Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05d97146-4181-31d6-98b0-578d44e43028.roa
File:                     05d97146-4181-31d6-98b0-578d44e43028.roa (raw, json)
Hash identifier:          2DBgUG1F+nNP5lPs4Svo7FlCh5kY7hcQMINzfbwCHPc=
Subject key identifier:   0E:F5:3B:D3:BD:72:12:32:A2:A1:12:2D:E6:34:E1:69:3D:0A:33:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D0F06414C7D444D915549FA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05d97146-4181-31d6-98b0-578d44e43028.roa
Signing time:             Wed 04 Mar 2026 17:11:18 +0000
ROA not before:           Wed 04 Mar 2026 17:11:18 +0000
ROA not after:            Tue 02 Jun 2026 16:11:18 +0000
asID:                     399646
IP address blocks:        108.165.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:06:41:4c:7d:44:4d:91:55:49:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  4 17:11:18 2026 GMT
            Not After : Jun  2 16:11:18 2026 GMT
        Subject: CN=b08379e1-95b0-4e5f-b8b7-4af710c8fb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:22:b1:bf:44:ed:10:de:56:10:f4:6a:f3:
                    05:b6:b4:e0:b2:67:0c:d6:2f:53:14:38:af:60:81:
                    bc:9c:a1:78:2c:45:aa:15:b8:b2:2c:11:ce:9c:14:
                    aa:2f:86:39:5a:f9:30:92:98:6a:4e:78:97:c7:a5:
                    ca:6f:b7:bc:1e:1c:24:48:c3:07:c4:cc:32:8d:44:
                    d3:5b:b2:66:f8:45:68:de:c4:de:6c:3f:38:e3:f6:
                    f0:70:89:27:43:bb:b4:71:d2:b3:88:72:cd:8e:60:
                    e9:9c:1f:89:b1:4d:53:ea:ce:3b:ed:0a:8c:0c:66:
                    c6:3a:7d:2d:32:77:37:28:6c:ce:ca:88:6c:c3:b5:
                    07:86:75:49:fe:7f:44:c9:bf:4f:32:91:2b:70:f8:
                    73:b3:24:85:79:e9:a8:af:03:7b:a2:cf:5c:23:dd:
                    01:d1:57:65:65:0f:47:3a:5b:3c:59:94:95:da:dc:
                    ad:21:da:38:fb:38:d5:42:ec:04:f7:39:d4:49:bf:
                    e4:d4:5b:b0:8e:66:7f:15:be:88:94:ca:0e:cf:95:
                    1e:e4:b9:23:68:f5:5b:0c:46:44:e9:3c:7b:43:12:
                    ba:2d:50:06:02:be:38:56:ac:2f:1b:c2:2e:45:f2:
                    79:93:32:50:1a:f7:f8:8b:ff:df:35:00:3f:42:1f:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F5:3B:D3:BD:72:12:32:A2:A1:12:2D:E6:34:E1:69:3D:0A:33:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05d97146-4181-31d6-98b0-578d44e43028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:24:83:05:cd:69:4d:76:dc:7e:7e:69:19:b1:bc:f3:f6:
         fb:69:5b:d7:0a:c8:30:a4:e4:57:22:e9:ad:f4:f5:3d:7a:0b:
         4f:2f:62:cd:31:2a:6c:55:ad:e5:b9:82:98:d9:88:45:33:e2:
         55:ce:26:bf:af:f6:64:30:4f:5a:1d:e0:b3:de:31:c6:35:37:
         76:2d:7e:af:69:7c:66:04:35:b0:0c:ef:45:14:01:58:9e:82:
         76:b5:03:d6:cd:f0:1e:ba:df:82:91:b7:17:56:52:67:b8:21:
         99:4e:05:fa:cb:c5:fa:d8:6c:11:b9:67:89:85:dc:fb:fa:2c:
         66:50:be:91:25:51:56:3b:b7:83:5b:fb:33:c7:71:9d:1b:d6:
         ae:1a:6f:66:ff:43:b2:1d:37:57:9e:e5:dd:11:4d:c5:4f:94:
         ef:bd:cc:83:4e:79:ce:8c:ab:8e:cc:30:05:6a:8e:14:36:0c:
         92:a0:20:a7:b4:58:70:22:79:d4:1f:5e:e9:69:c5:20:71:c4:
         e1:a8:b9:12:e7:49:9f:13:25:7f:07:73:c7:cb:37:2f:d2:56:
         3f:d1:80:a1:16:ff:a3:f1:58:5b:96:c7:b3:ce:dc:9e:e1:99:
         a8:a4:df:96:23:86:8d:4e:6c:78:93:64:1b:1b:60:ce:c0:e7:
         fa:ec:9f:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0PBkFMfURNkVVJ+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMwNDE3MTExOFoXDTI2MDYwMjE2MTExOFowLzEtMCsGA1UEAxMk
YjA4Mzc5ZTEtOTViMC00ZTVmLWI4YjctNGFmNzEwYzhmYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVUisb9E7RDeVhD0avMFtrTgsmcM1i9TFDiv
YIG8nKF4LEWqFbiyLBHOnBSqL4Y5WvkwkphqTniXx6XKb7e8HhwkSMMHxMwyjUTT
W7Jm+EVo3sTebD844/bwcIknQ7u0cdKziHLNjmDpnB+JsU1T6s477QqMDGbGOn0t
Mnc3KGzOyohsw7UHhnVJ/n9Eyb9PMpErcPhzsySFeemorwN7os9cI90B0VdlZQ9H
Ols8WZSV2tytIdo4+zjVQuwE9znUSb/k1FuwjmZ/Fb6IlMoOz5Ue5LkjaPVbDEZE
6Tx7QxK6LVAGAr44VqwvG8IuRfJ5kzJQGvf4i//fNQA/Qh//UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA71O9O9chIyoqESLeY04Wk9CjMsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDVkOTcxNDYtNDE4MS0z
MWQ2LTk4YjAtNTc4ZDQ0ZTQzMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGl7JIMFzWlNdtx+fmkZsbzz9vtpW9cKyDCk5Fci6a309T16C08vYs0x
KmxVreW5gpjZiEUz4lXOJr+v9mQwT1od4LPeMcY1N3Ytfq9pfGYENbAM70UUAVie
gna1A9bN8B6634KRtxdWUme4IZlOBfrLxfrYbBG5Z4mF3Pv6LGZQvpElUVY7t4Nb
+zPHcZ0b1q4ab2b/Q7IdN1ee5d0RTcVPlO+9zINOec6Mq47MMAVqjhQ2DJKgIKe0
WHAiedQfXulpxSBxxOGouRLnSZ8TJX8Hc8fLNy/SVj/RgKEW/6PxWFuWx7PO3J7h
maik35Yjho1ObHiTZBsbYM7A5/rsn4Q=
-----END CERTIFICATE-----
Generated at Thu Mar 5 10:44:09 2026 by rpki-client