Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbcaf63c-ee6d-3493-ac00-1424005bb96a.roa
File:                     cbcaf63c-ee6d-3493-ac00-1424005bb96a.roa (raw, json)
Hash identifier:          sV21VFlbxCGSdd7Zw+rvZE/44Efd04z3KdfVMpfI2K4=
Subject key identifier:   69:BF:10:07:59:C0:14:09:32:E2:97:3D:A8:EE:E3:77:9C:FF:2D:F2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E13197E3E74E201817565FEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbcaf63c-ee6d-3493-ac00-1424005bb96a.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     263812
IP address blocks:        108.165.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:7e:3e:74:e2:01:81:75:65:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=75e2bbc0-d622-426c-9446-7b06d543698d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:51:ea:0f:74:09:9b:5e:44:7e:fd:e8:82:
                    64:5b:4d:59:53:89:38:13:c5:e1:63:48:e6:73:00:
                    c3:cd:0c:b1:a0:fa:63:ff:79:cf:eb:09:b9:bd:92:
                    50:24:fd:c2:1a:03:56:d9:eb:98:36:be:cc:51:08:
                    21:af:36:dc:25:6a:dd:ae:56:fc:ca:25:ed:83:b0:
                    c3:b6:5d:cd:58:85:cb:bd:8e:e4:34:c0:bf:8b:cc:
                    52:92:1d:cb:50:45:ac:46:75:f9:3c:02:f2:7e:a1:
                    43:76:8c:07:26:8c:3c:db:d4:d5:79:f3:8c:3d:2a:
                    7b:7d:de:5f:02:0c:d2:45:07:29:51:02:a7:71:02:
                    75:b2:51:e5:4b:6a:af:df:15:0e:9c:62:eb:b0:07:
                    e6:ed:10:b9:ff:a2:fc:cb:3e:71:ef:fa:9b:4e:85:
                    a2:fb:6b:0a:71:32:dc:75:a0:66:5e:3b:dc:70:7d:
                    f7:d2:88:6a:a8:19:64:c2:73:cc:b1:e4:51:ff:ae:
                    5d:5d:32:db:9e:55:58:cf:fb:20:2c:e8:bc:cd:1b:
                    c6:2d:a9:f5:db:f1:df:bf:68:24:f7:73:6c:fd:65:
                    fe:6c:a0:7b:b1:b3:e5:03:6c:c9:77:24:61:b1:a1:
                    51:7f:62:f0:48:79:d4:90:24:41:80:bc:a5:06:1c:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BF:10:07:59:C0:14:09:32:E2:97:3D:A8:EE:E3:77:9C:FF:2D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbcaf63c-ee6d-3493-ac00-1424005bb96a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:cd:9d:de:c6:e4:f4:f1:4b:b6:d7:e3:11:01:69:78:a4:
         80:de:b2:8c:dc:4c:9b:98:62:e4:ac:50:06:81:93:0b:b6:a3:
         f2:20:db:88:4a:38:f2:81:9e:01:f6:f0:fc:23:cc:d1:f6:ab:
         39:6a:aa:5f:34:b9:7c:2f:4c:49:81:36:9e:b6:39:0c:84:5b:
         58:4e:3f:2a:11:03:53:0b:28:c0:d5:03:50:2e:00:e5:f0:cc:
         0f:63:2f:b3:92:08:0a:73:5c:61:a3:fe:cd:74:06:6a:46:f4:
         8c:61:df:24:1f:bc:fa:e9:38:a2:8d:1f:b1:96:af:9d:94:e5:
         33:d3:ac:76:c5:2c:e2:62:ab:09:ec:d6:f0:b3:ba:3d:31:7e:
         a7:76:ff:7d:89:90:d2:15:b4:c5:76:82:a1:a1:a7:b0:27:e4:
         dd:b3:ba:29:91:d9:fb:71:15:d1:02:c9:52:dd:65:f8:ae:2f:
         b6:ca:50:69:07:0e:37:60:be:eb:79:9f:e3:0a:3b:82:a9:b7:
         21:a2:01:a4:50:cf:6e:5c:30:c9:66:4d:5d:b5:a0:28:c7:17:
         d0:be:75:fc:11:7c:24:66:6c:97:26:fb:1c:34:57:a6:7a:70:
         3c:f9:13:78:39:95:28:af:37:61:d4:b9:da:0a:74:91:05:74:
         0d:63:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:39 2026 by rpki-client