Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e0c00a-ea92-3a9f-b583-7396df5904f2.roa
File:                     05e0c00a-ea92-3a9f-b583-7396df5904f2.roa (raw, json)
Hash identifier:          uZyzXrPs3tKFUuTeeOBYLXR3bBrln43UfgeGvy/4xyI=
Subject key identifier:   08:24:C6:DA:BF:9F:33:14:14:20:F9:42:0C:9A:83:07:8E:01:91:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DB34035411FC7B8246D68C680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e0c00a-ea92-3a9f-b583-7396df5904f2.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        108.165.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:35:41:1f:c7:b8:24:6d:68:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=c2c87d79-aef0-4de5-9d8d-7cc602b4197b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:46:99:9b:d7:f5:63:d8:e2:2a:ce:03:3b:
                    1a:dc:88:77:ee:1e:57:21:72:0b:1a:32:93:d5:b5:
                    ec:da:0c:31:2a:61:cb:0e:0e:0e:27:08:57:dc:c2:
                    1b:d6:60:7c:8a:17:2f:b4:92:ee:55:13:65:7b:7d:
                    3c:cd:eb:d9:1e:dd:41:94:bb:d0:16:d6:f8:a2:d4:
                    c3:f8:bf:c3:ef:1d:90:cb:10:16:d5:12:5e:41:f6:
                    d2:b6:67:07:41:79:5d:8b:03:95:f0:4f:ab:75:b0:
                    b7:62:e7:ca:a1:c5:c2:be:38:5e:25:50:c7:73:42:
                    af:b4:da:a3:f5:41:11:f1:53:02:d4:60:18:c5:a8:
                    97:6b:f5:8a:ff:f5:6d:b6:f5:4d:03:cf:e1:4f:06:
                    ae:24:01:45:9b:e8:17:bb:05:e4:84:44:8c:0f:e2:
                    ab:32:41:bd:6b:09:62:9d:5d:7f:22:e3:56:68:85:
                    5d:19:b4:72:f9:84:5a:6f:b8:15:18:26:eb:95:1d:
                    8c:bf:53:28:03:63:77:ac:86:ac:b1:8c:65:23:f6:
                    05:03:cf:3a:86:ca:30:76:e4:f4:38:3c:1e:bf:49:
                    0e:32:ad:d9:01:6f:f3:41:37:c2:0a:71:11:ae:62:
                    29:10:53:4d:18:99:2d:fc:f5:ce:58:b0:51:d2:af:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:C6:DA:BF:9F:33:14:14:20:F9:42:0C:9A:83:07:8E:01:91:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05e0c00a-ea92-3a9f-b583-7396df5904f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:1a:4f:ef:f0:21:08:f8:ac:80:03:4c:20:07:57:e3:c5:
         e8:90:92:a3:87:c6:e8:3f:c7:d2:60:35:f4:8e:04:56:77:61:
         1a:50:77:a2:1e:25:58:11:39:2a:8b:d7:3b:4c:eb:62:d3:95:
         97:88:82:58:85:a0:69:28:bd:58:8a:fe:b1:58:57:0e:27:c2:
         41:0b:91:31:f0:a1:12:7c:1b:9c:7b:c6:10:86:27:57:da:e6:
         50:89:c0:11:dd:18:bf:40:b7:d3:e9:c2:0b:a5:99:82:ef:ee:
         4c:d3:aa:84:4e:06:96:77:ac:07:85:79:57:32:88:d1:32:71:
         39:99:7d:15:07:dc:d5:39:4a:8c:98:cf:98:ab:fb:db:ff:08:
         db:df:2a:f5:d3:e1:59:1e:af:ea:5b:66:5f:b8:38:0f:01:8e:
         13:9f:a6:ce:31:ba:01:df:6b:31:c8:2f:5e:35:95:70:97:df:
         fa:a1:64:08:2a:e0:d2:29:8f:24:b7:d5:90:ec:f4:c9:a9:60:
         b0:4b:02:1b:c6:87:52:b2:8d:fc:9c:04:98:f1:e0:d4:74:39:
         5a:2b:c6:cb:5a:2f:1a:10:b1:19:8a:2c:c0:56:7b:28:12:5a:
         3b:b9:a4:3e:2b:0d:67:86:f7:13:84:88:fd:91:f6:15:50:98:
         5b:ce:e3:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zQDVBH8e4JG1oxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk
YzJjODdkNzktYWVmMC00ZGU1LTlkOGQtN2NjNjAyYjQxOTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx1GmZvX9WPY4irOAzsa3Ih37h5XIXILGjKT
1bXs2gwxKmHLDg4OJwhX3MIb1mB8ihcvtJLuVRNle308zevZHt1BlLvQFtb4otTD
+L/D7x2QyxAW1RJeQfbStmcHQXldiwOV8E+rdbC3YufKocXCvjheJVDHc0KvtNqj
9UER8VMC1GAYxaiXa/WK//VttvVNA8/hTwauJAFFm+gXuwXkhESMD+KrMkG9awli
nV1/IuNWaIVdGbRy+YRab7gVGCbrlR2Mv1MoA2N3rIassYxlI/YFA886hsowduT0
ODwev0kOMq3ZAW/zQTfCCnERrmIpEFNNGJkt/PXOWLBR0q/r2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgkxtq/nzMUFCD5QgyagweOAZH5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDVlMGMwMGEtZWE5Mi0z
YTlmLWI1ODMtNzM5NmRmNTkwNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKP2Gk/v8CEI+KyAA0wgB1fjxeiQkqOHxug/x9JgNfSOBFZ3YRpQd6Ie
JVgROSqL1ztM62LTlZeIgliFoGkovViK/rFYVw4nwkELkTHwoRJ8G5x7xhCGJ1fa
5lCJwBHdGL9At9PpwgulmYLv7kzTqoROBpZ3rAeFeVcyiNEycTmZfRUH3NU5SoyY
z5ir+9v/CNvfKvXT4Vker+pbZl+4OA8BjhOfps4xugHfazHIL141lXCX3/qhZAgq
4NIpjyS31ZDs9MmpYLBLAhvGh1KyjfycBJjx4NR0OVorxstaLxoQsRmKLMBWeygS
Wju5pD4rDWeG9xOEiP2R9hVQmFvO41Y=
-----END CERTIFICATE-----
Generated at Mon May 4 12:55:21 2026 by rpki-client