Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa
File:                     f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa (raw, json)
Hash identifier:          Gy+2xNVuuWN4xqOfn8kqPQeH+TDAU4bzsnkVUsQh50g=
Subject key identifier:   67:D5:51:E7:3D:9F:BD:79:4A:D5:0A:0D:B4:AC:7F:3B:4F:1F:84:F2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EE4F1EE57264660D746B7B780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        108.165.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:ee:57:26:46:60:d7:46:b7:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=1cf6b131-8791-4288-9e6b-0e1ab1463d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:e3:6b:33:db:e2:81:c2:8a:a8:6b:6e:5b:
                    42:9c:3a:df:ba:06:05:7c:cb:92:4a:21:aa:b2:86:
                    2b:da:ba:2e:20:3c:61:8e:c3:78:b2:ed:08:9d:85:
                    0e:c6:a9:61:21:94:0a:67:71:e5:e9:5a:7c:51:78:
                    de:96:de:0c:1b:a4:30:0b:b5:f7:81:0c:91:9c:f3:
                    a4:46:32:f0:8d:d6:2a:f5:52:52:d1:b8:79:e9:a9:
                    c8:bf:ff:a2:f6:ee:9d:80:e9:c5:57:6d:f7:cb:a4:
                    40:c4:8b:33:2a:b7:a7:c9:40:4a:6d:53:37:0e:66:
                    30:ee:94:0f:73:94:26:76:a2:0d:06:54:5e:db:14:
                    b2:e1:ba:b6:74:a9:40:82:10:b9:f0:5d:5c:c7:22:
                    92:df:20:a7:07:72:76:eb:0b:fd:3d:14:09:89:c0:
                    f3:67:d4:38:67:fa:d2:13:db:f9:4c:7a:7d:12:ae:
                    78:45:9a:66:76:a2:14:5c:05:29:f1:fe:10:03:76:
                    de:05:a4:26:f8:15:d4:d8:26:1c:3d:1a:82:3e:20:
                    07:d1:17:a6:f3:18:28:cb:c2:85:4f:ba:50:1c:af:
                    51:ab:68:f7:3c:51:b1:5a:dd:3e:80:ff:8d:ee:8b:
                    b7:c4:52:e1:c5:fd:cc:e7:1e:69:df:fd:42:fd:29:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D5:51:E7:3D:9F:BD:79:4A:D5:0A:0D:B4:AC:7F:3B:4F:1F:84:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f05b435b-afeb-3e0e-a70b-c016fdc9c1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0c:43:02:90:8d:84:eb:d0:b0:1f:04:e5:55:e7:c7:0b:ea:
         9e:a8:aa:d6:c4:fa:46:5f:96:b2:3f:ef:d8:da:f1:67:2a:b9:
         b5:0b:66:75:23:15:42:1d:bf:4a:10:61:02:e1:4c:1a:81:97:
         e3:89:7a:3d:56:d9:5e:1e:1e:4f:c4:82:a2:a7:7b:a6:a9:db:
         f1:9d:ef:fc:73:af:84:07:4a:c4:d1:0e:b5:9c:a4:81:e5:9c:
         fc:d7:6f:0c:e5:5e:6c:b2:5a:eb:e0:33:90:24:de:d8:f4:d7:
         ab:80:b6:72:91:44:d0:50:fc:54:a5:c8:d4:42:07:4f:94:8b:
         bc:43:56:4e:12:f9:b8:5f:2f:5f:be:78:20:e2:f8:cd:3d:49:
         1c:77:e5:e3:d1:c8:84:af:b1:b9:39:a5:6e:23:e6:3f:d3:92:
         b4:be:e9:ce:52:49:bb:19:b2:e0:bc:eb:5a:63:02:ed:28:af:
         05:d5:e5:98:31:11:45:b0:8e:4c:37:cc:39:13:ab:ba:6f:42:
         0a:62:6b:49:8f:0d:9b:b1:89:b0:21:20:d6:0e:ee:93:92:0e:
         ee:70:b0:ad:23:2c:a9:f8:aa:fb:47:06:2c:5d:fd:dc:f4:0a:
         2f:9d:79:c8:95:a5:73:58:c1:77:a3:b2:f7:ab:de:40:a6:5e:
         7f:8b:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:10:23 2026 by rpki-client