe:70:79:44:0b:91:b2:8b:c2:83:7c:c5:29:89:
                    cf:ce:11:dc:48:57:2d:d7:7c:73:97:6c:aa:cb:26:
                    74:14:5a:48:1f:c1:8f:54:d1:ad:e6:1e:28:da:80:
                    d3:36:77:2b:da:9b:05:2a:08:94:c4:be:34:a8:68:
                    1c:78:66:6d:c9:8c:00:2c:3b:94:0f:ff:87:1f:f6:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:18:CE:E0:9E:F5:8A:35:95:BB:52:27:C6:8D:02:70:5D:5E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c59ac3ec-1da1-3884-8aa3-313db4994ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5f:12:c4:8d:bb:b3:01:dc:cb:32:1e:dc:12:52:b2:9c:5b:
         1a:34:58:13:9f:3d:eb:75:ac:d1:d5:42:39:c5:74:3c:15:f7:
         ad:4e:1b:69:9b:e4:0a:da:fa:5d:db:18:46:4e:b9:23:0f:83:
         86:9e:a9:b6:ed:87:c5:70:f2:8a:e2:2e:2e:ff:ff:2c:8f:ab:
         39:ae:1e:52:46:1d:ce:7b:d4:8c:d6:c4:26:6b:45:23:fc:66:
         98:46:80:80:f3:4d:98:11:db:df:29:bd:71:63:8d:60:ed:39:
         88:74:54:91:5a:a6:f1:94:bd:ee:49:38:e9:ed:3b:28:ed:1b:
         f3:ef:26:19:6a:aa:ae:a2:ce:1b:62:85:f7:a3:ab:fe:07:ed:
         7e:28:d8:0d:0e:65:1e:c0:05:91:17:a9:38:fb:75:d7:cb:39:
         9f:55:44:e5:d7:67:e2:61:3b:57:95:3a:a4:8e:ee:d6:c3:0f:
         45:47:b2:40:30:f5:f0:e4:32:2e:1e:67:e0:c1:76:56:c5:59:
         8a:81:af:5d:ec:18:7d:8a:62:0b:d2:d6:dd:08:16:1e:ae:1b:
         b5:a4:19:88:23:83:ca:ef:a4:1c:e1:39:97:fb:c8:3e:9d:b3:
         17:02:a5:d6:82:df:32:4a:c6:5e:38:16:de:da:c0:d2:98:4f:
         c7:ca:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:17 2026 by rpki-client