Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd481865-04f2-3dc1-bcb1-e696cfeb279f.roa
File:                     fd481865-04f2-3dc1-bcb1-e696cfeb279f.roa (raw, json)
Hash identifier:          naz3FaEnr+S0Yfk0tyc19hjEPLbwtUDvHDpeg0QbRVA=
Subject key identifier:   1E:E1:41:0E:DC:2B:28:CF:7F:6D:AC:AE:DE:C4:F0:38:42:B5:2A:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E1E443F4B87A0967425C49480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd481865-04f2-3dc1-bcb1-e696cfeb279f.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     401152
IP address blocks:        108.165.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3f:4b:87:a0:96:74:25:c4:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b867f8f9-6c46-48e7-90f4-94cdde1501f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:1d:a7:84:6d:7a:47:7c:3b:8b:24:d0:b2:
                    e6:b1:08:5d:4c:20:2e:24:cf:3a:91:14:9d:57:7b:
                    1a:e2:4d:9e:54:f9:cd:e8:c7:ad:8c:ea:e6:3d:03:
                    ff:24:0a:1b:bd:4c:d6:ae:0b:4f:e0:f5:b4:42:cb:
                    86:02:7a:9b:e1:32:a1:bc:af:6d:07:bc:d2:04:dc:
                    4c:e6:80:5d:59:e1:7e:bb:fc:14:c0:bf:d8:f4:14:
                    e1:da:24:41:39:0c:60:2f:a3:a5:6a:86:59:3a:9b:
                    e2:4e:44:17:93:c6:5e:f6:df:6c:fe:5b:fb:7e:8f:
                    d2:f6:66:d9:8f:a9:01:07:bf:49:77:29:1f:9d:37:
                    60:c3:cc:31:a3:f9:88:de:59:27:9a:96:ed:53:26:
                    98:5b:5c:3e:41:89:17:ee:17:58:ab:b9:61:6e:1d:
                    b4:65:74:fb:49:1e:0a:2a:6c:8c:13:1c:9a:a3:d8:
                    2a:a8:40:e3:1b:04:4a:51:7b:17:64:52:f5:90:2c:
                    f5:5c:b7:f2:9a:2e:66:c4:ca:53:9a:53:52:0f:cd:
                    a4:a8:c4:da:89:8d:33:19:f8:83:d9:7b:8c:cc:8c:
                    3a:11:ff:f2:1f:4b:a2:f0:1f:69:76:e4:9e:73:1b:
                    c6:61:44:84:32:94:06:ea:fe:a5:5a:11:1c:5f:5f:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:41:0E:DC:2B:28:CF:7F:6D:AC:AE:DE:C4:F0:38:42:B5:2A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fd481865-04f2-3dc1-bcb1-e696cfeb279f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:09:de:75:73:e4:b7:4f:bf:e4:ab:cc:c7:10:f3:ed:41:f4:
         14:1b:6b:fd:44:6a:b5:b1:de:6a:fd:02:c5:cb:b5:ab:b1:29:
         96:be:9d:e5:15:04:6c:02:74:43:bd:3d:d7:83:bc:f6:8a:c6:
         04:c8:4c:c9:be:48:ad:b1:f9:69:1e:ab:69:8e:47:5a:99:48:
         cb:f1:91:3f:7c:94:97:2b:65:eb:6a:b4:72:33:98:39:0e:39:
         ad:db:1f:f5:38:72:9f:20:db:92:a3:31:81:1c:ac:e0:bc:09:
         ee:f4:0c:3b:bb:c6:63:fb:59:53:98:0f:5a:90:6d:32:0c:4e:
         7a:6e:97:1e:14:b2:98:23:55:a9:e8:fa:14:b1:e7:02:d7:df:
         9c:d8:60:ca:c0:19:2c:2d:9e:a1:37:45:12:ae:d7:2b:05:e1:
         24:2f:4f:9d:51:fa:44:3c:25:c0:16:9b:fc:0a:06:d0:aa:57:
         f9:0e:7a:69:36:49:19:9f:b5:79:cd:db:53:6d:22:50:6b:68:
         20:dd:ec:76:31:d2:24:0d:03:b2:68:51:02:d9:43:cd:3b:af:
         ef:d5:d7:06:6f:97:ae:09:39:37:ca:68:7f:62:ba:75:04:a2:
         e7:bd:3d:2b:51:ec:d4:3d:e0:87:f7:c5:7d:6c:6b:cd:1c:b6:
         dd:84:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:50 2026 by rpki-client