Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e64984ec-1d5b-3072-830e-0848fb814ebb.roa
File:                     e64984ec-1d5b-3072-830e-0848fb814ebb.roa (raw, json)
Hash identifier:          td4mS/q76VR2ejBNSAKZ1T+6X1q1HYTcl1Tak0vTtZ8=
Subject key identifier:   65:E5:89:F7:78:31:21:55:21:72:E9:75:E6:38:EA:F2:E7:08:9D:9E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B1806E8D9AE39E485ED410A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e64984ec-1d5b-3072-830e-0848fb814ebb.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        108.165.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e8:d9:ae:39:e4:85:ed:41:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=469c419a-b5c7-4641-89b1-3df7fc01a883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:61:68:e8:01:2a:2e:b0:13:e7:52:80:69:
                    a6:2d:1c:ad:72:f0:d0:95:3b:3f:8a:96:d9:89:0f:
                    37:2f:db:72:29:64:e6:eb:21:ce:b9:a9:9b:c7:ed:
                    c2:38:fa:9e:b6:64:5a:64:aa:51:04:0d:2a:35:bf:
                    1f:7f:8c:a7:65:93:7a:f6:32:f1:42:0c:96:e2:a8:
                    dd:1c:82:ef:c6:7a:72:a7:2d:41:ee:ee:99:c6:a4:
                    18:59:ea:82:bf:ef:73:fd:4f:e0:49:1a:bb:0e:bb:
                    e5:43:6d:9b:0c:c6:d1:1f:4c:22:2c:5c:d9:4a:eb:
                    8c:11:bd:30:f4:4c:73:e6:89:ec:cc:a8:6a:c5:46:
                    13:31:fc:9a:6f:bc:2d:ad:1f:9d:c2:58:04:5a:22:
                    4f:2e:09:2d:3a:8e:d9:d0:b5:49:02:e7:a8:e8:00:
                    0d:61:22:e1:aa:ec:91:2d:73:8b:41:00:4a:8d:82:
                    b2:15:9b:41:56:e9:c0:6c:6b:09:25:90:35:4b:2c:
                    a1:7c:53:de:8a:21:73:3c:98:7c:28:40:03:66:fe:
                    af:96:3c:a1:70:9a:94:77:fe:1b:f6:92:c8:2e:31:
                    7f:87:01:2b:91:98:a1:73:f5:61:2a:a1:d5:2a:1d:
                    c9:60:20:d7:30:25:58:19:e8:c7:99:20:b1:9a:84:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E5:89:F7:78:31:21:55:21:72:E9:75:E6:38:EA:F2:E7:08:9D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e64984ec-1d5b-3072-830e-0848fb814ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:63:f7:bf:c3:55:0a:39:91:a8:22:64:bf:53:7b:f5:32:df:
         69:5c:eb:29:4d:90:21:a1:1b:29:74:62:08:68:1a:0c:02:fe:
         05:ab:e9:38:5b:5d:a8:4a:98:de:86:a8:d4:f1:77:19:7a:be:
         dc:7e:55:fa:f7:30:03:97:61:b9:d3:6d:a7:1a:c7:d4:c0:5d:
         41:d4:8e:fb:4e:51:08:66:73:35:c7:7b:31:d7:b2:bb:8b:0a:
         68:69:42:8c:ac:ab:a4:a0:62:8e:ef:4b:de:36:0a:61:e2:ae:
         44:0c:11:1e:0f:af:8f:a6:b4:dc:ad:22:52:aa:25:51:49:23:
         bc:36:8d:7a:a1:f8:41:81:f5:de:d5:67:c5:27:82:b3:36:0c:
         22:71:7f:98:94:bf:e2:64:ff:d4:0e:f2:0d:97:87:b8:64:94:
         33:d2:6f:f4:4b:73:48:7f:ec:a7:98:77:f5:92:d8:16:d6:23:
         6c:19:6e:c2:71:c9:b2:1a:d4:63:71:84:b8:39:93:05:45:e9:
         47:fd:1c:51:3e:31:ee:21:25:3a:e8:36:3d:f1:9d:7a:8b:f8:
         17:8b:02:63:f0:3b:14:35:30:d4:56:8b:f6:62:b1:f9:14:49:
         75:91:e3:80:45:91:9b:3d:97:ac:15:20:a1:06:3d:1a:d3:12:
         90:c9:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:37 2025 by rpki-client