Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcbf7912-2be8-3a22-a329-e613461af400.roa
File:                     fcbf7912-2be8-3a22-a329-e613461af400.roa (raw, json)
Hash identifier:          4KWgLKlI5ZrSMjRHEewsFDDAopW0708qyU4Uebzy9/E=
Subject key identifier:   EF:88:A0:C2:30:56:ED:F6:A0:29:15:1E:B3:60:FB:4F:BB:7D:17:9B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F35E7C9513387BFFAC80FBE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcbf7912-2be8-3a22-a329-e613461af400.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        108.165.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c9:51:33:87:bf:fa:c8:0f:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=72f7cac0-ea55-4bf3-a61e-fb62d3dea85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:eb:b3:cd:a1:e7:09:f8:4b:f9:a5:e0:2b:
                    78:f3:a1:c1:65:51:0e:c9:88:cf:4b:07:0d:f3:d0:
                    c1:a5:fd:78:23:50:26:70:db:f6:66:f4:13:56:5a:
                    d6:91:a6:e6:e2:4d:60:8c:74:fd:2d:68:eb:bb:2d:
                    90:1b:d6:c9:05:80:d1:e8:26:5e:cc:c2:a0:7b:39:
                    2b:1e:49:12:80:ed:8e:02:d9:6c:f6:f7:b6:23:2d:
                    ad:10:1a:01:57:64:94:56:45:1a:de:0e:e6:f5:d3:
                    af:e7:14:52:74:d0:1a:a5:9e:6d:ad:8c:a9:8b:9d:
                    54:74:81:87:d3:1c:db:17:11:9b:5b:18:00:68:f5:
                    30:51:27:36:f4:e6:5f:18:77:e3:4d:25:2c:bf:34:
                    1b:2f:35:0e:ba:57:b1:79:04:4c:fb:40:15:ea:13:
                    b7:59:40:8a:bd:0e:e6:cc:9c:ed:f1:c6:53:54:61:
                    ea:bf:9d:ee:00:30:db:1f:89:28:cf:97:eb:93:c8:
                    94:36:12:f0:8f:ec:da:6a:97:2f:57:e4:e8:4f:50:
                    d5:8c:4b:56:fa:fe:d5:b8:a3:8e:b9:a9:45:09:c9:
                    4c:70:a3:8d:61:22:49:5f:3e:ba:63:13:16:3b:db:
                    36:59:ea:db:a7:40:5b:14:6b:4e:28:32:de:7e:f2:
                    c4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:A0:C2:30:56:ED:F6:A0:29:15:1E:B3:60:FB:4F:BB:7D:17:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fcbf7912-2be8-3a22-a329-e613461af400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:72:93:fa:78:81:40:b6:f5:17:5a:eb:63:d4:76:ed:e9:
         88:2f:4c:dd:9c:3d:a1:75:b6:ff:a8:23:05:d8:88:01:61:e8:
         f9:7d:59:7a:c8:0c:12:0f:67:41:5b:38:6e:f6:83:78:05:c1:
         72:d0:93:fb:82:fc:f9:ed:f8:c3:73:b2:5d:59:86:64:8f:1d:
         60:6d:b0:9e:e3:8f:56:ff:b7:f4:a9:eb:d0:6e:80:f3:0a:95:
         a4:a4:57:2d:dc:4a:93:45:48:c9:20:68:0d:41:e4:f1:af:e6:
         59:c1:f8:1c:81:21:7b:24:2e:70:99:d2:a3:09:cf:1d:91:0d:
         a3:ba:3e:64:16:84:df:8f:7e:a6:b0:d0:8c:47:6c:bd:a7:c0:
         fe:4c:d6:73:1c:3f:0c:6d:a7:7c:89:9f:8f:41:21:61:12:33:
         7e:ca:fb:18:d2:28:7d:b2:f1:51:e5:d4:af:71:fc:7f:da:c9:
         8d:dc:3f:af:d2:ef:52:aa:ae:e6:98:8f:23:ab:8f:53:be:6e:
         f7:ad:7a:57:14:ef:f6:f8:e9:47:da:f7:e1:58:c6:17:d2:7a:
         d2:2f:56:ff:e9:70:ad:12:c9:6c:b8:22:8c:45:76:f6:c6:7f:
         d0:c7:38:6f:93:16:df:fe:c1:ee:f3:3b:d7:41:ae:59:ce:4d:
         9b:18:95:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158lRM4e/+sgPvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk
NzJmN2NhYzAtZWE1NS00YmYzLWE2MWUtZmI2MmQzZGVhODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGfrs82h5wn4S/ml4Ct486HBZVEOyYjPSwcN
89DBpf14I1AmcNv2ZvQTVlrWkabm4k1gjHT9LWjruy2QG9bJBYDR6CZezMKgezkr
HkkSgO2OAtls9ve2Iy2tEBoBV2SUVkUa3g7m9dOv5xRSdNAapZ5trYypi51UdIGH
0xzbFxGbWxgAaPUwUSc29OZfGHfjTSUsvzQbLzUOulexeQRM+0AV6hO3WUCKvQ7m
zJzt8cZTVGHqv53uADDbH4koz5frk8iUNhLwj+zaapcvV+ToT1DVjEtW+v7VuKOO
ualFCclMcKONYSJJXz66YxMWO9s2Werbp0BbFGtOKDLefvLEjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+IoMIwVu32oCkVHrNg+0+7fRebMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmNiZjc5MTItMmJlOC0z
YTIyLWEzMjktZTYxMzQ2MWFmNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtXcpP6eIFAtvUXWutj1Hbt6YgvTN2cPaF1tv+oIwXYiAFh6Pl9WXrI
DBIPZ0FbOG72g3gFwXLQk/uC/Pnt+MNzsl1ZhmSPHWBtsJ7jj1b/t/Sp69BugPMK
laSkVy3cSpNFSMkgaA1B5PGv5lnB+ByBIXskLnCZ0qMJzx2RDaO6PmQWhN+Pfqaw
0IxHbL2nwP5M1nMcPwxtp3yJn49BIWESM37K+xjSKH2y8VHl1K9x/H/ayY3cP6/S
71KqruaYjyOrj1O+bvetelcU7/b46Ufa9+FYxhfSetIvVv/pcK0SyWy4IoxFdvbG
f9DHOG+TFt/+we7zO9dBrlnOTZsYlfk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:45:55 2026 by rpki-client