Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbd98cf9-9892-3ca6-8c0a-9ffdb9dae7da.roa
File:                     cbd98cf9-9892-3ca6-8c0a-9ffdb9dae7da.roa (raw, json)
Hash identifier:          rG0eAgkC9WA4jksufFUkb5Y9y7TmRdShBVZHdsFg+gk=
Subject key identifier:   B2:F0:53:20:F1:98:D7:82:22:37:F7:8F:F4:26:F5:8A:87:CD:AD:AC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584CE362056A3ACEE493B6A6C000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbd98cf9-9892-3ca6-8c0a-9ffdb9dae7da.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     22773
IP address blocks:        108.165.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:05:6a:3a:ce:e4:93:b6:a6:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=53737521-93b8-4731-b4ad-614ee78a7141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:e0:e1:b5:9d:1c:ae:41:df:54:fe:ee:6f:
                    2d:f2:40:e0:00:06:d0:fe:68:5b:a7:ed:1c:8c:72:
                    58:db:24:70:c5:31:25:9d:ce:82:4a:39:f9:eb:9f:
                    26:c5:f5:56:e4:35:3a:4d:fc:33:80:af:3f:f6:b4:
                    44:77:9a:23:51:dc:63:ae:dc:7a:fc:19:86:f2:cc:
                    2a:74:45:a1:04:c6:98:68:5f:74:4f:8d:9a:b9:3c:
                    bb:11:70:3c:cd:c6:0f:c8:4e:b3:56:b6:d3:68:ec:
                    f4:ea:32:aa:42:d5:9b:1a:25:71:c9:5d:81:3e:df:
                    21:7e:e9:a3:1d:2f:40:1a:9e:8f:33:f2:82:15:1b:
                    b9:4a:78:76:63:02:c9:85:de:03:26:b1:fb:a9:30:
                    42:0a:54:85:71:1d:66:81:6c:ea:77:b9:70:ed:38:
                    70:4d:b6:1f:87:0a:4d:95:df:af:e4:fb:a2:cd:f9:
                    24:f9:4a:bc:57:e0:c2:32:08:24:6a:46:2b:94:0d:
                    83:39:5f:de:43:7f:af:18:ec:a4:03:85:24:09:06:
                    b4:f6:cd:21:f8:3e:46:2a:c1:76:68:5a:f5:fa:92:
                    d4:cf:7f:3f:ca:5f:5d:0a:22:8b:bf:a5:28:50:e9:
                    8d:d9:ad:a2:24:30:9f:57:20:63:0a:e1:2e:68:29:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:53:20:F1:98:D7:82:22:37:F7:8F:F4:26:F5:8A:87:CD:AD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbd98cf9-9892-3ca6-8c0a-9ffdb9dae7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:12:59:dc:22:ae:80:bd:76:b9:a6:25:fd:a1:29:35:49:
         dd:5f:4d:fc:68:cd:82:e7:7d:8e:e9:39:ad:9e:b3:bc:81:cb:
         76:1d:65:c7:e3:4a:30:5c:13:95:6e:90:2e:29:61:76:e6:53:
         c7:28:b0:5c:8a:7f:ac:6c:24:34:ea:c6:cc:a0:56:4b:1c:4b:
         f3:be:00:4b:6c:5a:26:6c:fc:c8:b0:0b:90:88:8f:9a:7c:ee:
         a3:09:30:36:14:f4:90:36:6b:1e:2b:39:ad:5c:a6:92:1e:63:
         71:a8:2d:48:24:bd:71:24:6b:54:07:30:e0:18:7e:39:dd:ef:
         66:69:14:e2:d2:d3:b3:13:f5:f2:8f:87:50:4d:d9:0a:38:42:
         30:1f:73:a5:30:ca:8a:52:42:26:51:0e:06:d9:a6:7e:3f:88:
         ec:be:57:fb:f5:79:88:0b:44:be:36:b6:33:60:69:16:c5:75:
         46:08:e6:d4:87:75:2d:cd:c8:84:dc:57:87:18:df:92:82:f5:
         d5:96:3b:56:25:4c:b4:93:35:49:f3:0c:ca:17:41:c8:86:51:
         73:b1:52:01:4f:eb:92:65:e6:cd:29:a2:ac:c3:11:a9:cb:9b:
         57:13:44:39:60:64:14:cf:39:1a:35:8c:0c:7f:57:ec:90:ee:
         e0:06:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:49 2026 by rpki-client